--- contrib/libpcap/pcap-bpf.c +++ contrib/libpcap/pcap-bpf.c @@ -655,8 +655,8 @@ * XXX - there should be a user-accessible hook to set the * initial buffer size. */ - if ((ioctl(fd, BIOCGBLEN, (caddr_t)&v) < 0) || v < 32768) - v = 32768; + if ((ioctl(fd, BIOCGBLEN, (caddr_t)&v) < 0) || v < 1048576) + v = 1048576; for ( ; v != 0; v >>= 1) { /* Ignore the return value - this is because the call fails * on BPF systems that don't have kernel malloc. And if