From owner-freebsd-net Wed May 2 2:33:57 2001 Delivered-To: freebsd-net@freebsd.org Received: from menelao.polito.it (menelao.polito.it [130.192.3.30]) by hub.freebsd.org (Postfix) with SMTP id B591D37B422 for ; Wed, 2 May 2001 02:33:53 -0700 (PDT) (envelope-from risso@polito.it) Received: (qmail 32285 invoked from network); 2 May 2001 09:33:47 -0000 Received: from truciolo.polito.it (HELO truciolo) (130.192.16.81) by menelao.polito.it with SMTP; 2 May 2001 09:33:47 -0000 From: "Fulvio Risso" To: "Casper Dik" , "Darren Reed" Cc: "Gunther Schadow" , , , , Subject: RE: [altq 829] Re: The future of ALTQ, IPsec & IPFILTER playing together ... Date: Wed, 2 May 2001 11:32:53 +0200 Message-ID: MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 (Normal) X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook IMO, Build 9.0.2416 (9.0.2911.0) Importance: Normal X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4133.2400 In-Reply-To: <200105020736.JAA16563@romulus.Holland.Sun.COM> Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk X-Loop: FreeBSD.org > -----Original Message----- > From: owner-altq@csl.sony.co.jp [mailto:owner-altq@csl.sony.co.jp]On > Behalf Of Casper Dik > Sent: Wednesday, May 02, 2001 09:37 > To: Darren Reed > Cc: Gunther Schadow; snap-users@kame.net; freebsd-net@freebsd.org; > ipfilter@coombs.anu.edu.au; altq@csl.sony.co.jp > Subject: [altq 829] Re: The future of ALTQ, IPsec & IPFILTER playing > together ... > > > > >BPF uses a byte-code language, like Java, to tell the > >matching routine what bits to compare and return a "true or > >false". i.e. you need to build things around it if you want > >to use it for packet matching, etc. > > > BPF doesn't seem to lend itself to "keeping state" either. It's a > packet filtering language that has no provisions for keeping external > state, AFAIK. Just because the 4K memory is allocated on a per-packet basis. Checking at the BPF source code I think it's not a big issue to allocate the memory *once* at the beginning of the capture, and use it to store intermediate results. However, as far as I know, also MPF guys choose to use a distinct set of memory to store intermediate results. Cheers, fulvio To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message