That should be able to keep up with 150Mb/s no problem. Check the NIC drivers and NIC chipset - maybe there's an issue there? Since you have Cisco gear, see if it supports netflow. You get nearly the same details with far less hardware resources. Also, look in the FAQ for "zero copy" drivers. It might help with BSD only, I don't recall.
Gary ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eladio Pérez -Dinahosting Dept.de Gestión de Red Sent: Wednesday, February 21, 2007 9:28 AM To: [email protected] Subject: [Ntop] Many libpcap dropped packets Hi!, I'm new to the list, and this is my first post: I'm using ntop 3.2 on a dual opteron with a GbE card and 2GB of memory. Is monitoring a GbE port connected to our provider's router. Measured traffic is about 150Mbps. I'm using SPAN (is a Cisco switch) to mirror the traffic from that port to the one in which the opteron is connected. The OS is Debian GNU/Linux Sarge. So, my question is: given that scenary, is it normal to get between 60 to 120% of dropped packets from libpcap stats? Ntop by itself has 0% of drops, but I think excessive the low performance of libpcap with this machine. Or maybe am I misinterpreting the data? Thank you, Eladio Pérez Nieto =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
