Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Guy Harris
On Mon, Aug 09, 2004 at 12:21:18PM +1000, Darren Reed wrote: > I did some similar work for bpf & mmap with NetBSD. Yes, I saw those. The guy doing the FreeBSD work appears to be claiming that he dropped fewer packets with his mapped access, but that might just be a result of not time-stamping pac

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Darren Reed
In some email I received from Guy Harris, sie wrote: > Also, speaking of capture speed and memory-mapped devices, there was a > freebsd-hackers thread discussing a netgraph module providing > memory-mapped access to captured packets: I did some similar work for bpf & mmap with NetBSD. See: http:

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Guy Harris
Also, speaking of capture speed and memory-mapped devices, there was a freebsd-hackers thread discussing a netgraph module providing memory-mapped access to captured packets: http://docs.FreeBSD.org/cgi/mid.cgi?20040614124708.A22679 and other messages with the subject "memory mapped packe

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Guy Harris
On Sun, Aug 08, 2004 at 08:29:33AM +0200, Fulvio Risso wrote: > If you take a look at this paper: > > F. Risso, L. Degioanni > An architecture for high performance network analysis > > http://ieeexplore.ieee.org/iel5/7446/20240/00935450.pdf?tp=&arnumber=935450&; > isnumber=20240&arSt=686&ared

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Guy Harris
On Mon, Aug 09, 2004 at 01:08:49AM +1000, Darren Reed wrote: > In some email I received from Fulvio Risso, sie wrote: > > Darren, could you please give us some numbers? > > If you take a look at this paper: > > > > F. Risso, L. Degioanni > > An architecture for high performance network analysi

Re: [tcpdump-workers] advice for heavy traffic capturing

2004-08-08 Thread Darren Reed
In some email I received from Fulvio Risso, sie wrote: > Darren, could you please give us some numbers? > If you take a look at this paper: > > F. Risso, L. Degioanni > An architecture for high performance network analysis > > http://ieeexplore.ieee.org/iel5/7446/20240/00935450.pdf?tp=&arnumb