From owner-freebsd-net Wed Sep 19 12:51: 9 2001 Delivered-To: freebsd-net@freebsd.org Received: from info.iet.unipi.it (info.iet.unipi.it [131.114.9.184]) by hub.freebsd.org (Postfix) with ESMTP id EF80237B415 for ; Wed, 19 Sep 2001 12:51:05 -0700 (PDT) Received: (from luigi@localhost) by info.iet.unipi.it (8.9.3/8.9.3) id VAA49173; Wed, 19 Sep 2001 21:41:41 +0200 (CEST) (envelope-from luigi) From: Luigi Rizzo Message-Id: <200109191941.VAA49173@info.iet.unipi.it> Subject: Re: ipfw problems ... In-Reply-To: <20010919140735.Y826@elvis.mu.org> from Bill Fumerola at "Sep 19, 2001 02:07:35 pm" To: Bill Fumerola Date: Wed, 19 Sep 2001 21:41:41 +0200 (CEST) Cc: Leif Neland , "Marc G. Fournier" , freebsd-net@FreeBSD.ORG X-Mailer: ELM [version 2.4ME+ PL61 (25)] MIME-Version: 1.0 Content-Type: text/plain; charset=US-ASCII Content-Transfer-Encoding: 7bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org > On Wed, Sep 19, 2001 at 07:39:13PM +0200, Leif Neland wrote: > > > Or you could patch ipfw to be able to use a hash-db :-) > > skipto caches the pointer of the rule its skipping to the first time > it uses that rule. not going to get a better hash hit then that... not enough. The original message was asking for a rule of the form $addr in $set ... where $set is a potentially large set of addresses (or ports as well), which, when "compiled", creates a hash table where one can do the search on O(1) time. With the current syntax we still have to explode the set with individual rules (naive approach) or something resembling a trie (using skipto rules). cheers luigi ----------------------------------+----------------------------------------- Luigi RIZZO, luigi@iet.unipi.it . ACIRI/ICSI (on leave from Univ. di Pisa) http://www.iet.unipi.it/~luigi/ . 1947 Center St, Berkeley CA 94704 Phone (510) 666 2927 . ----------------------------------+----------------------------------------- To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message