two sniffers on the same eth ifc performance impact?

From: Anton Chuvakin (anton@chuvakin.org)
Date: 03/22/02 

Date: Fri, 22 Mar 2002 10:58:02 -0500 (EST)
From: Anton Chuvakin <anton@chuvakin.org>
To: focus-ids@securityfocus.com

Hi all,

Just a quick question - I was not able to find an answer anywhere, and my
thinking process somehow doesn't lead me to an answer this time ;-)

What is the performance impact of running two sniffers on the same eth0
interface in UNIX/Linux. For example, for whatever weird reason I want to
run two snorts or snort and tcpdump? Will it influence the packet drop
rates? My problem is that I can test it in low traffic environment only
and it will have to be deployed in high-traffic one ;-(

Thanks a lot in advance!

Best, 

-- 
     Anton A. Chuvakin, Ph.D.
     http://www.chuvakin.org
   http://www.info-secure.org