Thanks for the explanation and fix Tobias.
On Wed, Apr 30, 2014 at 6:43 AM, Tobias Klauser <[email protected]> wrote: > On 2014-04-17 at 23:59:22 +0200, Michał Purzyński < > [email protected]> wrote: > > Hello. > > > > I'm trying to write to disk between 3-7Gbit/sec (traffic changes a lot). > > Netsniff-ng is dropping packets, at least that is what statistics say. > > > > Hardware and software details: > > > > 2 x E5-2620 > > 64GB memory in 8 x 8 DIMMs to use every channel > > Intel X520 based card > > 12 x 3TB (2.7TB in fact) in RAID5 - 1 as hot spare, the rest gives me a > > healthy 28TB usable > > > > Ubuntu 12.04 on 3.8.x kernel > > XFS > > > > I run the software like this > > > > netsniff-ng -i eth2 -o /nsm/sensor_data/nsm2-eth2/dailylogs/2014-04-17/ > > --user 2551 --group 2551 -s --prefix snort.log. --verbose --ring-size > 4000 > > iB --interval 1500 MiB --mmap --filter /etc/nsm/nsm2-eth2/bpf-pcap.ops > > > > BTW - there is a bug (integer overflow) and the buffer can't be larger > than > > 4095MB. Anyway. > > There's a fix now in the master branch of netsniff-ng.git [1]. Can you > confirm that this fixes the issue for you? Does it influence the > "losslessness" of your setup if you specify large ring sizes? > > [1] https://github.com/netsniff-ng/netsniff-ng/commit/f4821f > > Cheers > Tobias > > -- > You received this message because you are subscribed to the Google Groups > "netsniff-ng" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. > -- Jon Schipp, jonschipp.com, sickbits.net -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
