Limiting data size in tee rules
Valentine Zaretsky
zaretsky at apex.dp.ua
Wed Oct 8 14:20:15 PDT 2003
Hi!
In some applications there is no need to send the whole packet to
divert-socket (e.g. traffic accounting, where information contained in
headers is enough) and it might be useful to have a setting for the
length of data buffer that will be diverted from each matching packet.
For example:
ipfw add 1000 tee 4321 snaplen 68 ip from any to any via fxp0 # 68 bytes
from each packet will be diverted to port 4321.
It seems that such a trick will reduce overhead of data copying to
userland, won't it?
--
Regards, Valentine
More information about the freebsd-ipfw
mailing list