>      In linux, the packet reception can be done efficiently through the usage of 
>ethernet sockets.
> 
>      In FreeBSD, one of the option is by using the BPF (Berkeley Packet Filter). 
>But, BPF is not a high performance device.
> 
>      So, Can anyone give an alternative way in FreeBSD (other 
> than modifying the driver code), so that high packet-rate reception 
> can be done by without dropping any of the packets ?

I was the one who suggested that this question should be asked on the
tcpdump-workers list.

As a followup to Rajesh P Jain: Have you *measured* this and verified
for yourself that Linux is more efficient than FreeBSD under otherwise
equal conditions - or are you going by what you've heard from others.

What I've heard (many times, in many different forums) is that BPF is
a better (more efficient) packet capture mechanism than what Linux
offers. (See for instance *many* discussions about this on the NFR
mailing list. But note also that NFR made their own packet capture
mechanism mechanism which is even more efficient than BPF.)

Steinar Haug, Nethelp consulting, [EMAIL PROTECTED]
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe

Reply via email to