> Has anyone seen this? It's a pretty sad commentary on Linux packet
> handling. Is there truth to it, and if so, plans to fix it?
NFR uses a BSD API which Linux doesn't support.
Under Linux, one syscall per-packet is required, which quite
seriously limits the rate at which packets can be sniffed. It's
not exactly a "sad commentary" - it's missing feature which
proves to be a deficiency for this application.
I imagine that something like
ftp://ftp.inr.ac.ru/ip-routing/lbl-tools/kernel-turbopacket.dif.gz
might help to rectify the situation.
Matthew.
-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/