On 2014-04-17 at 23:59:22 +0200, Michał Purzyński <[email protected]> wrote: > Hello. > > I'm trying to write to disk between 3-7Gbit/sec (traffic changes a lot). > Netsniff-ng is dropping packets, at least that is what statistics say. > > Hardware and software details: > > 2 x E5-2620 > 64GB memory in 8 x 8 DIMMs to use every channel > Intel X520 based card > 12 x 3TB (2.7TB in fact) in RAID5 - 1 as hot spare, the rest gives me a > healthy 28TB usable > > Ubuntu 12.04 on 3.8.x kernel > XFS > > I run the software like this > > netsniff-ng -i eth2 -o /nsm/sensor_data/nsm2-eth2/dailylogs/2014-04-17/ > --user 2551 --group 2551 -s --prefix snort.log. --verbose --ring-size 4000 > iB --interval 1500 MiB --mmap --filter /etc/nsm/nsm2-eth2/bpf-pcap.ops > > BTW - there is a bug (integer overflow) and the buffer can't be larger than > 4095MB. Anyway.
There's a fix now in the master branch of netsniff-ng.git [1]. Can you confirm that this fixes the issue for you? Does it influence the "losslessness" of your setup if you specify large ring sizes? [1] https://github.com/netsniff-ng/netsniff-ng/commit/f4821f Cheers Tobias -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
