On Mon, 22 May 2000, Graham Wheeler wrote:
> If my memory serves me correctly, Marcus Ranum wrote a white paper on
> IDS systems in the early days of NFR, in which he said that the existing
> configuration of BPF was inadequate for capturing all packets on a fast
> link, and suggested a patch to improve the situation. THe patch involved
> bumping up a buffer from about 16kb to 256kb. Unfortunately I no longer
> have the details handy, but if you did a search for BPF/IDS/NFR/Ranum
> you might find something.
http://www.nfr.net/forum/publications/LISA-97.htm
--
Christopher Nielsen
(enkhyl|cnielsen)@pobox.com
Enkhyl on IRC
Space monekys ate my brain: No such file or directory
To Unsubscribe: send mail to [EMAIL PROTECTED]
with "unsubscribe freebsd-hackers" in the body of the message
