Re: Non dropping packet monitor
- From: Chuck Swiger <cswiger@xxxxxxx>
- Date: Sat, 25 Mar 2006 07:07:36 -0500
Phil Regnauld wrote:
Charles Swiger (cswiger) writes:
Any suggestions? Is there some pcap option that I need to look at?If your dumps will fit into a RAM disk, use that, otherwise you're
presumably [1] going to be limited to how fast you can scribble the
packets to your disks. Figure out the fastest you can do that, and
then use dummynet to limit your network bandwidth to what your system
is capable of capturing...
I seem to remember that IPFlter has a facility for logging
packets where it's possible to deny forwarding of packets
if the process reading the logging socket has disappeared
or isn't reading fast enough. Am I wrong ?
I'm not sure. :-) If what you've suggested _is_ available, it would be a
better solution to the original problem....
--
-Chuck
_______________________________________________
freebsd-net@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "freebsd-net-unsubscribe@xxxxxxxxxxx"
- References:
- Non dropping packet monitor
- From: Paul Haddad
- Re: Non dropping packet monitor
- From: Charles Swiger
- Re: Non dropping packet monitor
- From: Phil Regnauld
- Non dropping packet monitor
- Prev by Date: Re: OT - Quagga/CARP
- Next by Date: Which NIC is better: fxp or dc?
- Previous by thread: Re: Non dropping packet monitor
- Next by thread: Which NIC is better: fxp or dc?
- Index(es):
Relevant Pages
- Re: Non dropping packet monitor
... If your dumps will fit into a RAM disk, use that, otherwise you're ... packets
to your disks. ... if the process reading the logging socket has disappeared ...
(freebsd-net) - Re: Non dropping packet monitor
... tcpdump/pcap style but I can't have packets dropped as ... Is there some pcap
option that I need to look at? ... If your dumps will fit into a RAM disk, use that,
otherwise you're presumably going to be limited to how fast you can scribble the packets to your
disks. ... (freebsd-net)