From owner-freebsd-questions  Sat Aug  8 08:32:48 1998
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Received: (from majordom@localhost)
          by hub.freebsd.org (8.8.8/8.8.8) id IAA23701
          for freebsd-questions-outgoing; Sat, 8 Aug 1998 08:32:48 -0700 (PDT)
          (envelope-from owner-freebsd-questions@FreeBSD.ORG)
Received: from david.siemens.de (david.siemens.de [192.35.17.14])
          by hub.freebsd.org (8.8.8/8.8.8) with ESMTP id IAA23693
          for <freebsd-questions@freebsd.org>; Sat, 8 Aug 1998 08:32:45 -0700 (PDT)
          (envelope-from andre.albsmeier@mchp.siemens.de)
X-Envelope-Sender-Is: andre.albsmeier@mchp.siemens.de (at relayer david.siemens.de)
Received: from mail.siemens.de (salomon.siemens.de [139.23.33.13])
	by david.siemens.de (8.9.1/8.9.1) with ESMTP id RAA04661
	for <freebsd-questions@freebsd.org>; Sat, 8 Aug 1998 17:32:22 +0200 (MET DST)
Received: from curry.mchp.siemens.de (daemon@curry.mchp.siemens.de [146.180.31.23])
	by mail.siemens.de (8.9.1/8.9.1) with ESMTP id RAA25423
	for <freebsd-questions@freebsd.org>; Sat, 8 Aug 1998 17:32:22 +0200 (MET DST)
Received: (from daemon@localhost)
	by curry.mchp.siemens.de (8.8.8/8.8.8) id RAA22483
	for <freebsd-questions@freebsd.org>; Sat, 8 Aug 1998 17:32:24 +0200 (CEST)
From: Andre Albsmeier <andre.albsmeier@mchp.siemens.de>
Message-Id: <199808081532.RAA18920@internal>
Subject: Does this impose a high load on a system?
To: freebsd-net@FreeBSD.ORG
Date: Sat, 8 Aug 1998 17:32:17 +0200 (CEST)
Cc: freebsd-questions@FreeBSD.ORG
X-Mailer: ELM [version 2.4ME+ PL40 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Hello,

I am running a nice little program named arpwatch. It collects
information about new machines being attached to a network.
I do this because I can monitor if someone links a new
machine to our nets.

For this operation, the network interface is put into promiscuous mode.
IIRC, this means that all packets are passed to the kernel and maybe
even all to the running program (arpwatch). I wonder if this causes
a high load on the machine since I think it might have to process
a lot of packages which normally would have thrown away.

When looking at the arpwatch process, the time consumed is rather
low but I don't know what's going on in a different place maybe...

Thanks,

	-Andre

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message