The PF_RING library gets statically linked into libpcap and tcpdump, I believe. Try "strings tcpdump" and see if you get things like "PCAP_NO_PF_RING" in it.
Best Wishes, Chris On 22/09/11 16:06, Jon Schipp wrote: > Hello all, > > I've spent many hours this morning trying to get the tcpdump application > that is included with the PF_RING source to use PF_RING. > I've read the and followed the directions in README.FIRST, succesfully > compiled PF_RING and the userland, loaded the pf_ring.ko module, all good. > > I tested pf ring with pfcount/pcount and it reported 0 drops in packets when > using iperf and generating 800Mbps. Sweet! > > I'm running tcpdump IN the userland directory to test it with PF_RING. > However, the results are no different than with my normal tcpdump i.e. > dropping tons of packets. > Correct me if I'm wrong, but I was under the impression that the sources in > userland would be PF_RING "ready" after building the userland. > $ ldd ./tcpdump > linux-vdso.so.1 > libpthread.so.0 > libc.so.6 > /lib/ld-linux-x86064.so.2 > > I looked at this and was thinking that it wasn't compiled with the custom pf > ring libraries since I didn't see libpfring etc. but then I went to the > examples directory and did an ldd on pcount and pfcount and they reported > the same libraries. > > As of now, I don't know whether it's a library issue or not. > > Thanks > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc -- --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+- Christopher Wakelin, [email protected] IT Services Centre, The University of Reading, Tel: +44 (0)118 378 2908 Whiteknights, Reading, RG6 6AF, UK Fax: +44 (0)118 975 3094 _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
