I should have sent this to tech-net, too
------- Forwarded Message

From: Steve Bellovin <smb@research.att.com>
To: tech-kern@netbsd.org
Subject: packet capturing
Date: Tue, 13 Jan 2004 15:59:20 -0500

http://luca.ntop.org/Ring.pdf gives some interesting insights into 
packet capture architectures.  I knew that stock systems didn't do very 
well; I'm astonished at how poorly they do at monitoring a network.


		--Steve Bellovin, http://www.research.att.com/~smb



------- End of Forwarded Message



		--Steve Bellovin, http://www.research.att.com/~smb