[dsc] Allow multiple bpf_program and append content

[Klaus Darilion]

# dsc -v
dsc version 2.0.0-rc.1 





BPF program is: (host 111.222.68.96 or ..........) and (udp port 53 or tcp port 53)
Opening interface eth1
Warning: Kernel filter failed: Cannot allocate memory
Pcap_init: FD_SET 4
Opening interface eth2
Warning: Kernel filter failed: Cannot allocate memory
Pcap_init: FD_SET 5


regards
Klaus




> -----Ursprüngliche Nachricht-----
> Von: Jerry Lundström [mailto:jerry at dns-oarc.net]
> Gesendet: Montag, 23. Jänner 2017 10:46
> An: Klaus Darilion <klaus.darilion at nic.at>
> Cc: dsc at dns-oarc.net
> Betreff: Re: [dsc] Allow multiple bpf_program and append content
> 
> Hi Klaus,
> 
> On 01/20/17 22:10, Klaus Darilion wrote:
> > If the BPF filter becomes too long, it does not fit into the kernel
> and libpcap filters in userspace. This is much slower and caused lots of
> dropped packets on our servers. We only detected the reason as we once
> run dsc in forground/debug mode - then a warning is logged to the
> console on startup.
> 
> Can you send me the warning output and what version are you running?
> 
> Cheers,
> Jerry