ubuntu 下关于PCAP_FRAMES设置的原文
来源:互联网 发布:网络拓扑结构的作用 编辑:程序博客网 时间:2024/04/29 03:35
4.1 MMAPed pcap
On Linux, a modified version of libpcap is available that implements a shared memory ring buffer. Phil Woods (cpw@lanl.gov) is the current maintainer of the libpcap implementation of the shared memory ring buffer. The shared memory ring buffer libpcap can be downloaded from his website at http://public.lanl.gov/cpw/.
Instead of the normal mechanism of copying the packets from kernel memory into userland memory, by using a shared memory ring buffer, libpcap is able to queue packets into a shared buffer that Snort is able to read directly. This change speeds up Snort by limiting the number of times the packet is copied before Snort gets to perform its detection upon it.
Once Snort linked against the shared memory libpcap, enabling the ring buffer is done via setting the enviornment variable PCAP_FRAMES. PCAP_FRAMES is the size of the ring buffer. According to Phil, the maximum size is 32768, as this appears to be the maximum number of iovecs the kernel can handle. By using PCAP_FRAMES=max, libpcap will automatically use the most frames possible. On Ethernet, this ends up being 1530 bytes per frame, for a total of around 52 Mbytes of memory for the ring buffer alone.
那么在ubuntu下:
在启动脚本中加入export PCAP_FRAMES=32768
- ubuntu 下关于PCAP_FRAMES设置的原文
- Ubuntu下关于tomcat的几个常见问题
- ubuntu下关于python的东东
- ubuntu系统下关于环境变量的修改
- Ubuntu 13.10 下关于Java的 classpath
- Ubuntu 下关于crontab的使用详解
- Ubuntu下关于tftp的配置
- Ubuntu下关于crontab的使用详解
- Linux下关于网络设置的文件
- Ubuntu下关于KDE鼠标高级设置中两个不太容易搞明白的概念
- Ubuntu下关于Mysql及其图形界面的配置
- ubuntu 下关于软件的查询、安装、卸载
- Ubuntu下关于Mysql及其图形界面的配置
- ubuntu系统下关于环境变量的修改(转)
- ubuntu下关于git的配置和使用
- ubuntu系统下关于环境变量的修改(转)
- Ubuntu下关于Transmission daemon的安装与配置
- ubuntu下关于profile和bashrc中环境变量的理解
- [转]C/C++中关键字static,const,inline,define,typedef的用法及其意义
- SVG study
- 简单的胜利
- 一种非线性函数的曲线拟合方法(函数公式: k = A*(T^a)*exp(E/T) )
- 下层对象调用上层的对象--办法是向上层对象发送消息--- 类似PostMessage()
- ubuntu 下关于PCAP_FRAMES设置的原文
- The history of STL
- setsockopt 资料收集
- All the versions of STL
- 电子信息类部分期刊投稿指南(转载)
- RegexBuilder: A DSL for creating regular expression, Request For Comment
- 老友记台词学习笔记 SE01EP05(一)
- CMD
- 细读:关于搜索引擎及其开发,我的疑问和思考