Peter I have written a short blog article (http://www.ntop.org/blog/?p=56) that I hope clarifies how transparent mode works
Luca On Mar 4, 2010, at 5:03 PM, Peter Bates wrote: > > Hello all... > > --On 03 March 2010 15:58 +0200 Beyers Cronje <[email protected]> wrote: > >>> I presently do not have TNAPI but am considering using it if it gives >>> better throughput. >>> >>> - 'insmod pf_ring.ko transparent_mode=1': PF_RING-aware driver copies >>> the packets into PF_RING, while the same packet is still passed to >>> TNAPI - 'insmod pf_ring.ko transparent_mode=2': PF_RING-aware driver >>> copies the packets into PF_RING, no the packet still is passed to >>> TNAPI > > I'm not using TNAPI but my reading of the above (which seems to correspond to > my testing) is that with 'transparent_mode=2' and a PF_RING-aware NIC driver > then non-PF_RING-aware applications see no packets at all. > > With the other two modes PF_RING-aware applications function better but > just running a standard tcpdump up will see some traffic as well. > > Part of my confusion is that at the moment I'm rmmod'ing the NIC driver, > inserting the pf_ring driver (with transparent_mode=2) and then insmod'ing > the NIC driver again and doing 'ifconfig up' before it sees the traffic. > If I reboot my machine and the NIC driver is insmod'ed before pf_ring > then it sees nothing at all. > > -- > Peter Bates, Network Support & Development Officer > Goldsmiths, University of London > New Cross, London SE14 6NW. Telephone: 020 7919 7082 > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc --- Keep looking, don't settle - Steve Jobs _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
