FYI nCap

[Russell Fulton]

I thought this message from Phil Wood might be of interest to this  
group.   Phil maintains the libpcap version for linux ring buffer.

R

Begin forwarded message:

> From: Phil Wood <cpw at lanl.gov>
> Date: 25 June 2009 1:49:34 AM
> To: Russell Fulton <r.fulton at auckland.ac.nz>
> Subject: Re: [Snort-users] installing libpcap-0.9.20060417 (linux  
> kernel ring buffer)
>
>
> On Wed, 2009-06-24 at 11:30 +1200, Russell Fulton wrote:
>> THanks very much Phil!
>
> Your welcome.
>
> BTW, Luca Deri has a new libpcap out that will  turn my stuff into a
> dinosaur.  If you are in a 10gigabit environment, where the rates are
> hovering around that level, then you may want to go this route.
>
>  http://luca.ntop.org/nCap/
>
> If you do, let me know how it goes.