pcap_dispatch blocks on exit if no traffic is seen.
|Category:||-||Estimated time:||0.50 hour|
If the engine is sent a signal to exit in pcap live mode, pcap_dispatch will block until a packet is received.
See the threads below. We can overcome this by setting the pcap
handle to non-blocking but cpu utilization increases a ton. Not that big of an issue but here are some threads explaining it and possible solutions.