Comments (7)
jelu
commented on June 16, 2024
Seen this also on all Linux based platforms, FreeBSD and OpenBSD does not report this. Might be that Linux actually does not support BPF on the interface that pcap opens, will look at it when I have time.
from dsc.
aabdnn
commented on June 16, 2024
FYI: I have just seen the same thing on our server, running CentOS 7.
from dsc.
SvenVD
commented on June 16, 2024
Does it mean capturing fails?
from dsc.
jelu
commented on June 16, 2024
No, not directly.
If filtering is not done at kernel level and your receiving a lot of
packets that are meant to be filtered it may have a huge impact on
processing when it's filtered higher up.
That may lead to drops that would not happen if it was done at kernel level.
from dsc.
SvenVD
commented on June 16, 2024
Any idea when this will be fixed? I did not have this warning with the same bpf filter but with the older dsc collector (2012 ish) on CentOS 6
For the record, I am now getting this warning on a CentOS 7 with the latest dsc rpm collector
Thanks
from dsc.
jelu
commented on June 16, 2024
The warning did not exist before, it is new and it can't be fixed in DSC
because it's a matter of what kernel API are available for libpcap.
It is just a warning, it's not fatal and if your filters are the same then
operational wise it is the same as before.
The warning does not appear on UNIX systems that have the right support for
kernel level filtering such as FreeBSD and OpenBSD.
The warning can also appear on these systems if the filter is too large to
fit within the kernel, then it's processed in userland.
from dsc.
SvenVD
commented on June 16, 2024
Okay, thanks for this clear explanation
from dsc.
Related Issues (20)
- doh
- doh
- GeoIP discontinued, use libmaxminddb HOT 1
- Debian install instructions incomplete HOT 2
- unable to pcap thread run: nothing to capture on HOT 2
- DNSTAP support HOT 1
- Missing configure script in release tarballs HOT 1
- Response time indexer not working HOT 2
- Prometheus exporter interface for dsc? HOT 3
- Debian package for the 2.8.1 release not available HOT 2
- Stretch builds unavailable HOT 1
- List of Delegated TLDs in query_classification_index.c is v old HOT 1
- DNSTAP - uv_pipe_bind() failed: address already in use HOT 2
- DSC with DNSTAP configured logging debug on syslog HOT 2
- Compatibility issues with musl on Alpine HOT 1
- client_subnet indexer IPv6 performance issues HOT 6
- DNSTAP protocols HOT 3
- Remove hardcoded chmod from the code and use normal umask for permissions HOT 1
- Wrong TLDs when Public Suffix List is enabled: HOT 4
- CentOS 8 instructions need some love
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from dsc.