diff options
| -rw-r--r-- | netsniff-ng.8 | 9 |
1 files changed, 9 insertions, 0 deletions
diff --git a/netsniff-ng.8 b/netsniff-ng.8 index 395382f..5bdc6d0 100644 --- a/netsniff-ng.8 +++ b/netsniff-ng.8 @@ -54,6 +54,15 @@ state or perform reassembly during packet dissection, its memory footprint is qu low, thus, making netsniff-ng quite efficient for offline analysis of large pcap files as well. .PP +Note that netsniff-ng is currently not multithreaded. However, this does not +prevent you from starting multiple netsniff-ng instances that are pinned to +different, non-overlapping CPUs and f.e. have different BPF filters attached. +Likely that at some point in time your harddisc might become a bottleneck +assuming you do not rotate such pcaps in ram (and from there periodically +scheduled move to slower medias). You can then use mergecap(1) to transform +all pcaps into a single large pcap. Thus, netsniff-ng then works multithreaded +eventually. +.PP .SH OPTIONS .PP .SS -i <dev|pcap|->, -d <dev|pcap|->, --in <dev|pcap|->, --dev <dev|pcap|-> |