Apparant insect in date processing ...
Peter Van Epp
vanepp at sfu.ca
Thu Nov 6 12:07:47 EST 2003
On Thu, Nov 06, 2003 at 11:08:24AM -0500, Carter Bullard wrote:
> Hey Peter,
> Oh, its just a timestruct, so it won't matter which
> argus generates the record. So let me take a look at it
> this afternoon, I'll report as soon as I see the little
> arthropod.
>
> Hope all is very well,
>
> Carter
>
Things are OK if extremely busy (which has bad implications for managing
to get 2.0.6 in to production :-)). While looking for how to increase the
bpf buffer size in Linux I came across this interesting paper on high speed
capture which is well worth reading if you are in to the high volume (i.e.
Gig) sniffing market:
Vern Paxton's paper on hs capture is available at
moat.nlanr.net/PAM2003/PAM2003papers/3798.pdf
There are some real interesting ideas in there (header compression to
reduce transferred packet size for instance). I have a copy of the code, as
always the problem is time ...
Peter Van Epp / Operations and Technical Support
Simon Fraser University, Burnaby, B.C. Canada
More information about the argus
mailing list