Kaian

From [libpcap man pages](https://www.tcpdump.org/manpages/pcap.3pcap.html) ``` buffer size Packets that arrive for a capture are stored in a buffer, so that they do not have to be read by the application...

Nope, but it make sense with what I've said in the previous note. The problem could be related with slow parsing packets may lead to dropped packets. I haven't checked...

Could you reproduce this problem if you run sngrep using filters from command line? For example, to just capture packets that have as source or destination port 5060 or 5072...

> The low level capture gets ALL the packets from the network interface and sngrep has to filter sip from everything else ? Yes, that's correct. Usually SIP is a...

Hi! We can increase libpcap buffer size using [pcap_set_buffer_size](http://www.tcpdump.org/manpages/pcap_set_buffer_size.3pcap.html) but I don't think it will fix the problem. After some time the buffer will be full and new packets will...

Hi! I have created a new branch called `capture-buffer` to try to test this before creating a parameter and or configuration setting. The above commit changes the capture creation to...

Hi @sergey-safarov !! Currently sngrep 1.x is just being updated only with bugfixes or small enhacements, so changes like this won't probably fit there. There is a glib-2 branch that...

Hi @lrqxyz ! We rarely use sngrep with non privileged users, but according to wiki, you can try the following: https://github.com/irontec/sngrep/wiki#command-line-arguments > Linux users may add capture permissions to sngrep...

Hi @alaertegv Sngrep does not support parsing two vlan headers, and the current version is only receiving bugfixes. If you don't mind, attach a pcap (inside a zip file) to...

Sure! pcaps always help for debuging and testing new features. I can check how the headers are and evaluate if this is just skipping some bytes or a more complex...