Ntop development team has always developed high performance packet capture solutions that I would like to take a look into it -
Virtual PF_RING can only be used with KVM, with this it will bypass many copy operations and capture packets in line rate. I think I will test it on my Linux box and see how it goes. By the way you need to donate to obtain it.
Cheers ;]
No comments:
Post a Comment