Guy Harris wrote: > > On Thu, Nov 29, 2001 at 05:20:20PM +0900, ��ȫ�� wrote: > > I'v known that libpcap and tcpdump implementation on SunOS 5.x is done in user >level. > > So I want to apply BPF to SunOS 5.x to improve performance. > > Is there some way to do that? > > There is, in theory, a way to do that. > > > If exists, ... let me know the way to do that. > > The way to do that is to write a STREAMS module for the SunOS 5.x kernel > - call it "bpfmod", for example - which acts similarly to the "pfmod" > STREAMS module but, instead of using CMU/Stanford stack-machine code for > the filter, uses the BPF engine (from "bpf_filter.c") for the filter. There is something like that for HP-UX that may work under Solaris. Keep in mind however, that it was last integrated with a really old version of libpcap, and I'm sure it has suffered from bitrot. I really should revisit it, but have ben running a perpetual cycle deficit. Also, it is not a complete BPF implementation. It implements the filtering, but not anything like /dev/bpf or what have you. In pcap, you would make a hybrid cross between DLPI and BPF - DLPI for the "setup" and BPF for the packet stream. ftp://ftp.cup.hp.com/dist/networking/misc/ rick jones -- ftp://ftp.cup.hp.com/dist/networking/misc/rachel/ these opinions are mine, all mine; HP might not want them anyway... :) feel free to email, OR post, but please do NOT do BOTH... my email address is raj in the cup.hp.com domain... - This is the TCPDUMP workers list. It is archived at http://www.tcpdump.org/lists/workers/index.html To unsubscribe use mailto:[EMAIL PROTECTED]?body=unsubscribe
