Re: nessus and FreeBSD bpf server

> On Sat, Sep 25, 2004 at 12:51:45PM -0400, Michael Scheidell wrote:
> > Whats faster? rebuild kernel with dozens of bpf's or use the server?
> > target is fbsd 4.10, nessus 2.0.12.
>
> Dozens (hundreds) of bpfs will be faster.
README.BPF has this disclaimer: (and I thought my name was in it 
somewhere at one point in time ;)

If you can not recompile your kernel, you can try to run the configure
script with the option --enable-bpf-sharing. In this case, nessusd will
try to share one /dev/bpf among multiple processes and do the filtering
in userland. NOTE THAT THIS OPTION IS HIGHLY EXPERIMENTAL AND WE DO
NOT RECOMMAND ENABLING IT.

(note: this is a nessus config option, not a kernel option.

I guess the recommend way (and default in fbsd ports) is to use bpf's

I think fbsd ports checks to see that you have at least 64 bpf's or it 
won't compile without the config option.
_______________________________________________
Nessus mailing list
Nessus@list.nessus.org
http://mail.nessus.org/mailman/listinfo/nessus