Mailing List Archive

Performance on pfring vs pcap
Hi All,

I am running a gateway to capture packet using PFRING and PCAP. With the
IP address both set to 0.0.0.0 on the two NICs (eth0 and eth1), a web
server connected to eth1 directly while eth0 is connected to a workstation .

When I tried to ping the web server from the workstation, the ping reply
is <1ms when using pcap, however the reply become 900ms when using pfring.

Is there any idea?

Thanks,
Ken


_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
Re: Performance on pfring vs pcap [ In reply to ]
Ken
try playing with pfring_set_poll_watermark(ring, watermark)
it is an optimization for avoiding too many poll-wakeup cycles,
try for instance setting the watermark to 1 and see what happens

Regards
Alfredo

On May 8, 2012, at 10:47 AM, kng180 wrote:

> Hi All,
>
> I am running a gateway to capture packet using PFRING and PCAP. With the
> IP address both set to 0.0.0.0 on the two NICs (eth0 and eth1), a web
> server connected to eth1 directly while eth0 is connected to a workstation .
>
> When I tried to ping the web server from the workstation, the ping reply
> is <1ms when using pcap, however the reply become 900ms when using pfring.
>
> Is there any idea?
>
> Thanks,
> Ken
>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
Re: Performance on pfring vs pcap [ In reply to ]
It is working, Alfredo! Thanks you so much!

Ken
On 2012/5/8 下午 05:03, Alfredo Cardigliano wrote:
> Ken
> try playing with pfring_set_poll_watermark(ring, watermark)
> it is an optimization for avoiding too many poll-wakeup cycles,
> try for instance setting the watermark to 1 and see what happens
>
> Regards
> Alfredo
>
> On May 8, 2012, at 10:47 AM, kng180 wrote:
>
>> Hi All,
>>
>> I am running a gateway to capture packet using PFRING and PCAP. With the
>> IP address both set to 0.0.0.0 on the two NICs (eth0 and eth1), a web
>> server connected to eth1 directly while eth0 is connected to a workstation .
>>
>> When I tried to ping the web server from the workstation, the ping reply
>> is<1ms when using pcap, however the reply become 900ms when using pfring.
>>
>> Is there any idea?
>>
>> Thanks,
>> Ken
>>
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc@listgateway.unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc