tcpdump mailing list archives

Re: RFC: a loadable plugin framework for external capture backends


From: Michael Richardson <mcr () sandelman ca>
Date: Sat, 03 Oct 2026 02:45:08 -0400


Guy Harris <gharris () sonic net> wrote:
    >>> Currently we use TPACKET_V2 for immediate mode, as I don't think
    >>> there's a way to get "give me a packet as soon as it arrives, no
    >>> batching" from TPACKET_V3.
    >>
    >> cp pcap-linux.c pcap-linux-tpacketv2.c
    >> mv pcap-linux.c pcap-linux-tpacketv3.c
    >> .. edit until they are two things, both internal "plugins"

    > But that means that "eth0" would have to choose which module to use at
    > activate time, rather than create time, as it doesn't depend on the
    > device name, it depends on whether immediate mode was requested.

Yes, that's true, we would be introducing a new dimension to the question
about what/how to capture.
The ergonomics aren't great for that.  Hmm.

--
]               Never tell me the odds!                 | ipv6 mesh networks [
]   Michael Richardson, Sandelman Software Works        | network architect  [
]     mcr () sandelman ca  http://www.sandelman.ca/        |   ruby on rails    [





_______________________________________________
tcpdump-workers mailing list -- tcpdump-workers () lists tcpdump org
To unsubscribe send an email to tcpdump-workers-leave () lists tcpdump org
%(web_page_url)slistinfo%(cgiext)s/%(_internal_name)s

Current thread: