Using eBPF on capable systems may offer even higher capture throughput (in certain scenarios). Potentially relevant input: - https://cycode.com/blog/how-we-optimized-ci-mon-ebpf-sensor-to-handle-thousands-of-events-per-second/ - https://github.com/McLovinIt101/FiveM-Sentinel/blob/main/udp-tcpfivem_xdp.c
Using eBPF on capable systems may offer even higher capture throughput (in certain scenarios).
Potentially relevant input: