Minimize nflog netlink socket receive buffer

We only read the meta data and the packet header
and ignore packet payload

1 files changed, 4 insertions, 1 deletions

diff --git a/lib/collect.c b/lib/collect.c
index 9a4e52b..3e3f7a3 100644
--- a/lib/collect.c
+++ b/lib/collect.c
@@ -139,7 +139,10 @@ void *nfl_collect_worker(void *targs) {
     time(&nf->header->start_time);
 
     int rv;
-    char buf[4096];
+    // Must have at least 128 to account for sizeof(struct iphdr) +
+    // sizeof(struct tcphdr)
+    // plus the size of meta data needed by the library's data structure
+    char buf[128];
     while (*p_cnt_now < cnt_max) {
         if ((rv = recv(fd, buf, sizeof(buf), 0)) && rv > 0) {
             debug("Recv worker #%u: nflog packet received (len=%u)",