Jonathan Stone <jonathan@DSG.Stanford.EDU> writes: > For the record: I've commited changes to libpcap that will automatically > probe for, and use, bpf buffers up to 4 Mbytes without recompilation. One last question -- any reason not to use the sysctl to determine the limit now that you added one? Perry