Hi David you can use zero-copy packet distribution (provided by ZC) with custom packet hashing (5-tuple is one option), please have a look at examples_zc/zbalance.
Alfredo > On 07 May 2015, at 07:20, David Britt <[email protected]> wrote: > > I am looking to build an analysis tool based on nDPI and would like to share > the load across multiple CPU cores. I notice that there is some indication of > thread safeness in nDPI 1.5 but I am wondering whether anyone has built, or > has ideas on building a multi threaded nDPI application. > > I suppose my main question is how to ensure each packet from libpcap reaches > the correct nDPI thread for processing and analysis - I guess I need to have > some kind of 5 tuple hashing mechanism to classify each packet into a flow > and push to an appropriate queue that each nDPI thread can pick from? Is this > something that PF_RING can do, or perhaps some other simple technique? > > Any help, guidance of examples would be very much appreciated if anyone has > gone down this path and is willing to share some ideas. > > Dave Britt. > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
