I tried in the past and that was working fine. Jerome De : Brian Dickson <brian.peter.dick...@gmail.com> Date : vendredi 23 novembre 2018 à 07:44 À : Jerome Tollet <jtol...@cisco.com> Cc : "vpp-dev@lists.fd.io" <vpp-dev@lists.fd.io> Objet : Re: [vpp-dev] Request: please add "real" pcap ability #vpp
On Thu, Nov 22, 2018 at 8:18 AM Jerome Tollet (jtollet) <jtol...@cisco.com<mailto:jtol...@cisco.com>> wrote: Hi Peter, (It's actually Brian, BTW.) Did you try creating a pg interface and spanning packet from your port to this interface? I didn't, there wasn't a lot of documentation that would have pointed in that direction. But, I will, thanks for the suggestion. Brian Jerome De : <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> au nom de "brian.peter.dick...@gmail.com<mailto:brian.peter.dick...@gmail.com>" <brian.peter.dick...@gmail.com<mailto:brian.peter.dick...@gmail.com>> Date : jeudi 22 novembre 2018 à 00:58 À : "vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>" <vpp-dev@lists.fd.io<mailto:vpp-dev@lists.fd.io>> Objet : [vpp-dev] Request: please add "real" pcap ability #vpp Hi, dev folks, Apologies for my first message being kind of demanding. However, I think this is a reasonable request. What I am interested in, and I think this is likely to be a fairly universal desire, is the ability to properly integrate some kind of pcap packet capture to the full VPP graph. The current available mechanisms (pcap drop trace and pcap tx trace) do not apply to packets that are only "handled" by the host in question, i.e. neither originate or terminate on the local host. In particular, I'm interested in something that can run on a bare metal host and, presuming sufficient resources can be given to it (cores, memory, etc), do packet capture at line rate. Thus, any restriction ("run it on a VM") is not adequate. Given that there is already stuff for handling the pcap file already (in vnet/unix IIRC), this should not be a lot of work. There are two use cases I have: • debugging data plane stuff on a vpp-based router (i.e. using the vppsb netlink and router projects) • packet capture at line rate (a vpp host that only listens/drops traffic, incidental to the packet capture, i.e. a single-purpose host, bypassing kernel/driver limitations, to take all ethernet traffic on a port and stuff it into a pcap file.) o NB: for scaling purposes, it is reasonable to implement the pcap captures using RSS/RFS to multiple cores and having each core be a thread doing pcap file writing; how that would be put into the "vpp graph" might be a little less than trivial, but should be straightforward, IMHO) Thanks in advance. Brian Dickson P.S. There is a SERIOUS lack of useful documentation on how to actually do this, as a potential ad-hoc contributor. Not sure if you guys have gotten this feedback from anyone else. P.P.S. I'm using 18.07 because that is the last version that builds alongside the vppsb netlink and router plugins. P.P.P.S. Even getting 18.07 and vppsb to build was a nightmare. You should try doing this from scratch, i.e. put yourselves in the shoes of someone who just discovered vpp...
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11376): https://lists.fd.io/g/vpp-dev/message/11376 Mute This Topic: https://lists.fd.io/mt/28282785/21656 Mute #vpp: https://lists.fd.io/mk?hashtag=vpp&subid=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-
