PCAP_MEMORY issue

["Jefferson, Shawn" <Shawn.Jefferson () bcferries com>]

I'm using PCAP_MEMORY, and the highest I can seem to go is:
PCAP_MEMORY=800000

If I try to increase it, I get error messages when snort is starting:
Error: setsockopt(PACKET_RX_RING): Cannot allocate memory

However, running top shows I've got 1.8 GB of memory left available on this machine.  Is there something else I need to 
tweak to allow a higher amount of memory for libpcap?

PS. I'm using Phil Wood's libpcap.



------------------------------------------------------------------------------
Open Source Business Conference (OSBC), March 24-25, 2009, San Francisco, CA
-OSBC tackles the biggest issue in open source: Open Sourcing the Enterprise
-Strategies to boost innovation and cut costs with open source participation
-Receive a $600 discount off the registration fee with the source code: SFAD
http://p.sf.net/sfu/XcvMzF8H

_______________________________________________
Snort-users mailing list
Snort-users () lists sourceforge net
Go to this URL to change user options or unsubscribe:
https://lists.sourceforge.net/lists/listinfo/snort-users
Snort-users list archive:
http://www.geocrawler.com/redir-sf.php3?list=snort-users