From mboxrd@z Thu Jan  1 00:00:00 1970
From: greg@kroah.com (Greg KH)
Date: Thu, 28 Jan 2016 11:31:25 -0800
Subject: Capture packets at 10g interface
In-Reply-To: <CAALD5izNqGamUctec95Sf673+9amaDKG=jQ7=A0ePmywtQ62aA@mail.gmail.com>
References: <CAALD5iyUY4=TCtwkDWLx=s0jAiJ9EQDCZaVWSTqfYAMufxwfRQ@mail.gmail.com>
	<20160128183905.GA23005@kroah.com>
	<CAALD5izNqGamUctec95Sf673+9amaDKG=jQ7=A0ePmywtQ62aA@mail.gmail.com>
Message-ID: <20160128193125.GA26283@kroah.com>
To: kernelnewbies@lists.kernelnewbies.org
List-Id: kernelnewbies.lists.kernelnewbies.org

On Fri, Jan 29, 2016 at 12:14:20AM +0530, Tarun Batra wrote:
> I want to do that because I have to write a packet inspection module sort of
> idps solution.

What is forcing you to do such a thing?  Is this for a homework
assignment, or are you trying to create a product?

> We are targeting kernel space because of performance.

How do you know that putting this in the kernel will be faster?  Do you
have measurements that show this?  Is doing this today somehow too slow
using the existing interfaces that allow you to do this?

thanks,

greg k-h