[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ipfilter
Subject:    Re: [PATCH] Expiramental patch for ipfstat/statetop
From:       Phil Dibowitz <phil () ipom ! com>
Date:       2005-04-03 2:13:32
Message-ID: 424F514C.4050901 () ipom ! com
[Download RAW message or body]


Phil Dibowitz wrote:
> Hey folks,
>
> Attached is a new patch to statetop. It impliments hostname resolving,
> dynamic sizing, and fixes a few bugs. I've not tested this with IPv6, so
> I don't know how well it'll work with that, but if someone who does use
> IPv6 could test it, that would be great.

So I'm increasingly happy with this patch. One note is that it can hit
your nameservers pretty hard if you're nscd settings are crappy (default
in most OS's is pretty crappy). Strnagely, it seems to hit DNS servers
harder than my software, iptstate - I think that's because we're pulling
out of data structures which is faster than parsing a long file in /proc
(which is what iptstate does in linux).

I'm considering making the default to *not* resolve because it is so
resource intensive (and the -R flag won't affect statetop at all), and
just having the "hotkey" available for this. Any thoughts on this?

--
Phil Dibowitz                             phil@ipom.com
Freeware and Technical Pages              Insanity Palace of Metallica
http://www.phildev.net/                   http://www.ipom.com/

"They that can give up essential liberty to obtain a little temporary
safety deserve neither liberty nor safety."
 - Benjamin Franklin, 1759


["signature.asc" (application/pgp-signature)]

[prev in list] [next in list] [prev in thread] [next in thread]