Apparant insect in date processing ...

Peter Van Epp vanepp at sfu.ca
Thu Nov 6 12:07:47 EST 2003


On Thu, Nov 06, 2003 at 11:08:24AM -0500, Carter Bullard wrote:
> Hey Peter,
>    Oh, its just a timestruct, so it won't matter which
> argus generates the record.  So let me take a look at it
> this afternoon, I'll report as soon as I see the little
> arthropod.
> 
> Hope all is very well,
> 
> Carter
> 
	
	Things are OK if extremely busy (which has bad implications for managing
to get 2.0.6 in to production :-)). While looking for how to increase the 
bpf buffer size in Linux I came across this interesting paper on high speed
capture which is well worth reading if you are in to the high volume (i.e. 
Gig) sniffing market:

        Vern Paxton's paper on hs capture is available at

moat.nlanr.net/PAM2003/PAM2003papers/3798.pdf

	There are some real interesting ideas in there (header compression to 
reduce transferred packet size for instance). I have a copy of the code, as
always the problem is time ...

Peter Van Epp / Operations and Technical Support 
Simon Fraser University, Burnaby, B.C. Canada



More information about the argus mailing list