tcpdump mailing list archives

Re: Filter complexity and performance


From: Fabian Schneider <schneifa () net in tum de>
Date: Mon, 15 Jan 2007 18:24:37 +0100 (CET)


Hi,

Will we be able to capture twice as few packets (hopefully not)? I was
hoping to kinda avoid the need to do this test if anyone has already did
some sort of evaluation... 

Complex filters are cheap in terms of capturing performance. For a 
detailed examination take a look at: 

http://www.net.informatik.tu-muenchen.de/~schneifa/papers/da.pdf

(on page 40 (in Document count) section 6.3.1) 

   bye
   Fabian

-- 
Fabian Schneider (Dipl. Inf.), An-Institut Deutsche Telekom Laboratories
Technische Universitaet Berlin, Fakultaet IV -- E-Technik und Informatik
address: Sekr. TEL 4, Ernst-Reuter-Platz 7, 10587 Berlin
e-mail: fabian () net in tum de, WWW: http://www.net.in.tum.de/~schneifa
phone: +49 30 8353 - 58513, mobile: +49 160 479 4397
-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.


Current thread: