Re: LaBrea for BSD?

From: Karl M. Joch (k.joch@kmjeuro.com)
Date: 09/26/01


Date: Wed, 26 Sep 2001 15:34:29 +0200
From: "Karl M. Joch" <k.joch@kmjeuro.com>
To: Laurent Fabre <fabre@matranet.com>


Laurent Fabre wrote:

> Actually it's a libpcap issue i think.
> As soon as the traffic gets high you start loosing frame
> and the processing takes huge time to complete.
>
> So there's a performance issue only in the capture phase
> and not on the reply react phase.
>
>
> Problem is i don't see anything else than libpcap to capture packets....
>

dont really think so. if starting with -x (not capturing packages) all
the activities are logged. look like the box sees all packages. but when
removing -x switch it doesnt work as it should. still trying to figure
it out, because in the server room are only freebsd boxes. dont want to
have a non freebsd box there if possible.

Karl

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message



Relevant Pages

  • Re: Video capture/editing?
    ... keep a windows computer around for. ... The capture setup is a PCI card ... same capture hardware? ... version of FreeBSD, and it may work fine in i386. ...
    (freebsd-questions)
  • BPF problems on FreeBSD 7.0
    ... (the Bro network intrusion detection system) ... The problem is that the Bro process, after running fine for a few ... We haven't yet seen these problems with any other libpcap ... running FreeBSD 6.x (we haven't run 6.x on the same boxes but we see ...
    (freebsd-net)
  • POSIX Threads locks failed
    ... Sorry for my english. ... I use libpcap and libc_r under FreeBSD 5.2.1-p9, ... I'm getting packets from bpf with pcap_next function in one ...
    (freebsd-current)
  • ports libpcap
    ... I just discovered that there is a port of libpcap. ... performs better than the pcap that comes with FreeBSD? ... Paul Schmehl ...
    (freebsd-questions)
  • Re: Video / Audio Capture Framework in FreeBSD ?
    ... > Does anyone know if there will be a Video / Audio capture framework ... > that will be part of FreeBSD in the next few years? ... > capture from a broader kind of video devices. ... Also what about motion capture (motion detection triggering ...
    (freebsd-questions)