Oh, very strange! In transparent_mode=2 quick_mode=1 I still can see packets at interface with standard pcap tcpdump: tcpdump -i eth4 -c 10 tcpdump: WARNING: eth4: no IPv4 address assigned tcpdump: verbose output suppressed, use -v or -vv for full protocol decode listening on eth4, link-type EN10MB (Ethernet), capture size 65535 bytes 19:15:19.916730 IP 10.10.10.100.49645 > 10.10.10.200.0: UDP, length 0 19:15:19.916733 IP 10.10.10.100.41742 > 10.10.10.200.0: UDP, length 0 19:15:19.916734 IP 10.10.10.100.30047 > 10.10.10.200.0: UDP, length 0 19:15:19.916735 IP 10.10.10.100.41743 > 10.10.10.200.0: UDP, length 0 19:15:19.916736 IP 10.10.10.100.38649 > 10.10.10.200.0: UDP, length 0 19:15:19.916737 IP 10.10.10.100.30048 > 10.10.10.200.0: UDP, length 0 19:15:19.916739 IP 10.10.10.100.49646 > 10.10.10.200.0: UDP, length 0 19:15:19.916740 IP 10.10.10.100.52632 > 10.10.10.200.0: UDP, length 0 19:15:19.916741 IP 10.10.10.100.41744 > 10.10.10.200.0: UDP, length 0 19:15:19.916742 IP 10.10.10.100.30049 > 10.10.10.200.0: UDP, length 0 10 packets captured 2980 packets received by filter 2839 packets dropped by kernel
On Fri, Dec 12, 2014 at 7:11 PM, Pavel Odintsov <[email protected]> wrote: > Hello, Luca! > > I'm loading ixgbe patched ixgbe driver, loaded pf_ring, start hping > flood from another machine and got 90% of kernel load from ksoftirqd. > I did not started any toolkit yet :( > > But ZC looks like working because it work many times faster then > vanilla PF_RING and process 2 mpps of packets! And it complains about > license: > > # ERROR: You do not seem to have a valid PF_RING ZC license > 6.0.2.140923 for eth4 [Intel 10 Gbit ixgbe 82599-based] > # ERROR: Please get one at http://shop.ntop.org/. > > > On Fri, Dec 12, 2014 at 7:02 PM, Luca Deri <[email protected]> wrote: >> Pavel >> if you have ksoftirq up, I believe you are not using ZC. Please explain what >> you are doing? >> >> >> Luca >> >> On 12 Dec 2014, at 16:24, Pavel Odintsov <[email protected]> wrote: >> >> Total number of generated packets per second flood was about 1million >> packets per second, CPU E5-2407 0 @ 2.20GHz. >> >> On Fri, Dec 12, 2014 at 6:19 PM, Pavel Odintsov >> <[email protected]> wrote: >> >> Hello! >> >> I'm using PF_RING 6.0.2 with Debian 7 Wheezy 3.2.0-4-amd64. I >> installed ixgbe driver with ZC support and loaded it with >> load_driver.sh. >> >> I don't need any processing and linux stack thus I set: transparent_mode=2. >> >> After this I run udp flood from 6 hping instances from another server: >> hping3 -I eth1 --udp --flood 10.10.10.200 >> >> After this I run top and got this: >> %Cpu(s): 0.0 us, 0.0 sy, 0.0 ni, 90.3 id, 0.0 wa, 0.0 hi, 9.7 si, 0.0 >> st >> 3 root 20 0 0 0 0 S 78.5 0.0 5:40.02 >> ksoftirqd/0 >> htop looks like this: >> 1 [||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||93.9%] >> Tasks: 24, 3 thr, 49 kthr; 1 running >> 2 [ >> 0.0%] Load average: 0.05 0.20 0.22 >> 3 [ >> 0.0%] Uptime: 18 days, 22:04:44 >> 4 [ 0.0%] >> Mem[||||||||||||||| 2661/32207MB] >> Swp[ 0/8190MB] >> >> >> I even tried to enable quick_mode=1 but ksoftirqd consuming almost >> whole CPU core. >> >> Thank you for your attention! >> >> -- >> Sincerely yours, Pavel Odintsov >> >> >> >> >> -- >> Sincerely yours, Pavel Odintsov >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > -- > Sincerely yours, Pavel Odintsov -- Sincerely yours, Pavel Odintsov _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
