Paper on device polling and packet capture performance

[Richard Bejtlich]

Hello,

I was wondering if anyone read the paper by Luca Deri
(of Ntop fame) on "Improving Passive Packet Capture:
Beyond Device Polling":

http://luca.ntop.org/Ring.pdf

Luca makes some astounding claims regarding packet
capture performance, with FreeBSD performing very well
when device polling is enabled.  

A wrote a short and probably naive synopsis for my
Blog:

http://taosecurity.blogspot.com/2004_01_01_taosecurity_archive.html#107358025105922521

Does anyone care to comment on the paper?  (I asked
Luca and he agreed to this post.)

Thank you,

Richard Bejtlich
http://www.taosecurity.com

__________________________________
Do you Yahoo!?
Yahoo! Hotjobs: Enter the "Signing Bonus" Sweepstakes
http://hotjobs.sweepstakes.yahoo.com/signingbonus