Wireshark · Wireshark-dev: Re: [Wireshark-dev] dumpcap -B options default.

[Guy Harris <guy@xxxxxxxxxxxx>]

On Feb 27, 2013, at 9:01 AM, Anders Broman <anders.broman@xxxxxxxxxxxx> wrote:

> Looking in libpcap sources it seems like our default of 1 MB actually decreases the buffer if mmap is used, should the default be increased to 2MB to reflect libpcaps default

That's probably the best answer - on the platforms where libpcap can set the buffer size, if libpcap tries to set it to a larger size than is allowed, no error occurs, it's just silently clamped.