Re: Speed issues with bridge firewall

2003-09-02 Thread Damien Miller
Dom De Vitto wrote: Damn straight. That's 94% of wire speed! But largely irrelevant, as it is packets per second and not bytes per second that matter. As it is probably interrupts that are loading the box and not packet processing, you could perster tedu@ for his devpoll patch, but to quote

RE: Speed issues with bridge firewall

2003-09-02 Thread Amir Seyavash Mesry
Henning/Daniel, is there any plans to implement polling in 3.4? Or have a patch for it? Amir Seyavash Mesry [EMAIL PROTECTED] LSI Logic Corporation http://www.lsilogic.com/ Raid Support Test Technician 6145-D Northbelt Parkway Norcross, GA 30071 678-728-1211 NOTICE: This communication

Re: Speed issues with bridge firewall

2003-09-02 Thread Attila Nagy
Damien Miller wrote: I believe the fastest appliance out there currently is the Cisco PIX535, coming in at a max of 1.7gb/s, but the other firewall appliances around are way behind that and are well sub-1gb/s. Nokia IP1260 w/FW-1 quotes 4.2Gbps NetScreen 5400 quotes 12Gbps You can find even

Re: Speed issues with bridge firewall

2003-09-02 Thread Henning Brauer
On Tue, Sep 02, 2003 at 12:12:59AM -0400, Amir Seyavash Mesry wrote: Henning/Daniel, is there any plans to implement polling in 3.4? in 3.4 for sure not. even later - nobody has yet shown that it pays out. -- Henning Brauer, BS Web Services, http://bsws.de [EMAIL PROTECTED] - [EMAIL PROTECTED]

Re: Speed issues with bridge firewall

2003-09-02 Thread Mathew Binkley
Henning Brauer wrote: On Tue, Sep 02, 2003 at 12:12:59AM -0400, Amir Seyavash Mesry wrote: Henning/Daniel, is there any plans to implement polling in 3.4? in 3.4 for sure not. even later - nobody has yet shown that it pays out. If anyone's interested I'm willing to test a patch (as long as

Re: DIOCCHANGERULE anchors

2003-09-02 Thread Gustavo Beltrami Rossi
Hi Daniel, thanks for your quick answer, but I have tried fill the ruleset name and the same error continues: char anchorname[PF_ANCHOR_NAME_SIZE] = test; char rulesetname[PF_RULESET_NAME_SIZE] = rl1; strlcpy(add_rule.anchor, anchorname, PF_ANCHOR_NAME_SIZE); strlcpy(add_rule.ruleset,

Re: DIOCCHANGERULE anchors

2003-09-02 Thread Gustavo Beltrami Rossi
I figured out the problem. I need to initialize the ruleset before I can add the 1st rule! Gustavo Beltrami Rossi wrote: Hi Daniel, thanks for your quick answer, but I have tried fill the ruleset name and the same error continues: char anchorname[PF_ANCHOR_NAME_SIZE] = test; char