Re: NAI Security Advisory: Vulnerability in NFR 2.0.2-Research

Marcus J. Ranum (mjr@nfr.net)
Thu, 18 Feb 1999 09:17:56 -0500


>I am getting frustrated.

Me too! We've posted about 15 messages to this list about
how mediocre Linux' packet capture routines are. We've put
stuff in the documentation, and we've done everything except
deliberately _force_ our software not to be able to build
on Linux. Why? Because there are always people who try it
and then post:

>I have installed NFR on Linux and it appears to keep missing packets
>even on my low bandwidth network.

We're sorry it doesn't work well but it's Linux' problem,
not ours. :( Linux is a fine operating system, yaddayaddayadda
but its packet capture code is pathetic. Read it and weep.

>My issue is whether to consider NFR a mission critical tool

Linux isn't a "mission critical" operating system, is the problem.
That's why we've gone out on a limb and risked pissing off the
faceless hordes of Linux fanatics by telling them that their
favorite O/S can't run with the big dogs. Try one of the BSD
derivatives, read the release notes, and you'll have less
problems.

On the other topic, Mudge's filters are a bit buggy (the
current versions) and he's in the process of furiously
writing N-code as we speak.

mjr.

--
Marcus J. Ranum, CEO, Network Flight Recorder, Inc.
work - http://www.nfr.net
home - http://www.clark.net/pub/mjr
-
[To unsubscribe, send mail to majordomo@lists.gnac.net with
"unsubscribe firewalls" in the body of the message.]

----- End of forwarded message from Marcus J. Ranum -----

Mike

-- 
 Michael H. Warfield    |  (770) 985-6132   |  mhw@WittsEnd.com
  (The Mad Wizard)      |  (770) 925-8248   |  http://www.wittsend.com/mhw/
  NIC whois:  MHW9      |  An optimist believes we live in the best of all
 PGP Key: 0xDF1DD471    |  possible worlds.  A pessimist is sure of it!

- To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.rutgers.edu Please read the FAQ at http://www.tux.org/lkml/