Hello,
I’m using PF_RING-6.0.1.
I’m trying to develop an application that runs some algorithm consisting on
rules.
I made some tests using the “pfcount” tester, and unfortunately, I don’t
understand the behavior:
I’m running the following command line: “./pfcount -i eth3 -u 2 -v 1 -r –m”
Hi Alfredo,
I hope you saw what I've sent last week. Any chance that you will take a
look at it soon?
Thanks,
Amir
On Fri, Apr 10, 2015 at 11:08 AM, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo,
Since the original pcap is huge, I sliced a smaller pcap from it, holding
344 packets
/FastVPSEestiOu/fastnetmon/wiki/Traffic-filtration-using-NIC-capabilities-on-wire-speed-(10GE,-14Mpps)
From my point of view ethtool interface is more flexible for hardware
filter management. But I can't find any API for C/C++ for it.
On Wed, Apr 29, 2015 at 10:50 AM, Amir Kaduri akadur
what exactly and how should I do the
modification in order to be able to use 32K hardware hash (signature) rules.
Any help will be appreciated.
Regards,
Amir
On Wed, Apr 29, 2015 at 11:17 AM, Amir Kaduri akadur...@gmail.com wrote:
Hi Pavel,
Thanks for your response.
I didn't try it yet, I'll
Hi,
I'm experiencing a possible bug in the
API pfring_handle_hash_filtering_rule(), when adding a rule.
The API return -1 (failure) although the hash rule has been added
successfully.
I experience it in versions 6.0.2 and 6.0.3.
In version 6.0.1 it works fine.
Can anyone please confirm that there
/PF_RING/commit/b67a6f46a06e68f2bb6cc53e9d452cc2cbe5f18f
On 12 May 2015, at 12:15, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo,
The application itself is one of the example application provided by
pf_ring itself called pfcount.
Here is a decription of he steps done:
Download pf_ring 6.0.3
.
Alfredo
On 14 Apr 2015, at 11:17, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo,
I hope you saw what I've sent last week. Any chance that you will take a
look at it soon?
Thanks,
Amir
On Fri, Apr 10, 2015 at 11:08 AM, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo,
Since
tester
- In /var/log/messages I see the following message that is probably
originated from ring_setsockopt(): kernel: [PF_RING] Found rule but
pluginId 0 is not registered
Thanks,
Amir
On Thu, Apr 2, 2015 at 5:06 PM, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo,
Thanks for referring
information, other than reading
/var/log/messages?
Thanks,
Amir
On Wed, Apr 8, 2015 at 1:08 PM, Alfredo Cardigliano cardigli...@ntop.org
wrote:
On 05 Apr 2015, at 16:07, Amir Kaduri akadur...@gmail.com wrote:
Hi,
I think I've made some progress: AFAIU, the packets that I see despite
the
issue.
Br
Alfredo
On 01 Apr 2015, at 18:22, Amir Kaduri akadur...@gmail.com wrote:
Hello,
I’m using PF_RING-6.0.1.
I’m trying to develop an application that runs some algorithm consisting
on rules.
I made some tests using the “pfcount” tester, and unfortunately, I don’t
understand
I'll appreciate validating that the following is a real problem that I've
found:
*Problem description:*
When I use the tester “pfcount_multichannel” with the –r argument (i.e.
enable rss rehash), the application doesn’t receive the packets of some
sessions.
When I remove the “-r” argument from
Hi Alfredo,
Any chance that you'll take a look at this issue? At least give an
indication whether its a real problem or not?
Thanks,
Amir
On Wed, May 27, 2015 at 4:59 PM, Amir Kaduri akadur...@gmail.com wrote:
I'll appreciate validating that the following is a real problem that I've
found
,
Amir
On Wed, Jul 1, 2015 at 7:22 AM, Amir Kaduri akadur...@gmail.com wrote:
Thank you Alfredo for your response. Soon I'll test again with latest code.
Amir
On Tue, Jun 30, 2015 at 7:54 PM, Alfredo Cardigliano cardigli...@ntop.org
wrote:
Hi Amir
sorry I didn’t have the testbed for testing
Hi Alfredo,
I would like to add that I repeated the test with RSS=8,8,8,8,8,8,8,8 like
you, and now it works.
I guess that If you'll do it like with (with RSS 6) you'll notice the
problem as well.
Thanks,
Amir
On Thu, Jul 2, 2015 at 6:06 PM, Amir Kaduri akadur...@gmail.com wrote:
Hi Alfredo
/Documentation/networking/ixgbe.txt
2. Should I expect the mentioned feature request to be implemented in
pf_ring soon, or its most probably be there with many other prioritized
requests?
Thanks,
Amir
On Tue, Nov 10, 2015 at 3:32 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Thanks for t
Hi,
In my application, I’m using pf_ring hash software filters (API:
pfring_handle_hash_filtering_rule()).
How can I get statistics info regarding the quantity of the filtered
packets?
I know that on ixgbe module, I can get the following parameters when using
ethtool –s :
fdir_match,
Hi Alfredo,
Having it per interface under /proc is excellent.
Thanks,
Amir
On Mon, Nov 16, 2015 at 11:56 AM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
> On 16 Nov 2015, at 10:53, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
>
&
to get the pf_ring statistics aggregated as well, per
interface, or at least per ring?
Thanks,
Amir
On Wed, Nov 11, 2015 at 8:01 PM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
> On 11 Nov 2015, at 18:02, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Two followi
s by default (unless you code your own kernel plugin
> and read stats via pfring_get_hash_filtering_rule_stats, but this is
> overkilling for match/miss counters),
> please open a feature request on github.
>
> Alfredo
>
> On 09 Nov 2015, at 18:28, Amir Kaduri <akadur...
ve enough info to do it
or not).
Thanks,
Amir
On Tue, Nov 17, 2015 at 5:04 PM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
> On 17 Nov 2015, at 15:54, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
> Thanks for that.
> 1. stats per socket means stats per
interfaces, and the packets physically arrive to
only one of them.
Amir
On Thu, Dec 3, 2015 at 3:41 PM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
> On 03 Dec 2015, at 13:44, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
> (1) Per your fix to updat
Match" in /proc)
Thanks,
Amir
On Mon, Dec 7, 2015 at 2:10 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Hi,
>
> In regard of the problem that missed packets counted on all rings instead
> of on the relevant ring only:
> We use a quite simple configuration: We us
Hi Alfredo,
Even if these two issues are not going to be fixed soon, I just want to
know that you are aware of them.
Thanks,
Amir
On Tue, Dec 8, 2015 at 9:53 AM, Amir Kaduri <akadur...@gmail.com> wrote:
> Hi,
>
> Another problem in the counters (that were added to
> functi
Hi,
When using SW hash filters only, without ZC or anything like that, is it a
must to replace also the nic driver (igb or ixgbe) to a "pfringaware" one?
I see that without replacing the nic driver, SW hash filters still work ok,
and wonder whether there is anything else I should be aware of.
Hi,
I'm using pf_ring software hash filters in my user-space process.
1. Is there a possibility that while the process is down (e.g. by "kill -9"
or crash), the filters are still active in the pf_ring driver, so that when
a new instance of the same process is up, traffic is still filtered by the
Small correction about the example ring filename. It should be:
/proc/net/pf_ring/2851-eth8.251768
Amir
On Mon, Aug 15, 2016 at 2:20 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> I found a bug in my code, that reveals a potential bug in pf_ring code:
>
> In user-mode, I
Excellent!
Thanks,
Amir
On Tue, Aug 16, 2016 at 11:00 AM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
> Hi Amir
> fixed in latest code on github, thank you for reporting.
>
> Best Regards
> Alfredo
>
> On 15 Aug 2016, at 13:20, Amir Kaduri <akadur...@gmail
Hi,
I'm in a situation where I try to remove the pf_ring kernel module.
"rmmod pf_ring" gives "rmmod: ERROR: Module pf_ring is in use"
"lsmod | grep pf_ring" gives "pf_ring 1234009 20"
In this case, I try to find which process uses pf_ring, in order to
stop/kill it.
I run "ls -l
OS CentOS 7
pf_ring version: 6.6.0
On Mon, Jul 10, 2017 at 11:57 AM, Amir Kaduri <akadur...@gmail.com> wrote:
> Hi,
>
> I'm in a situation where I try to remove the pf_ring kernel module.
> "rmmod pf_ring" gives "rmmod: ERROR: Module pf_ring is in use"
&
Cardigliano <cardigli...@ntop.org>
wrote:
> Hi Amir
> did you load a ZC driver perhaps?
>
> Alfredo
>
> 2017-07-10 11:00 GMT+02:00 Amir Kaduri <akadur...@gmail.com>:
>
>> OS CentOS 7
>> pf_ring version: 6.6.0
>>
>> On Mon, Jul 10, 201
rote:
> Hi Amir
> you are "trying to replace the igb.ko" with?
> Please send us the output from dmesg.
>
> Alfredo
>
> 2017-07-10 13:22 GMT+02:00 Amir Kaduri <akadur...@gmail.com>:
>
>> No, not using ZC. But if it could be a reason and maybe I'm
Hi,
I'm using pf_ring 6.6.0 (for SW hash filtering only - no ZC) on CentOS 7 on
VMware.
All drivers are e1000. The pf_ring filtering seems to work.
Is there any benefit to remove the e1000 driver and install the e1000e
drivers that comes with pf_ring?
Thanks,
Amir
gli...@ntop.org>
wrote:
> Hi Amir
> e1000 and e1000e support different adapters (the latter is for pcie
> adapters in essence).
>
> Alfredo
>
> > On 9 Aug 2017, at 08:03, Amir Kaduri <akadur...@gmail.com> wrote:
> >
> > Hi,
> >
> > I'm using pf
Small correction: Jul-15, 2016. Sorry.
On Thu, Aug 17, 2017 at 5:04 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> I have an application written in the past, that heavily consists on bundle
> API in general, and on pfcount_bundle example application specifically.
> These APIs
I have an application written in the past, that heavily consists on bundle
API in general, and on pfcount_bundle example application specifically.
These APIs were deprecated on Jul-15, 2017 and don't exist anymore in
pf_ring 6.6.0.
What is the easiest way to adjust the existing code in order to be
Thanks for the prompt reply.
Amir
On Tue, May 16, 2017 at 12:09 PM, Alfredo Cardigliano
<cardigli...@ntop.org> wrote:
> Hi Amir
>
>> On 16 May 2017, at 10:44, Amir Kaduri <akadur...@gmail.com> wrote:
>>
>> Hello,
>>
>> I assume that I miss a min
Hello,
I assume that I miss a minor detail, but I'll appreciate explaining
how the following files are deployed in the right place on the machine
when the pf_ring installation rpm is installed:
1. /usr/local/pfring/kernel/pf_ring.ko:
In source file ../package/rpm/pfring.spec.in line 37, the
/package/etc/systemd/system/pf_ring.service
$RPM_BUILD_ROOT/etc/systemd/system
install -m 644 $HOME/PF_RING/package/etc/systemd/system/cluster.service
$RPM_BUILD_ROOT/etc/systemd/system
Thanks,
Amir
On Wed, May 17, 2017 at 2:20 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Thanks
In function hash_pkt(), there is a if-else-if statement based on
ip_version. If ip_version is 0, the hash won't include the ipaddress.
Since the ip_version might come from the user input, I suggest adding
an "else" and issue a warning in case ip_version wasn't set.
Hello,
I have a situation where not all of the received packets are counted
as filtered, and I would like to better understand why.
To better understand it, I've done a controlled experiment, where
after the software hash filtering rule was added on a specific
5-tuple, I send exactly 5000 packets
fredo
>
>> On 4 Jun 2017, at 10:45, Amir Kaduri <akadur...@gmail.com> wrote:
>>
>> Hello,
>>
>> I have a situation where not all of the received packets are counted
>> as filtered, and I would like to better understand why.
>> To better understand it, I'
>
> Alfredo
>
>> On 29 May 2017, at 18:23, Amir Kaduri <akadur...@gmail.com> wrote:
>>
>> In function hash_pkt(), there is a if-else-if statement based on
>> ip_version. If ip_version is 0, the hash won't include the ipaddress.
>> Since the ip_version mig
to avoid
> flooding dmesg and slowing doen packet processing,
> if ip_version comes from user input, sanity check should happen in userspace
> in my opinion.
>
> Regards
> Alfredo
>
>> On 1 Jun 2017, at 07:38, Amir Kaduri <akadur...@gmail.com> wrote:
>&
et is not an IP packet (ARP or whatever), ip_version is 0 and your
> message is printed, for every packet.
>
> Alfredo
>
>> On 1 Jun 2017, at 11:00, Amir Kaduri <akadur...@gmail.com> wrote:
>>
>> Hi Alfredo,
>>
>> I'm aware that this function
are very short, I included them in the same patch file,
rather than splitting them into 2 separate patches (fix and enhancement).
Thanks,
Amir
On Thu, Sep 14, 2017 at 9:07 AM, Amir Kaduri <akadur...@gmail.com> wrote:
> Another question related to the same issue:
>
> I wonder
. The allocated rule_id in case of success (that will be used for removing
the rule)
Thanks
On Tue, Sep 12, 2017 at 8:34 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Hi,
>
>
>
> I would like to clarify a point regarding sw hash filtering rules and the
> purge idle feature:
&g
I’ve added a new feature that I would like to share.
The pf_ring feature allows packets sampling of packets that belong to a sw
filtered session.
In other words, if a sw filter is applied, you will be able not to block
100% of the packets (till filtering rule removal). Some packets will be
Hi,
I would like to clarify a point regarding sw hash filtering rules and the
purge idle feature:
In my application, I’m using sw hash filtering rules to block sessions. For
that purpose, I’m using the API pfring_handle_hash_filtering_rule() to add
and remove rules.
When adding a rule with an
h and
> delete any
> occurrence as that was the length of metadata when using kernel plugins
> (deprecated).
>
> Regards
> Alfredo
>
> On 21 Aug 2017, at 12:31, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Since its about 6 functions, a possible solution could be just
ggest a simple alternative to this check, based on pf_ring
6.6.0?
Thanks
On Thu, Aug 17, 2017 at 5:11 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Small correction: Jul-15, 2016. Sorry.
>
> On Thu, Aug 17, 2017 at 5:04 PM, Amir Kaduri <akadur...@gmail.com> wrote:
>
>>
Hi Alfredo,
The attached patch includes a fix of a bug that relates to updating the
last time a hash rule was active. I assume that the
pfring_purge_idle_hash_rules()
API doesn't work for this reason.
I also added an enhancement of the API pfring_get_hash_filtering_rule_stats()
to return for how
Hi,
I'm using pf_ring 6.6.0 (no ZC) on CentOS 7, on 10G interfaces (ixgbe
drivers).
As far as I understand the relation between poll-watermark and
poll-duration, packets will be queued untill one of comes first: or passing
the poll-watermark packets threshold, or a poll-duration milliseconds has
Hi,
I'm using pf_ring 6.6.0 (not using ZC) on CentOS 7.0.
I would like to upgrade the i40e driver (only) to 2.2.4 (i.e. take the code
of i40e from pf_ring 7.0 and put it in pf_ring 6.6.0 and use them together).
The question is how risky it is? How pf_ring is tight up with the i40e
driver
please clarify?
Thanks,
Amir
On Wed, Oct 18, 2017 at 8:48 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Hi,
>
> I'm using pf_ring 6.6.0 (no ZC) on CentOS 7, on 10G interfaces (ixgbe
> drivers).
> As far as I understand the relation between poll-watermark and
> poll-duration
Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
> Hi Amir
> yes, that’s the way it should work, if this is not the case, some
> debugging is needed to identify the problem
>
> Alfredo
>
> On 26 Oct 2017, at 10:14, Amir Kaduri <akadur...@gmail.com> wrote:
>
Thanks,
Amir
On Tue, Oct 31, 2017 at 10:20 AM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
>
> On 31 Oct 2017, at 08:42, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
> I'm trying to debug the issue, and I have a question about the
Good.
There is a pull-request waiting. I hope you'll find it beneficial:
https://github.com/ntop/PF_RING/pull/340
Thanks,
Amir
On Tue, May 1, 2018 at 1:19 AM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
>
> On 30 Apr 2018, at 17:52, Amir Kaduri <akadur...@gmail.com&
Same feature, new implementation in PR:
https://github.com/ntop/PF_RING/pull/343
On Sun, May 6, 2018 at 7:18 PM, Amir Kaduri <akadur...@gmail.com> wrote:
> Good.
> There is a pull-request waiting. I hope you'll find it beneficial:
> https://github.com/ntop/PF_RING/pull/340
>
) if
some "timeout" passed and the queue is not empty (but still didn't reach
the watermark).
Amir
On Thu, Apr 26, 2018 at 6:00 PM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
>
>
> On 26 Apr 2018, at 15:34, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Al
On Thu, May 3, 2018 at 4:11 PM, Alfredo Cardigliano <cardigli...@ntop.org>
wrote:
> Hi Amir
> ring_id should not change, thus it can be cached in userspace,
> any reason you cannot cache it inside the application?
>
> Alfredo
>
> > On 3 May 2018, at 15:09, Amir Kadu
aware of other use cases / applications reading it so often.
>
> Alfredo
>
> On 3 May 2018, at 15:40, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
> No reason not to cache it inside the application, but why let any
> application to implement it, if its possibl
User-space API function pfring_get_ring_id() always bring the ring id from
the kernel. In some applications, this API call might be used within debug
messages, in order to be able to track a relevant ring. If the application
uses this API too often (for debugging purposes), there could be too much
Do the rx queues of an interface are determined only when loading the
kernel driver, or is there another thing that affects that?
My problem is that I get a number that differs than what I think should be
(because maybe something during the machine boot doesn't work properly)
For example:
What I
/i40e-2.4.6-zc/src/load_driver.sh#L39
>
> Please also make sure that you are actually unloading the old driver
> before running insmod (maybe the new insmod is failing)
>
> Alfredo
>
> On 10 Jul 2018, at 15:46, Amir Kaduri wrote:
>
> Do the rx queues of an interface are det
lt;cardigli...@ntop.org>
wrote:
> Hi Amir
> that's correct, however for some reason it seems it is not the case in
> your tests.
>
> Alfredo
>
> On 31 Oct 2017, at 12:08, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Thanks. tot_insert apparently works o
ou should look for differences
> between the two applications..
>
> Alfredo
>
> On 9 Apr 2018, at 07:20, Amir Kaduri <akadur...@gmail.com> wrote:
>
> Hi Alfredo,
>
> I'm back to investigate/debug this issue in my environment, and maybe
> you'll manage to save me s
66 matches
Mail list logo
