deri at ntop
Jul 21, 2005, 10:08 AM
Post #2 of 2
(590 views)
Permalink
|
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Juan,
Juan wrote:
> Hi,
> Two other nCap questions using the modified libpcap:
> - Is there support for filtering (BPF style) or all packets are received in
> user space?
The Intel NIC does not provide filtering capabilities (beside L2
filtering that every card does). So filtering is in userland, done
transparently by libpcap-ncap.
> - Does pcap_stats work the same as with libpcap? Does it report packets
> received by the device driver? Does it report lost packets?
It works the same way. Lost packets are not reported as the card cannot
detect them because they are lost by the card (hence not accounted) and
not by the kernel. This is consistent with the pcap behaviour.
Cheers, Luca
>
> Thanks,
> Juan
>
> -----Original Message-----
> From: ntop-misc-bounces [at] listgateway
> [mailto:ntop-misc-bounces [at] listgateway] On Behalf Of Luca Deri
> Sent: Tuesday, July 19, 2005 11:47 PM
> To: ntop-misc [at] listgateway
> Subject: Re: [Ntop-misc] FW: PF_RING / nCap
>
> Juan,
> Juan wrote:
>
>
>>I believe these questions belong here rather than in the ntop users list
>>=================================
>>Hi,
>>Three questions:
>>PF_RING: Is it still necessary to use RTIRQ patch for best performance?
>
> From
>
>>the paper I understand this is not needed anymore but the distribution from
>>the CVS still mentions it
>>PF_RING: Is it possible to change the options (bucket_len,...) at runtime?
>>Is rmmod + insmod (with the new option) an option? Any workaround anyone
>
> has
>
>>tried?
>>
>>
>
> Brad answer this question already.
>
>
>>nCap: What adapters are supported? The documentation states that Intel 1Gb.
>>Does that mean any Gbps adapter from Intel, like Intel PRO/1000 MT or Intel
>>PRO/1000 GT?
>>
>>
>>
>
> All the Intel Pro/1000 XX adapters.
>
> Cheers, Luca
>
>
>>Thanks,
>>Juan
>>
>>_______________________________________________
>>Ntop-misc mailing list
>>Ntop-misc [at] listgateway
>>http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>>
>>
>
>
>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.1 (Darwin)
Comment: Using GnuPG with Thunderbird - http://enigmail.mozdev.org
iD8DBQFC39Z4mMhDxnkh3zQRAokHAKCBOA2K4Er7LbtE+p8smGEt+0qGmgCeKZ4p
CcnjK0z+WVO3had8fL23fDc=
=EDxg
-----END PGP SIGNATURE-----
|
