I just wanted confirm that it's limit in pf_ring.
i have to figure out something. Thanks for fast answer
btw
Sflow is very slow in compare with mirroring in anty DDOS solutions.
Wanguard don't recommend using pf_ring-dna/-zc
W dniu 2014-12-15 13:03, Pavel Odintsov pisze:
You can try to mirror both (or more) bonding ports from router/switch
to one interface. And sniff it with PF_RING ZC. Or you can try sFLOW
for this links. It's very effective for ddos mitigation too.
On Mon, Dec 15, 2014 at 2:42 PM, Piotr <[email protected]> wrote:
Hi,
I can but it cost.. Each interface need one license.
greetings,
Peter
W dniu 2014-12-15 12:37, Pavel Odintsov pisze:
Hello!
But why don't you can open both interfaces separately? Bonding is very
simple round-robin balancer. And it didn't do any magic things.
On Mon, Dec 15, 2014 at 2:18 PM, Piotr <[email protected]> wrote:
Hello,
I'm new in pf_ring world, i try to run wanguard soft with pf_ring 5.6.2
I have bond interfaces and i'd like run with transparent-mode=1 or 2.
After some test via pfcount i noticed that transparent-mode=1 or 2 works
with dnaX interfaces but no with bonding interfaces. There is no received
packets on bond interface. Transparent-mode=0 works with dns and bond
interfaces without problem but i don't see differences in performance.
Of course, if pfcount doesn't see bond interface in transparent-mode=2,
Wanguard also doesn't see receiving packets.
It is some limit, feature or i'm doing something wrong ?
thanks for help
Peter
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
