<p dir="ltr">We are trying to build product and as per decisions of senior we need to capture packets in kernel</p>
<div class="gmail_quote">On Jan 29, 2016 1:01 AM, "Greg KH" <<a href="mailto:greg@kroah.com">greg@kroah.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Fri, Jan 29, 2016 at 12:14:20AM +0530, Tarun Batra wrote:<br>
> I want to do that because I have to write a packet inspection module sort of<br>
> idps solution.<br>
<br>
What is forcing you to do such a thing? Is this for a homework<br>
assignment, or are you trying to create a product?<br>
<br>
> We are targeting kernel space because of performance.<br>
<br>
How do you know that putting this in the kernel will be faster? Do you<br>
have measurements that show this? Is doing this today somehow too slow<br>
using the existing interfaces that allow you to do this?<br>
<br>
thanks,<br>
<br>
greg k-h<br>
</blockquote></div>