tcpdump mailing list archives
Re: Filter complexity and performance
From: Fabian Schneider <schneifa () net in tum de>
Date: Mon, 15 Jan 2007 18:24:37 +0100 (CET)
Hi,
Will we be able to capture twice as few packets (hopefully not)? I was hoping to kinda avoid the need to do this test if anyone has already did some sort of evaluation...
Complex filters are cheap in terms of capturing performance. For a detailed examination take a look at: http://www.net.informatik.tu-muenchen.de/~schneifa/papers/da.pdf (on page 40 (in Document count) section 6.3.1) bye Fabian -- Fabian Schneider (Dipl. Inf.), An-Institut Deutsche Telekom Laboratories Technische Universitaet Berlin, Fakultaet IV -- E-Technik und Informatik address: Sekr. TEL 4, Ernst-Reuter-Platz 7, 10587 Berlin e-mail: fabian () net in tum de, WWW: http://www.net.in.tum.de/~schneifa phone: +49 30 8353 - 58513, mobile: +49 160 479 4397 - This is the tcpdump-workers list. Visit https://cod.sandelman.ca/ to unsubscribe.
Current thread:
- Filter complexity and performance Dmitry Rubinstein (Jan 15)
- Re: Filter complexity and performance Jonathan Gruenhut (Jan 15)
- Re: Filter complexity and performance Fabian Schneider (Jan 15)
- Re: Filter complexity and performance Jefferson Ogata (Jan 16)