Re: Shimomura on BPF, NSA and Crypto

["Perry E. Metzger" <perry@piermont.com>]

hallam@w3.org writes:
> 
> >Tsutomu has lots of glib rhetoric about how he just builds tools and
> >they can be used for good or evil.  This tool is custom-designed for
> >evil.  
> 
> Rubbish, it would allow me to do something I urgently need to do -
> measure the performance of the main internet links. This is
> presently very difficult to do since the berkley sockets provide no
> network performance information to the application layer.

There is no need to have the code to provide such information conceal
the fact that it is on the machine, fake interrupt counts, etc.

> What I need is a means of determining the fragmentation, packet
> delay, throttling rate etc etc. This is information avaliable in the
> Kernel but I don't know how to get at it.

There are plenty of tools on the average unix box for asking such
questions, and all kernel variables can be read via /dev/kmem in any
case.

Perry