david415 / HoneyBadger

Quantum Insert detector/recorder
GNU General Public License v3.0
305 stars 39 forks source link

test BPF sniffer on MacOSX #72

Open david415 opened 9 years ago

david415 commented 9 years ago

This ticket is to test that the BPF ethernet sniffer works in MacOSX.

I've got this here dev branch that I would like for someone to test:

https://github.com/david415/HoneyBadger/tree/71.add-bsd-sniffer.1

david415 commented 9 years ago

it doesn't work on OSX ;-p ... but i think this can easily be fixed. We get the default BPF buffer length... and on OSX it is set to 4096 bytes... so perhaps if we increase it to 32767 it will work fine. Anyway that is the default bufLen on OpenBSD and NetBSD.

david415 commented 9 years ago

We are using my new BSD BPF sniffer now... and it's been merged upstream into gopacket. It will most likely work on OSX... but we won't know until we try.