From owner-freebsd-hackers Mon May 22 16:17:51 2000 Delivered-To: freebsd-hackers@freebsd.org Received: from cassandra.wayward-volvo.org (cassandra.wayward-volvo.org [207.181.249.203]) by hub.freebsd.org (Postfix) with SMTP id 191F937B63A for ; Mon, 22 May 2000 16:17:49 -0700 (PDT) (envelope-from cnielsen@pobox.com) Received: (qmail 6212 invoked by uid 1000); 22 May 2000 23:16:57 -0000 Received: from localhost (sendmail-bs@127.0.0.1) by localhost with SMTP; 22 May 2000 23:16:56 -0000 Date: Mon, 22 May 2000 16:16:56 -0700 (PDT) From: Christopher Nielsen X-Sender: enkhyl@cassandra.wayward-volvo.org Reply-To: cnielsen@pobox.com To: Graham Wheeler Cc: Dmitry Samersoff , freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG Subject: Re: [net] bpf question In-Reply-To: <39292998.4C55739A@cequrux.com> Message-ID: MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.ORG On Mon, 22 May 2000, Graham Wheeler wrote: > If my memory serves me correctly, Marcus Ranum wrote a white paper on > IDS systems in the early days of NFR, in which he said that the existing > configuration of BPF was inadequate for capturing all packets on a fast > link, and suggested a patch to improve the situation. THe patch involved > bumping up a buffer from about 16kb to 256kb. Unfortunately I no longer > have the details handy, but if you did a search for BPF/IDS/NFR/Ranum > you might find something. http://www.nfr.net/forum/publications/LISA-97.htm -- Christopher Nielsen (enkhyl|cnielsen)@pobox.com Enkhyl on IRC Space monekys ate my brain: No such file or directory To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message