Home page logo
/

nanog logo nanog mailing list archives

Re: Wire-rate Packet Capture on 10gbE
From: Michael Holstein <michael.holstein () csuohio edu>
Date: Fri, 29 Apr 2011 10:43:39 -0400


How is this being done? I've looked at looked at PF_RING and TNAPI... is
there anything better out there?
  

Those two (thanks to Luca) can get you most of the way there, but to
really hit the target you need dedicated kit like Endace (and a few
others) make. They basically do what was represented in the CCC slides
somebody else posted (FPGA with own logic), but on a PCIe card.

Once you've got the ethernet -> interface problem addressed, you need to
examine bottlenecks in interface->bus and particularly bus->disk.

Regards,

Michael Holstein
Cleveland State Unversity


--Kyle

  



  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]
AlienVault