Re: Linux and Network Flight Recorder

Mike Fisk (mfisk@lanl.gov)
Tue, 22 Jun 1999 08:01:08 -0600 (MDT)


We have NFR working using Alexei's ring buffer code in conjunction with
the Linux kernel packet filtering.

It's not a BPF API, but it semes to work just fine.

On Tue, 22 Jun 1999, Rogan Dawes wrote:

> The following message was mailed to the Network Flight Recorder Users
> mailing list as part of a debate on the performance of the Linux packet
> filtering implementation.

> ______________________________ Forward Header __________________________________
> Subject: Re: Redhat 6.0
> Author: "Marcus J. Ranum" <mjr@nfr.net> at Internet-SA
> Date: 99/06/21 11:21 PM
>
>
> >I think NFR might want to take a good look
> >at what can be done with Linux.
>
> We have had Zero customers make Linux a requirement for
> purchase. Obviously someone could change that, by writing
> "I need Linux" on the back of a Purchase Order for, say,
> 200 units, and Linux will get our undivided attention. ;)
>
> Joking aside, we _have_ done a lot with Linux. For each
> version, when it's come out, we've tested its performance
> and found it inadequate. We've explained, in this forum
> and in others, gently and less gently, why Linux' packet
> capture code is mediocre. We've burned considerable man
> hours attempting to transfer clue to Linux religionists,
> and now, I see, to ""technology" journalist" Linux
> religionists. The main answer we get is "if you don't like
> Linux's packet capture, then _FIX_ it."
>
> We don't like it.
>
> Why don't _YOU_ fix it?
>
> C'mon, seriously - one of you Linux heads out there
> could write the bitchenest zero-copy packet capture
> code on the planet. We'll buy you a beer. Hell, we'll
> buy you a case. How about it? We're busy writing studly
> traffic analysis engines. We're busy making them work
> at speeds close to 100mb/s on reasonable hardware running
> reasonable operating systems. We're _BUSY_, get it? Fixing
> Linux is not our job, making the best ID software on the
> market is our job.
>
> Tell you what, smarty-pants. I'll give you $4,000 and a
> cool NFR T-shirt if you write a zero copy-per-packet
> input bpf emulation for Linux. Ok? I'll do one better than
> you can do: I'll put my money where my mouth is.

=====================================================================
Mike Fisk | (505)667-5119 | MS B255
Network Engineering (CIC-5) | | Los Alamos National Lab
mfisk@lanl.gov | FAX: 665-7793 | Los Alamos, NM 87545

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/