From: Alessandro Vesely <vesely@tana.it>
To: Nick <vbox.nick@gmail.com>
Cc: netfilter@vger.kernel.org
Subject: Re: Links to projects using netfilter
Date: Sat, 27 Dec 2008 12:43:45 +0100 [thread overview]
Message-ID: <495614F1.5070903@tana.it> (raw)
In-Reply-To: <4955116C.7010806@gmail.com>
Nick wrote:
> Alessandro Vesely пишет:
>> IPQ BDB maps an IP Queue to a Berkeley DB indexed on the ipv4
>> field. More at https://savannah.nongnu.org/projects/ipqbdb/
>>
> The NFQUEUE target is nice feature. I using perl ( module ) for inspect
> and accounting network traffic, but perl script works slow. If the
> bandwidth of more than 2MBit/s, the cpu loading is 50% (C2D E6550).
> Here is a program written in C, works much faster and less weight CPU 1-2%.
Besides being written in C, using BDB makes it very fast. On the 5th
day I had 9140 records and the following /top/ output
PR NI VIRT RES SHR S %CPU %MEM TIME+ SWAP CODE DATA COMMAND
15 0 10376 1308 1172 S 0 0.0 0:02.05 9068 16 252 ipqbdbd
18 0 9500 1312 1152 S 0 0.0 0:31.78 8188 32 256 ibd-parse
The second line above is a daemon that applies 5 pcre expressions to
each mail.log line, in order to catch attackers: it consumes 15+ times
more than issuing verdicts (both configured for a single queue.)
next prev parent reply other threads:[~2008-12-27 11:43 UTC|newest]
Thread overview: 4+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-12-26 14:48 Links to projects using netfilter Alessandro Vesely
2008-12-26 17:16 ` Nick
2008-12-27 11:43 ` Alessandro Vesely [this message]
2008-12-30 9:37 ` Eric Leblond
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=495614F1.5070903@tana.it \
--to=vesely@tana.it \
--cc=netfilter@vger.kernel.org \
--cc=vbox.nick@gmail.com \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox