21:04:35 <Denis> hello all. does anybody know an equivalent of the "sysctl net.bpf.maxbufsize" command on *BSD?
21:05:25 <Denis> illumos source code defines BPF_MAXBUFSIZE to two different values, but it does not seem to use it
21:06:20 <richlowe> the port of bpf is... weird I think
21:06:44 <richlowe> but no, I don't know an equivalent toggle, sorry :\
21:07:17 <richlowe> the headers you're seeing are how there's one set of bpf in ipf, and one set actually in the OS, and neither is entirely normal.  I think.
21:12:48 <Denis> it is not in getconf output either
21:13:58 <Denis> the effective maximum value must be at least 524288 because that's what libpcap sets on the socket
21:16:45 <Denis> well, maybe it does not, pcap-bpf.c tries to accommodate at least 6 OSes, but for *BSD systems the sysctl value (524288 or greater) makes perfect sense