Re: [net] bpf question

2000-05-22 Thread Jan Koum
i think the buffer is 32K (from BPF_MAXBUFSIZE in bpf.h) and you should be able to bump it up a bit on your box if you wish. it might help. also, maybe we should consider upping the default buffer size in our tree? On Mon, May 22, 2000 at 04:16:56PM -0700, Christopher Nielsen <[EMAIL PROTECTED]>

Re: [net] bpf question

2000-05-22 Thread Christopher Nielsen
On Mon, 22 May 2000, Graham Wheeler wrote: > If my memory serves me correctly, Marcus Ranum wrote a white paper on > IDS systems in the early days of NFR, in which he said that the existing > configuration of BPF was inadequate for capturing all packets on a fast > link, and suggested a patch to

Re: bpf question

2000-05-22 Thread Graham Wheeler
Dmitry Samersoff wrote: > > I have stoped on perforamnce bpf itself. > > Is there alternate driver or can changing of bpf queue in kernel help, and where > I can read about it? If my memory serves me correctly, Marcus Ranum wrote a white paper on IDS systems in the early days of NFR, in which

Re: bpf question

2000-05-20 Thread Robert Watson
On Wed, 17 May 2000, Dmitry Samersoff wrote: > I have traffic metering program using bpf, > it works fine on relatevly free net but looses about 30% > of packets on havy loaded one. Two possibilities come to mind: 1) You machine is too slow (pretty slow), your bus is too slow (ISA), or your

Re: bpf question

2000-05-19 Thread Dan Nelson
In the last episode (May 19), Dmitry Samersoff said: > On 18-May-2000 Travis Cole wrote: > > On Wed, May 17, 2000 at 05:51:59PM +0400, Dmitry Samersoff wrote: > >> I have traffic metering program using bpf, it works fine on > >> relatevly free net but looses about 30% of packets on havy loaded > >

Re: bpf question

2000-05-19 Thread Dmitry Samersoff
On 18-May-2000 Travis Cole wrote: > On Wed, May 17, 2000 at 05:51:59PM +0400, Dmitry Samersoff wrote: >> I have traffic metering program using bpf, >> it works fine on relatevly free net but looses about 30% >> of packets on havy loaded one. > > Are you doing dns lookups? Don't do those and yo

Re: bpf question

2000-05-17 Thread Travis Cole
On Wed, May 17, 2000 at 05:51:59PM +0400, Dmitry Samersoff wrote: > I have traffic metering program using bpf, > it works fine on relatevly free net but looses about 30% > of packets on havy loaded one. Are you doing dns lookups? Don't do those and you may fix your problem. > > Could any body

Re: bpf question

2000-05-17 Thread Wes Peters
Dmitry Samersoff wrote: > > I have traffic metering program using bpf, > it works fine on relatevly free net but looses about 30% > of packets on havy loaded one. > > Could any body suggest me something? A much faster processor? What kind of CPU/memory/network interface are you using? --

bpf question

2000-05-17 Thread Dmitry Samersoff
I have traffic metering program using bpf, it works fine on relatevly free net but looses about 30% of packets on havy loaded one. Could any body suggest me something? Thank you! -- Dmitry Samersoff, [EMAIL PROTECTED], ICQ:3161705 http://devnull.wplus.net * There will come soft rains ... To