From owner-freebsd-net@FreeBSD.ORG Mon Apr 28 04:27:41 2008 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 1BC4E106564A for ; Mon, 28 Apr 2008 04:27:41 +0000 (UTC) (envelope-from ganbold@micom.mng.net) Received: from publicd.ub.mng.net (publicd.ub.mng.net [202.179.0.88]) by mx1.freebsd.org (Postfix) with ESMTP id C29CB8FC0C for ; Mon, 28 Apr 2008 04:27:40 +0000 (UTC) (envelope-from ganbold@micom.mng.net) Received: from [202.179.0.164] (helo=daemon.micom.mng.net) by publicd.ub.mng.net with esmtpa (Exim 4.69 (FreeBSD)) (envelope-from ) id 1JqKiw-000PZj-Bz for freebsd-net@freebsd.org; Mon, 28 Apr 2008 12:12:18 +0800 Message-ID: <48154EA2.6070105@micom.mng.net> Date: Mon, 28 Apr 2008 12:12:18 +0800 From: Ganbold User-Agent: Thunderbird 2.0.0.12 (X11/20080304) MIME-Version: 1.0 To: freebsd-net@freebsd.org X-Enigmail-Version: 0.95.6 OpenPGP: id=78F6425E Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Subject: capturing packets on 250mb link X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 28 Apr 2008 04:27:41 -0000 Hi all, What is the best way to capture packets on 250mb link? What kernel features/modules or tools (less CPU/RAM overhead) should I use? I have FreeBSD 7.0-STABLE machine ( CPU: Intel(R) Xeon(TM) CPU 2.80GHz (2822.51-MHz 686-class CPU), FreeBSD/SMP: Multiprocessor System Detected: 2 CPUs 1GM RAM, ad2: 76319MB at ata1-master SATA150). #uname -an FreeBSD ng1.micom.mng.net 7.0-STABLE FreeBSD 7.0-STABLE #3: Sat Apr 26 14:08:06 ULAT 2008 tsgan@ng1.micom.mng.net:/usr/obj/usr/src/sys/NG i386 #pciconf -lv|more ... bge0@pci0:2:0:0: class=0x020000 card=0x1659103c chip=0x165914e4 rev=0x11 hdr=0x00 vendor = 'Broadcom Corporation' device = 'BCM5721 NetXtreme Gigabit Ethernet PCI Express' class = network subclass = ethernet ... Are there any considerations on hardware? thanks in advance, Ganbold -- Cats, no less liquid than their shadows, offer no angles to the wind.