Do you have a question? Post it now! No Registration Necessary
Threaded View
Subject
posted on November 23, 2005, 10:40 pm
Reply
Save
Print
Hello there,
I'm looking for a stand alone Linux box that would enable me to sniff
(and maybe block) network traffic of my small network (e.g., ~10
workstations).
The requirements are probably something like:
1. Developer friendly. I would like to install my sniffer on this box.
It is written in C, so I probably need full gcc support.
2. Not too much memory. Probably 64-128MB would be enough.
3. CPU speed not important. I assume that any 200MHz processor should
be enough.
4. Most importantly: at least two Ethernet ports.
5. Should be as cheap as possible.
I would appreciate any recommendation.
Regards,
Shai Rubin
I'm looking for a stand alone Linux box that would enable me to sniff
(and maybe block) network traffic of my small network (e.g., ~10
workstations).
The requirements are probably something like:
1. Developer friendly. I would like to install my sniffer on this box.
It is written in C, so I probably need full gcc support.
2. Not too much memory. Probably 64-128MB would be enough.
3. CPU speed not important. I assume that any 200MHz processor should
be enough.
4. Most importantly: at least two Ethernet ports.
5. Should be as cheap as possible.
I would appreciate any recommendation.
Regards,
Shai Rubin
Re: recommendation: stand alone cheap box
connex-based gumstix. You'd probably want to go for the connex 200xm,
since as you say, 200MHz is generally plenty to keep up with typical
traffic on a 100mbit network. If you're really saturating the 100mbit,
you'll probably drop some packets. In my testing, from userspace I can
read about 60mbit/s on the 200MHz gumstix, about 80mbit with the 400MHz
version using a UDP socket. A kernel traffic generator/sink has no
trouble keeping up with 100mbit at 200MHz. The CPU gets pegged at 100%
though when transfering the data from kernel space to userspace -- so
if you really need to deal with max bitrate, you'll want to figure out
how to efficiently transfer the data from kernel space to userspace.
There are commercial products starting to come online too, built on top
of the gumstix/netDUO combination, with proprietary security software
stuff on top. http://www.arxeco.com/ is one example; iirc they're
using the 400MHz CPU with the netDUO card, in their own custom case.
Hope this is helpful info for you,
Craig Hughes
CTO, gumstix
Re: recommendation: stand alone cheap box
recomandation for what?
You have the details layed out right there. You want a uClinux system?
or some sort of uCdimm/simm? I really dont see why you dont just setup
an old system like the one above with 2 nics and install whatever linux
distro you will (they all include GCC.. just remember to sellect it
during install).
Site Timeline
- » ERROR: 01:00: rw=0, want=5218, limit=4096
- — Next thread in » Embedded Linux
-
- » DVD-207 coby player
- — Previous thread in » Embedded Linux
-
- » Crosscompiling for ARM: reloc type R_ARM_ABS32 is not supported for PIC - ...
- — Newest thread in » Embedded Linux
-
- » pemohon
- — The site's Newest Thread. Posted in » Electronics Computer-Aided Design
-
XML Sitemap