Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 22 May 2000 16:16:56 -0700 (PDT)
From:      Christopher Nielsen <cnielsen@pobox.com>
To:        Graham Wheeler <gram@cequrux.com>
Cc:        Dmitry Samersoff <dms@wplus.net>, freebsd-hackers@FreeBSD.ORG, freebsd-net@FreeBSD.ORG
Subject:   Re: [net] bpf question
Message-ID:  <Pine.BSF.4.21.0005221611020.5955-100000@cassandra.wayward-volvo.org>
In-Reply-To: <39292998.4C55739A@cequrux.com>

next in thread | previous in thread | raw e-mail | index | archive | help
On Mon, 22 May 2000, Graham Wheeler wrote:

> If my memory serves me correctly, Marcus Ranum wrote a white paper on
> IDS systems in the early days of NFR, in which he said that the existing
> configuration of BPF was inadequate for capturing all packets on a fast
> link, and suggested a patch to improve the situation. THe patch involved
> bumping up a buffer from about 16kb to 256kb. Unfortunately I no longer
> have the details handy, but if you did a search for BPF/IDS/NFR/Ranum
> you might find something.

http://www.nfr.net/forum/publications/LISA-97.htm

-- 
Christopher Nielsen
(enkhyl|cnielsen)@pobox.com
Enkhyl on IRC
Space monekys ate my brain: No such file or directory



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-hackers" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.BSF.4.21.0005221611020.5955-100000>