[Dshield] Linux vs. Windows Packet Capture
mrcorp at yahoo.com
Mon Jan 12 18:22:03 GMT 2004
Question for the group. I am reviewing a paper that has been submitted for my site and was
wondering if anyone else has any comments or can point me in the right direction for more
It seems that using standard Libpcap on Linux with Kernel 2.4 experienced a significant packet
loss on a 100 Mbit connection vs. Windows 2K. I was surprised to learn about this and it seems to
reference Interupt Livelock. If this is the case, wouldnt it be better for packet capturing
reasons to move our NIDS to Windows?
I am not looking for a flame here, but anyones personal experiences or experiments.
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
More information about the list