Date: Fri, 05 Mar 2004 15:22:16 +0100 From: Andre Oppermann <andre@freebsd.org> To: Gleb Smirnoff <glebius@cell.sick.ru> Cc: James <haesu@towardex.com> Subject: Re: My planned work on networking stack Message-ID: <40488D18.89A72F34@freebsd.org> References: <4043B6BA.B847F081@freebsd.org> <200403011507.52238.wes@softweyr.com> <20040302031625.GA4061@scylla.towardex.com> <20040302042957.GH3841@saboteur.dek.spc.org> <20040302082625.GE22985@cell.sick.ru> <20040303181034.GA58284@scylla.towardex.com> <20040304131000.GA41474@cell.sick.ru> <20040304172529.GA86502@scylla.towardex.com> <20040304172651.GA86659@scylla.towardex.com> <20040305140602.GB49148@cell.sick.ru>
next in thread | previous in thread | raw e-mail | index | archive | help
Gleb Smirnoff wrote: > > On Thu, Mar 04, 2004 at 12:26:51PM -0500, James wrote: > J> > that was my thought initially, BUT.. actually... you can > J> > actually do this no problem using mrtd dumps and pick it up with a > J> > program via bgp device :P no need to create another api it seems :) > J> > J> errr??? I meant bpf device... > > Implementing traffic accounting like ip accounting or netflow through > a bpf is generally a bad idea, because of poor performance of such a solution. This is not the case. While common wisdom does indeed suggest that BPF is slow it is in fact not the case. We have a netflow-like per AS-number traffic accounting daemon which takes only 2-3% of the CPU on our core routers. We are currently preparing that software package for public release. -- Andre
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?40488D18.89A72F34>