# Gigabit link monitoring **URL:** \ **Category:** Zeek\ **Created:** [July 24, 2000, 7:43pm UTC](https://community.zeek.org/t/gigabit-link-monitoring/96 "2000-07-24T19:43:49Z")\ **Posts on this page:** 2\ **Page:** 1
**Author:** ![Kyle\_C\_Quest](https://avatars.discourse-cdn.com/v4/letter/k/a587f6/32.png) [@Kyle\_C\_Quest](https://community.zeek.org/u/Kyle_C_Quest)\ **Post date:** [July 24, 2000, 7:43pm UTC](https://community.zeek.org/t/gigabit-link-monitoring/96/1 "2000-07-24T19:43:49Z")
Vern would be the best person to give an answer for this question... but I can also help (in a way ;-])... Bro uses libpcap packet capture library... the library uses different ways to capture packets on various OS platforms... If I'm not mistaken, for fast networks it's better to use BSD derived operating systems (OpenBSD, FreeBSD...) because they use BPF packet filtering mechanism that is part of operating system... and as far as I know BPF provides the best performance... however, I'm sure that even BPF's performance would not be enough for gigabits network... Unless BPF+ replaced the original BPF implementation, there's no way bro can sustain gigabits speed. Anyways, if you choose to use bro, don't use Linux, because it is possibly the slowest platform to run bro... Kyle ---
**Author:** ![system](https://canada1.discourse-cdn.com/flex011/uploads/zeek/original/1X/f09d732bc2cc7c7cc7e35db67cf4e1d5233ce7a7.png) [@system](https://community.zeek.org/u/system)\ **Post date:** [May 6, 2022, 3:36pm UTC](https://community.zeek.org/t/gigabit-link-monitoring/96/2 "2022-05-06T15:36:11Z")