David Dillow wrote: > > Try libpcap. > > And if you want to maximize the speed, use one modified to use mmap > rings, like http://public.lanl.gov/cpw/
Yes, using mmap can make a huge difference. I've captured 99% of 100Mbit wired ethernet at line speeds with close to minimum size packets with mmap, but on the same machine getting only about 20% of the packets using tcpdump (which uses libpcap). -- Jamie - To unsubscribe from this list: send the line "unsubscribe linux-net" in the body of a message to [EMAIL PROTECTED] More majordomo info at http://vger.kernel.org/majordomo-info.html
