Subject: Re: non-standard way to capture network traffic
To: Tonnerre <tonnerre@thundrix.ch>
From: Zeljko Vrba <zvrba@globalnet.hr>
List: tech-kern
Date: 09/24/2005 19:13:39
This is an OpenPGP/MIME signed message (RFC 2440 and 3156)
--------------enigAD097F301FD54B194AD3597B
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 7bit

Tonnerre wrote:
> 
> This can probably be done easiest by using pf and pflogd. Just drop and
> log all packets on the interface, and disable outgoing just for not having
> to bother with it. If the processor is fast enough...
> 
It's a dual-CPU Xeon, each on 2GHz, and 3G RAM. Can I somehow take
advantage of both CPUs?

BTW, regarding disk writing speed.. Does somebody here know the rate at
which zlib can compress data on this machine. I.e. could slow disk
bandwidth be compensated with fast in-memory compression before writing?

Thanks for answers.

--------------enigAD097F301FD54B194AD3597B
Content-Type: application/pgp-signature; name="signature.asc"
Content-Description: OpenPGP digital signature
Content-Disposition: attachment; filename="signature.asc"

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org

iD8DBQFDNYlHUIHQih3H6ZQRAn9gAKCiYK0N7B5YzLaH2DDjhLN56oVE5wCeOmFy
YKxXg5sS8AtY1AbAG5ZKMUQ=
=3LAA
-----END PGP SIGNATURE-----

--------------enigAD097F301FD54B194AD3597B--