> Can I use libpcap to aggregate a cluster of packets in kernel-space
Not unless the kernel supports that kind of clustering - libpcap is
user-space code.
I don't think the 2.2[.x] kernels support that. I think the 2.4[.x]
kernels support memory-mapped access to raw packet streams, and that
*might* allow user-mode code to be woken up less frequently than once
per incoming packet - and would also eliminate the kernel-to-user-space
copy - so adding support for that to libpcap might help.
libpcap currently doesn't support that, however (I don't think Alexey
Kuznetzov's versions support that; it supports the "turbo packet"
mechanism for which he has a patch, but I don't think it supports the
2.4[.x] version).
-
This is the TCPDUMP workers list. It is archived at
http://www.tcpdump.org/lists/workers/index.html
To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
