>>[apparent violent agreement elided]
>
>I thought we were politely disagreeing about the utility of PF_PACKET...?

it looked to me like we were both saying the same thing...or at least
expounding on the same points.

>>>...
>>>Andrew, please dont take this the wrong way, but have you ever
>>>tried to use this monstrosity?
>>
>>which?  bpf (yes) or PF_PACKET (no)?  a "raw" bpf or libpcap?
>
>I meant PF_PACKET. Mogul, Rashid and Acceta outlined the problems with
>PF_PACKET-style architecture 14 years ago in DEC WRL-TR-87-2,
>some 10 years before Linux PF_PACKET.

ah...no.  never used it.  can't say i see any utility in it,
personally.  but that's just me.

>(I used packetfilter in anger way back when; and to collect my
>thesis data, i did pretty much what MJR et. al did to bpf.)

mjr...ranum?  ala bpf?  hmm...

-- 
|-----< "CODE WARRIOR" >-----|
codewarrior@daemon.org             * "ah!  i see you have the internet
twofsonet@graffiti.com (Andrew Brown)                that goes *ping*!"
andrew@crossbar.com       * "information is power -- share the wealth."