> Apparently there are a number of packet reflectors (usually > running on a Unix machine) that work in theory, how do these > work in actual practice, what kind of performance and > reliability to they have, and which work well for traffic > collection?
I have had good results with samplicator: http://www.switch.ch/tf-tant/floma/sw/samplicator/ I haven't had any problems with it handling fairly heavy loads and the CPU impact is minimal. Under very heavy loads you might want to bump up the receive buffer (the -b command-line option). Bradley
