> > IMHO the data are routed through host CPU anyway, DMA is not as clever > > to locate the proper file in the proper filesystem on the proper > > volume and pass them to the proper network card. You're right that the=20 > > CPU does not have to process every single bit of each (?) file. > > But this could be solved by used more advanced bus architecture > > (PCIX or even something faster) and adding more CPU. Dedicated anti-virus > > chip is a thing which I hope is not going to happen. > > Hmm.. let me get this straight - I can run something like SELinux and get > snappy performance on a 700mz PentiumIII, but to get security out of Windows > I'll need even MORE CPU and a PCIX? What's wrong with this picture? We are talking about on-line anti-virus scanning performance, which is decided mainly by the troughput of the I/O bus and CPU speed. SELinux is about mandatory access control. Ondra +>>>-----------------------------------------------------------------+ |Ondrej Krajicek (-KO| |Institute of Computer Science, Masaryk University Brno, CR | |http://isildur.ics.muni.cz/~ondra krajicek@xxxxxxxxxxx| +--------------------------------------------------------------------+
Attachment:
pgp00092.pgp
Description: PGP signature