Weijer, the idea of pfsend is to be able to reproduce the file as fast as possible. Hence we load the pcap in memory and inject it. The consequence is that in case of huge files we have the problem you reported. In essence either speed or size. What would you advice us to do?
Regards Luca On Oct 30, 2012, at 6:47 PM, Weijer Chong <[email protected]> wrote: > Hi All, > > I'm trying to replay a large pcap file (20G) and it seems like when I start > running it start consuming all memory and swap resources and eventually stop > by itself. Does that mean pfsend won't able to replay pcap file size that's > larger than memory size? Tcpreplay works fine. > > -- > ~~~ > Weijer Chong > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
