Re: IP monitoring

2002-08-13 Thread Nate Lawson
On Tue, 13 Aug 2002, Sean Hamilton wrote: > Also, forgot to mention, I will need to look inside TCP streams, and know > which user owns them, and which packets pertain to which TCP stream, which > is why I was thinking a module would be more suitable. If I did this in user > space, I'd have to rec

Re: IP monitoring

2002-08-13 Thread Chuck Robey
On Tue, 13 Aug 2002, Sean Hamilton wrote: > Also, forgot to mention, I will need to look inside TCP streams, and know > which user owns them, and which packets pertain to which TCP stream, which > is why I was thinking a module would be more suitable. If I did this in user > space, I'd have to re

Re: IP monitoring

2002-08-13 Thread Sean Hamilton
Also, forgot to mention, I will need to look inside TCP streams, and know which user owns them, and which packets pertain to which TCP stream, which is why I was thinking a module would be more suitable. If I did this in user space, I'd have to reconstruct the streams myself (but as I understand,

IP monitoring

2002-08-13 Thread Sean Hamilton
Greetings, I'm interested in developing a fairly proprietary IP monitoring solution (I want to look for specific trends in specific packets.) Will there be considerable gains from writing some sort of kernel module, vs. a userspace solution? I've never hacked the kernel or written a