You can try to mirror both (or more) bonding ports from router/switch to one interface. And sniff it with PF_RING ZC. Or you can try sFLOW for this links. It's very effective for ddos mitigation too.
On Mon, Dec 15, 2014 at 2:42 PM, Piotr <[email protected]> wrote: > Hi, > > I can but it cost.. Each interface need one license. > > greetings, > Peter > > > > W dniu 2014-12-15 12:37, Pavel Odintsov pisze: > >> Hello! >> >> But why don't you can open both interfaces separately? Bonding is very >> simple round-robin balancer. And it didn't do any magic things. >> >> On Mon, Dec 15, 2014 at 2:18 PM, Piotr <[email protected]> wrote: >>> >>> Hello, >>> >>> I'm new in pf_ring world, i try to run wanguard soft with pf_ring 5.6.2 >>> I have bond interfaces and i'd like run with transparent-mode=1 or 2. >>> >>> After some test via pfcount i noticed that transparent-mode=1 or 2 works >>> with dnaX interfaces but no with bonding interfaces. There is no received >>> packets on bond interface. Transparent-mode=0 works with dns and bond >>> interfaces without problem but i don't see differences in performance. >>> >>> Of course, if pfcount doesn't see bond interface in transparent-mode=2, >>> Wanguard also doesn't see receiving packets. >>> >>> It is some limit, feature or i'm doing something wrong ? >>> >>> thanks for help >>> Peter >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> >> >> > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc -- Sincerely yours, Pavel Odintsov _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
