From owner-freebsd-net@FreeBSD.ORG  Wed Dec  8 05:41:36 2004
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id DA6DB16A4FE
	for <freebsd-net@freebsd.org>; Wed,  8 Dec 2004 05:41:36 +0000 (GMT)
Received: from wproxy.gmail.com (wproxy.gmail.com [64.233.184.194])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 7716843D41
	for <freebsd-net@freebsd.org>; Wed,  8 Dec 2004 05:41:36 +0000 (GMT)
	(envelope-from chip.gwyn@gmail.com)
Received: by wproxy.gmail.com with SMTP id 58so345600wri
        for <freebsd-net@freebsd.org>; Tue, 07 Dec 2004 21:41:35 -0800 (PST)
DomainKey-Signature: a=rsa-sha1; q=dns; c=nofws;
	s=beta; d=gmail.com;
	h=received:message-id:date:from:reply-to:to:subject:in-reply-to:mime-version:content-type:content-transfer-encoding:references;
	b=QY7q+P7/uNsM+Q7oRjECxedqZyXgaRbLyJw9IIaRIpXaLDzLgxi773GOlY9s+6Npa1qpepg8eq21HXHGWReBl5eLEzGmG2wGJNZJZJLYlE6fV8oTeOG2leQhrgeOyouHt+Z6VRsDIJXAk+PDCqOUFK1jXNYwspZgH4QpglAujcM=
Received: by 10.54.48.59 with SMTP id v59mr1143242wrv;
        Tue, 07 Dec 2004 21:41:35 -0800 (PST)
Received: by 10.54.57.6 with HTTP; Tue, 7 Dec 2004 21:41:35 -0800 (PST)
Message-ID: <64a8ad980412072141247659e9@mail.gmail.com>
Date: Wed, 8 Dec 2004 00:41:35 -0500
From: chip <chip.gwyn@gmail.com>
To: freebsd-net@freebsd.org
In-Reply-To: <20041207025917.43855.qmail@web42103.mail.yahoo.com>
Mime-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
References: <20041207025917.43855.qmail@web42103.mail.yahoo.com>
Subject: Re: TCPDUMP bandwidth capability
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
Reply-To: chip <chip.gwyn@gmail.com>
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 08 Dec 2004 05:41:37 -0000

On Mon, 6 Dec 2004 18:59:17 -0800 (PST), asdfasdfasd asdfds
<toddcook41@yahoo.com> wrote:
> Hello,
> 
> For those who use TCPDUMP, how much bandwidth have you
> been able to monitor with it without dropping packets?
 
> I've seen it said that BSD is much better for this
> type of thing than Linux, but numbers are heard to
> come by.  Right the right NICs and processing power,
> is line-rate 1Gbps possible?
> 
> Thanks,
> Todd

Take a look at http://luca.ntop.org/Ring.pdf
It has some real numbers to look at that should guide you in your
quest for monitoring bliss.  You might also want to check the NANOG
mailing list archives (http://nanog.org)  for some further
information.  I think there was a fairly recent discussion of this.

--chip
-- 
Just my $.02, your mileage may vary,  batteries not included, etc....