> On Sat, Sep 25, 2004 at 12:51:45PM -0400, Michael Scheidell wrote: > > Whats faster? rebuild kernel with dozens of bpf's or use the server? > > target is fbsd 4.10, nessus 2.0.12. > > Dozens (hundreds) of bpfs will be faster. README.BPF has this disclaimer: (and I thought my name was in it somewhere at one point in time ;)
If you can not recompile your kernel, you can try to run the configure script with the option --enable-bpf-sharing. In this case, nessusd will try to share one /dev/bpf among multiple processes and do the filtering in userland. NOTE THAT THIS OPTION IS HIGHLY EXPERIMENTAL AND WE DO NOT RECOMMAND ENABLING IT. (note: this is a nessus config option, not a kernel option. I guess the recommend way (and default in fbsd ports) is to use bpf's I think fbsd ports checks to see that you have at least 64 bpf's or it won't compile without the config option. _______________________________________________ Nessus mailing list [EMAIL PROTECTED] http://mail.nessus.org/mailman/listinfo/nessus
