17 Jul
2002
17 Jul
'02
5:30 p.m.
Apparently there are a number of packet reflectors (usually running on a Unix machine) that work in theory, how do these work in actual practice, what kind of performance and reliability to they have, and which work well for traffic collection?
I have had good results with samplicator: http://www.switch.ch/tf-tant/floma/sw/samplicator/ I haven't had any problems with it handling fairly heavy loads and the CPU impact is minimal. Under very heavy loads you might want to bump up the receive buffer (the -b command-line option). Bradley