Daniel Borkmann wrote:
> Thanks for the report. On what kind of hardware are you trying to do that?

Kernel: Linux chase 3.11-1-amd64 #1 SMP Debian 3.11.6-1 (2013-10-27) x86_64 
GNU/Linux

OS: Debian "sid"

CPU: Intel(R) Xeon(R) CPU E3-1245 v3 @ 3.40GHz

Memory: 32 GB

Ethernet: Intel Corporation I210 Gigabit Network Connection (rev 03)

Motherboard: Supermicro X10SAE

> I think we need to adjust default buffer allocation anyway, probably you're
> perfectly fine with a ring buffer of around 2MB already.

The funny thing is, I have a similar machine where netsniff-ng starts up
instantly.  It seems like a kernel issue, so I will try updating the
problematic machine's kernel.  I can also replicate the issue on the
problematic machine with tcpdump by passing a large "-B" parameter to
tcpdump.

This is the strace output from the good machine:

1387556106.537430 setsockopt(3, SOL_PACKET, PACKET_RX_RING, 
"\0\0\1\0\346\16\0\0\0\0\1\0\346\16\0\0d\0\0\0\0\0\0\0\0\0\0\0", 28) = 0
1387556106.594919 mmap(NULL, 249954304, PROT_READ|PROT_WRITE, 
MAP_SHARED|MAP_POPULATE|MAP_LOCKED, 3, 0) = 0x7f5f3bae3000

Kernel: Linux bst 3.11-2-amd64 #1 SMP Debian 3.11.8-1 (2013-11-13) x86_64 
GNU/Linux

OS: Debian "wheezy"

CPU: Intel(R) Core(TM) i3-4130 CPU @ 3.40GHz

Memory: 16 GB

Ethernet: Intel Corporation I210 Gigabit Network Connection (rev 03)

Motherboard: Supermicro X10SLL-F

-- 
Robert Edmonds

-- 
You received this message because you are subscribed to the Google Groups 
"netsniff-ng" group.
To unsubscribe from this group and stop receiving emails from it, send an email 
to [email protected].
For more options, visit https://groups.google.com/groups/opt_out.

Reply via email to