Subject: Re: divert socket?
To: Perry E. Metzger <>
From: Darren Reed <>
List: tech-kern
Date: 10/25/2001 10:52:38
In some email I received from Perry E. Metzger, sie wrote:
> Darren Reed <> writes:
> > > To my mind, bpf is sufficient. Hell, NFR uses it and that's the best IDS
> > > I know.
> > 
> > NFR does not use the same version of BPF as we do.  They optimized it.
> "Optimization", from what I remember, seems to have been largely a
> question of bumping up the buffer size, wasn't it?

Ah, now that I look, bpf in -current is lagging behind output from  Who's the maintainer of libpcap/tcpdump things in NetBSD ?