Date: Wed, 26 Sep 2001 15:34:29 +0200 From: "Karl M. Joch" <k.joch@kmjeuro.com> To: Laurent Fabre <fabre@matranet.com> Cc: freebsd-security@freebsd.org Subject: Re: LaBrea for BSD? Message-ID: <3BB1D965.6090203@kmjeuro.com> References: <20010924162750.24311@shalmaneser.thelbane.com> <200109241645.SAA02368@malraux.matranet.com> <200109251018.MAA08113@malraux.matranet.com> <200109251339.PAA22725@malraux.matranet.com> <200109251455.QAA28275@malraux.matranet.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Laurent Fabre wrote: > Actually it's a libpcap issue i think. > As soon as the traffic gets high you start loosing frame > and the processing takes huge time to complete. > > So there's a performance issue only in the capture phase > and not on the reply react phase. > > > Problem is i don't see anything else than libpcap to capture packets.... > dont really think so. if starting with -x (not capturing packages) all the activities are logged. look like the box sees all packages. but when removing -x switch it doesnt work as it should. still trying to figure it out, because in the server room are only freebsd boxes. dont want to have a non freebsd box there if possible. Karl To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3BB1D965.6090203>