Sure. Look in the list archives you will find posts on tunning netsniff-ng and system. There is no single silver bullet as in 'turn this knob, done' but rather a path towards uninterrupted 10Gbit/sec ;)
Do you really have 10Gbit traffic or a 10GbE interface? As for hardware - aim for less cores and lots of Ghz. RAM - I have 64GB but that's too much. You will run several netsniff-ng instances in parallel. Network card is very important - something based on 82599 - Intel X520, X540, X710. Disk subsystem - as many disks you can have, as fast as you can afford. If possible, go with at least 10k (or even 15k) SAS. If not, lots of NL-SAS 7.2k might do. I have 12x SAS 7.2k and have achieved around 7Gbit/sec (didn't really need more) with peaks around 9Gbit but that was a little to much. OS - you favourite choice of Linux. Pay attention to the kernel, would be cool to run at least 3.16 is possible. If not, aim for "as new as you can get" like 3.13. Filesystem - XFS. And go ask more specific questions here, anytime. Good luck. On Thu, Jun 18, 2015 at 10:01 AM, Ivan Cheng <[email protected]> wrote: > Hi Experts, > > I would like to make use of HP Proliant servers to capture the 10Gb > interface traffic using netsniff-ng. Is it possible? > > Is there any sample HW and OS requirement or configuration to fulfill it > especially for the storage? > > Thanks in advance. > > > >> >> > -- > You received this message because you are subscribed to the Google Groups > "netsniff-ng" group. > To unsubscribe from this group and stop receiving emails from it, send an > email to [email protected]. > For more options, visit https://groups.google.com/d/optout. -- You received this message because you are subscribed to the Google Groups "netsniff-ng" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. For more options, visit https://groups.google.com/d/optout.
