FFPF is a network packet processing methodology that operates at a rapid speed.
The fairly fast packet filter (FFPF) is a top-tier network packet processing approach that significantly enhances existing filtering solutions like BPF. The FFPF has been designed with high speeds in mind by reducing packet copying and pushing computationally intensive tasks to the kernel or network processors. Unlike other approaches, the FFPF is highly versatile and provides complete solutions for network monitoring applications that are currently available.
One of the most significant advantages of the FFPF is that it's highly extensible and can be used as a meta-filter to assemble filters from other approaches. The language provides access to richer programming languages, which makes it more user-friendly compared to other existing solutions. It's also highly scalable, and it supports all existing libpcap-based applications, making it highly backward compatible.
The FFPF is modular, and new functions can be easily written in as little as three lines of code. It's also highly secure and relies on Keynote for authentication and resource control. Additionally, it adheres to open standards and is licensed under the GNU General Public License (GPL). It implements the Monitoring API (MAPI) draft as designed by the EU-SCAMPI consortium.
In this latest release, the FFPF introduces several new features. These features include enabled kernelspace processing, all 5 buffer implementations, TCP stream reassembly, and early zero-copy implementations. The FFPF also added PCAP input and output support for userspace testing and offline use. There are several additional minor functions, such as TCP Synprotect and output to files. Furthermore, the FFPF has added support for UDEV, and the control plane can now query flowspaces for live state. Lastly, this release fixed up many bugs, hacks, and irregularities.
Overall, the FFPF is an excellent solution for those looking for efficient and versatile network packet processing. With its extensibility, backward compatibility, and scalability, it provides complete solutions for network monitoring applications. Additionally, it's highly secure and adheres to open standards, making it an excellent choice for those seeking a reliable and user-friendly solution.
One of the most significant advantages of the FFPF is that it's highly extensible and can be used as a meta-filter to assemble filters from other approaches. The language provides access to richer programming languages, which makes it more user-friendly compared to other existing solutions. It's also highly scalable, and it supports all existing libpcap-based applications, making it highly backward compatible.
The FFPF is modular, and new functions can be easily written in as little as three lines of code. It's also highly secure and relies on Keynote for authentication and resource control. Additionally, it adheres to open standards and is licensed under the GNU General Public License (GPL). It implements the Monitoring API (MAPI) draft as designed by the EU-SCAMPI consortium.
In this latest release, the FFPF introduces several new features. These features include enabled kernelspace processing, all 5 buffer implementations, TCP stream reassembly, and early zero-copy implementations. The FFPF also added PCAP input and output support for userspace testing and offline use. There are several additional minor functions, such as TCP Synprotect and output to files. Furthermore, the FFPF has added support for UDEV, and the control plane can now query flowspaces for live state. Lastly, this release fixed up many bugs, hacks, and irregularities.
Overall, the FFPF is an excellent solution for those looking for efficient and versatile network packet processing. With its extensibility, backward compatibility, and scalability, it provides complete solutions for network monitoring applications. Additionally, it's highly secure and adheres to open standards, making it an excellent choice for those seeking a reliable and user-friendly solution.
What's New
Version 1.5.0: N/A