Messages in this thread | | | Date | Tue, 22 Jun 1999 08:01:08 -0600 (MDT) | From | Mike Fisk <> | Subject | Re: Linux and Network Flight Recorder |
| |
We have NFR working using Alexei's ring buffer code in conjunction with the Linux kernel packet filtering.
It's not a BPF API, but it semes to work just fine.
On Tue, 22 Jun 1999, Rogan Dawes wrote:
> The following message was mailed to the Network Flight Recorder Users > mailing list as part of a debate on the performance of the Linux packet > filtering implementation.
> ______________________________ Forward Header __________________________________ > Subject: Re: Redhat 6.0 > Author: "Marcus J. Ranum" <mjr@nfr.net> at Internet-SA > Date: 99/06/21 11:21 PM > > > >I think NFR might want to take a good look > >at what can be done with Linux. > > We have had Zero customers make Linux a requirement for > purchase. Obviously someone could change that, by writing > "I need Linux" on the back of a Purchase Order for, say, > 200 units, and Linux will get our undivided attention. ;) > > Joking aside, we _have_ done a lot with Linux. For each > version, when it's come out, we've tested its performance > and found it inadequate. We've explained, in this forum > and in others, gently and less gently, why Linux' packet > capture code is mediocre. We've burned considerable man > hours attempting to transfer clue to Linux religionists, > and now, I see, to ""technology" journalist" Linux > religionists. The main answer we get is "if you don't like > Linux's packet capture, then _FIX_ it." > > We don't like it. > > Why don't _YOU_ fix it? > > C'mon, seriously - one of you Linux heads out there > could write the bitchenest zero-copy packet capture > code on the planet. We'll buy you a beer. Hell, we'll > buy you a case. How about it? We're busy writing studly > traffic analysis engines. We're busy making them work > at speeds close to 100mb/s on reasonable hardware running > reasonable operating systems. We're _BUSY_, get it? Fixing > Linux is not our job, making the best ID software on the > market is our job. > > Tell you what, smarty-pants. I'll give you $4,000 and a > cool NFR T-shirt if you write a zero copy-per-packet > input bpf emulation for Linux. Ok? I'll do one better than > you can do: I'll put my money where my mouth is.
===================================================================== Mike Fisk | (505)667-5119 | MS B255 Network Engineering (CIC-5) | | Los Alamos National Lab mfisk@lanl.gov | FAX: 665-7793 | Los Alamos, NM 87545
- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/
| |