Subject: Re: divert socket?
To: Perry E. Metzger <firstname.lastname@example.org>
From: Darren Reed <email@example.com>
Date: 10/25/2001 10:52:38
In some email I received from Perry E. Metzger, sie wrote:
> Darren Reed <firstname.lastname@example.org> writes:
> > > To my mind, bpf is sufficient. Hell, NFR uses it and that's the best IDS
> > > I know.
> > NFR does not use the same version of BPF as we do. They optimized it.
> "Optimization", from what I remember, seems to have been largely a
> question of bumping up the buffer size, wasn't it?
Ah, now that I look, bpf in -current is lagging behind output from
tcpdump.org. Who's the maintainer of libpcap/tcpdump things in NetBSD ?