Hello, folks! I'm working with wire speed traffic capture every day and some time ago I got idea about traffic mirroring between VFs.
Then, I send ticket to Intel folks about it: https://sourceforge.net/p/e1000/bugs/480/ and they rejected my idea. Well, it's really sad but we have nice Community and I ask for some help there. Why you need this? So much cases, really! 0) Run network analyzers on same NIC where Linux network stack are working (some images here https://cloud.githubusercontent.com/assets/2744166/8169983/f7e4bc16-13b5-11e5-906a-4ed3f468dda0.jpg) 1) Traffic capture from virtual machines for investigation complex network issues 2) Run multiple 10GE wire speed-aware applications on single physical NIC 3) Replace costly switch port mirroring with cheap hardware implementation? What libraries could use this feature? - PF_RING - Netmap - DPDK What software could rely on this feature? - Suricata - Bro - Snort - FastNetMon (my open ddos detection toolkit) Fortunately, we have reference implementation of this feature in SnabbSwitch: https://github.com/SnabbCo/snabbswitch/blob/master/src/apps/intel/intel10g.lua#L987 And I have really well tested netmap enabled driver ixgbe version here: https://github.com/pavel-odintsov/ixgbe-linux-netmap Any help very appreciate! Let's add ixgbe mirror support in off-tree driver! :) -- Sincerely yours, Pavel Odintsov ------------------------------------------------------------------------------ _______________________________________________ E1000-devel mailing list E1000-devel@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/e1000-devel To learn more about Intel® Ethernet, visit http://communities.intel.com/community/wired
