Wireshark · Ethereal-dev: Re: [ethereal-dev] Probable serious bug in ethereal 0.7.8 and 0.7.9 under Linux

[Guy Harris <guy@xxxxxxxxxx>]

> Supplying a filter
> expression in filter dialog doesn't change anything (well it actually outputs a
> message to the terminal that says: "Kernel filter, protocol ALL, raw packet
> socket",

It doesn't say "TURBO mode (N frames)", for some value of "N"?

If not, that means it's not using Alexey Kuznetzov's changes to suck
packet data directly from buffers in the kernel (bypassing a
kernel-to-user copy), so that's not the source of the problem (as, when
that's used, the code our patch changes is bypassed).