Maybe it will be relevant and I have 2 NIC's with 2 ports each in this server:

0a:00.0 Ethernet controller: Intel Corporation 82599EB 10-Gigabit
SFI/SFP+ Network Connection (rev 01)
0a:00.1 Ethernet controller: Intel Corporation 82599EB 10-Gigabit
SFI/SFP+ Network Connection (rev 01)
0d:00.0 Ethernet controller: Intel Corporation 82599EB 10-Gigabit
SFI/SFP+ Network Connection (rev 01)
0d:00.1 Ethernet controller: Intel Corporation 82599EB 10-Gigabit
SFI/SFP+ Network Connection (rev 01)



On Fri, Dec 12, 2014 at 7:16 PM, Pavel Odintsov
<[email protected]> wrote:
> Oh, very strange!
>
> In transparent_mode=2 quick_mode=1 I still can see packets at
> interface with standard pcap tcpdump:
> tcpdump -i eth4 -c 10
> tcpdump: WARNING: eth4: no IPv4 address assigned
> tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
> listening on eth4, link-type EN10MB (Ethernet), capture size 65535 bytes
> 19:15:19.916730 IP 10.10.10.100.49645 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916733 IP 10.10.10.100.41742 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916734 IP 10.10.10.100.30047 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916735 IP 10.10.10.100.41743 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916736 IP 10.10.10.100.38649 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916737 IP 10.10.10.100.30048 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916739 IP 10.10.10.100.49646 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916740 IP 10.10.10.100.52632 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916741 IP 10.10.10.100.41744 > 10.10.10.200.0: UDP, length 0
> 19:15:19.916742 IP 10.10.10.100.30049 > 10.10.10.200.0: UDP, length 0
> 10 packets captured
> 2980 packets received by filter
> 2839 packets dropped by kernel
>
> On Fri, Dec 12, 2014 at 7:11 PM, Pavel Odintsov
> <[email protected]> wrote:
>> Hello, Luca!
>>
>> I'm loading ixgbe patched ixgbe driver, loaded pf_ring, start hping
>> flood from another machine and got 90% of kernel load from ksoftirqd.
>> I did not started any toolkit yet :(
>>
>> But ZC looks like working because it work many times faster then
>> vanilla PF_RING and process 2 mpps of packets! And it complains about
>> license:
>>
>> # ERROR: You do not seem to have a valid PF_RING ZC license
>> 6.0.2.140923 for eth4 [Intel 10 Gbit ixgbe 82599-based]
>> # ERROR: Please get one at http://shop.ntop.org/.
>>
>>
>> On Fri, Dec 12, 2014 at 7:02 PM, Luca Deri <[email protected]> wrote:
>>> Pavel
>>> if you have ksoftirq up, I believe you are not using ZC. Please explain what
>>> you are doing?
>>>
>>>
>>> Luca
>>>
>>> On 12 Dec 2014, at 16:24, Pavel Odintsov <[email protected]> wrote:
>>>
>>> Total number of generated packets per second flood was about 1million
>>> packets per second, CPU E5-2407 0 @ 2.20GHz.
>>>
>>> On Fri, Dec 12, 2014 at 6:19 PM, Pavel Odintsov
>>> <[email protected]> wrote:
>>>
>>> Hello!
>>>
>>> I'm using PF_RING 6.0.2 with Debian 7 Wheezy 3.2.0-4-amd64. I
>>> installed ixgbe driver with ZC support and loaded it with
>>> load_driver.sh.
>>>
>>> I don't need any processing and linux stack thus I set: transparent_mode=2.
>>>
>>> After this I run udp flood from 6 hping instances from another server:
>>> hping3 -I eth1 --udp --flood 10.10.10.200
>>>
>>> After this I run top and got this:
>>> %Cpu(s):  0.0 us,  0.0 sy,  0.0 ni, 90.3 id,  0.0 wa,  0.0 hi,  9.7 si,  0.0
>>> st
>>>    3 root      20   0     0    0    0 S  78.5  0.0   5:40.02
>>> ksoftirqd/0
>>> htop looks like this:
>>> 1  [||||||||||||||||||||||||||||||||||||||||||||||||||||||||||||93.9%]
>>>    Tasks: 24, 3 thr, 49 kthr; 1 running
>>>  2  [
>>> 0.0%]     Load average: 0.05 0.20 0.22
>>>  3  [
>>> 0.0%]     Uptime: 18 days, 22:04:44
>>>  4  [                                                             0.0%]
>>>  Mem[|||||||||||||||                                      2661/32207MB]
>>>  Swp[                                                         0/8190MB]
>>>
>>>
>>> I even tried to enable quick_mode=1 but ksoftirqd consuming almost
>>> whole CPU core.
>>>
>>> Thank you for your attention!
>>>
>>> --
>>> Sincerely yours, Pavel Odintsov
>>>
>>>
>>>
>>>
>>> --
>>> Sincerely yours, Pavel Odintsov
>>> _______________________________________________
>>> Ntop-misc mailing list
>>> [email protected]
>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>>>
>>>
>>>
>>> _______________________________________________
>>> Ntop-misc mailing list
>>> [email protected]
>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>>
>>
>>
>> --
>> Sincerely yours, Pavel Odintsov
>
>
>
> --
> Sincerely yours, Pavel Odintsov



-- 
Sincerely yours, Pavel Odintsov
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to