From owner-freebsd-net@FreeBSD.ORG  Tue Dec  7 02:59:18 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 1B6FE16A4CF
	for <freebsd-net@freebsd.org>; Tue,  7 Dec 2004 02:59:18 +0000 (GMT)
Received: from web42103.mail.yahoo.com (web42103.mail.yahoo.com
	[66.218.93.196])	by mx1.FreeBSD.org (Postfix) with SMTP id 9EFEA43D6A
	for <freebsd-net@freebsd.org>; Tue,  7 Dec 2004 02:59:17 +0000 (GMT)
	(envelope-from toddcook41@yahoo.com)
Received: (qmail 43857 invoked by uid 60001); 7 Dec 2004 02:59:17 -0000
Comment: DomainKeys? See http://antispam.yahoo.com/domainkeys
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=s1024; d=yahoo.com;
	b=eCEnW4EnWIVZGXpSVKwJ6jQpeaeMKvF6fTzSiNMp6U/SjHzPWx4ukzQ+9etNqvxpmO6z+/wgUkiGzQcDo95v+X1off5Q2Tfyq7KlLcu8yxsTBSAk50JLnt0XAUHh5tIAljABUBzu9RsukzDfQutasZ63MVyxzdGZ5yY8F0bvHVM=
	;
Message-ID: <20041207025917.43855.qmail@web42103.mail.yahoo.com>
Received: from [68.49.148.23] by web42103.mail.yahoo.com via HTTP;
	Mon, 06 Dec 2004 18:59:17 PST
Date: Mon, 6 Dec 2004 18:59:17 -0800 (PST)
From: asdfasdfasd asdfds <toddcook41@yahoo.com>
To: freebsd-net@freebsd.org
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Subject: TCPDUMP bandwidth capability
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 07 Dec 2004 02:59:18 -0000

Hello,

For those who use TCPDUMP, how much bandwidth have you
been able to monitor with it without dropping packets?
I'm considering putting some new servers running BSD
in place purely for sniffing capability, and am quite
content with TCPDUMP, but it won't be a very wise
investment if I start losing packets at, say, 100Mbps.

I've seen it said that BSD is much better for this
type of thing than Linux, but numbers are heard to
come by.  Right the right NICs and processing power,
is line-rate 1Gbps possible?

Thanks,
Todd


		
__________________________________ 
Do you Yahoo!? 
Yahoo! Mail - Helps protect you from nasty viruses. 
http://promotions.yahoo.com/new_mail