Limiting data size in tee rules

Valentine Zaretsky zaretsky at apex.dp.ua
Wed Oct 8 14:20:15 PDT 2003


Hi!

In some applications there is no need to send the whole packet to 
divert-socket (e.g. traffic accounting, where information contained in 
headers is enough) and it might be useful to have a setting for the 
length of data buffer that will be diverted from each matching packet.

For example:

ipfw add 1000 tee 4321 snaplen 68 ip from any to any via fxp0 # 68 bytes 
from each packet will be diverted to port 4321.

It seems that such a trick will reduce overhead of data copying to 
userland, won't it?


-- 
Regards, Valentine




More information about the freebsd-ipfw mailing list