3 Jan
2014
3 Jan
'14
6:13 a.m.
That's not quite true, since libpcap 1.0.0 it has memory mapped the capture buffer into user land. The userland dissector just gets a pointer (returned by pcap_next/pcap_next_ex) into the shared memory, there's no copying involved.
Well, other than from the kernels socket buffer into the capture buffer... but it's one less copy than before :) -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS Development Team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2