Date: Sat, 25 Mar 2006 10:16:19 +0100 From: Phil Regnauld <regnauld@catpipe.net> To: Charles Swiger <cswiger@mac.com> Cc: Paul Haddad <paul.haddad@gmail.com>, freebsd-net@freebsd.org Subject: Re: Non dropping packet monitor Message-ID: <20060325091619.GA96723@moof.catpipe.net> In-Reply-To: <A636D985-E160-46D1-B6EA-4C868B7A88AF@mac.com> References: <944074f30603241446i33f5eb26p187b2d7ff23d73de@mail.gmail.com> <A636D985-E160-46D1-B6EA-4C868B7A88AF@mac.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Charles Swiger (cswiger) writes: > > > >Any suggestions? Is there some pcap option that I need to look at? > > If your dumps will fit into a RAM disk, use that, otherwise you're > presumably [1] going to be limited to how fast you can scribble the > packets to your disks. Figure out the fastest you can do that, and > then use dummynet to limit your network bandwidth to what your system > is capable of capturing... I seem to remember that IPFlter has a facility for logging packets where it's possible to deny forwarding of packets if the process reading the logging socket has disappeared or isn't reading fast enough. Am I wrong ? Phil
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060325091619.GA96723>