Hi,
On Sun, 14 Mar 1999 [EMAIL PROTECTED] wrote:
> I admit I haven't gone into libpcap sources, but I should think it
> operates on mbufs already in the stack, not on copies of them.
libpcap is a linux-version of the Berkeley Packet Filter, and it's a poor
version of it. Yes, data is copied from kernel memory into user space,
then you get a pointer for it. Extremely inefficient. Check out
http://www.nfr.net ,an open-source packet sniffer which goes way beyond
packet-sniffing. They use FreeBSD as the OS of choice, since they get
better performance out of a Pentium running FreeBSD than out of an Xeon
SMP monster running Linux.
Shachar Tal
-------------
Taub Computer Center, Technion, Israel Institute of Techonlogy
finger [EMAIL PROTECTED] for contact information or public key.
