Hey Chris,

PCAP_NO_PF_RING is present in the strings output. I take it that it's not
using PF_RING?

Thanks

On Thu, Sep 22, 2011 at 11:10 AM, Chris Wakelin
<[email protected]>wrote:

> The PF_RING library gets statically linked into libpcap and tcpdump, I
> believe. Try "strings tcpdump" and see if you get things like
> "PCAP_NO_PF_RING" in it.
>
> Best Wishes,
> Chris
>
> On 22/09/11 16:06, Jon Schipp wrote:
> > Hello all,
> >
> > I've spent many hours this morning trying to get the tcpdump application
> > that is included with the PF_RING source to use PF_RING.
> > I've read the and followed the directions in README.FIRST, succesfully
> > compiled PF_RING and the userland, loaded the pf_ring.ko module, all
> good.
> >
> > I tested pf ring with pfcount/pcount and it reported 0 drops in packets
> when
> > using iperf and generating 800Mbps. Sweet!
> >
> > I'm running tcpdump IN the userland directory to test it with PF_RING.
> > However, the results are no different than with my normal tcpdump i.e.
> > dropping tons of packets.
> > Correct me if I'm wrong, but I was under the impression that the sources
> in
> > userland would be PF_RING "ready" after building the userland.
> > $ ldd ./tcpdump
> > linux-vdso.so.1
> > libpthread.so.0
> > libc.so.6
> > /lib/ld-linux-x86064.so.2
> >
> > I looked at this and was thinking that it wasn't compiled with the custom
> pf
> > ring libraries since I didn't see libpfring etc. but then I went to the
> > examples directory and did an ldd on pcount and pfcount and they reported
> > the same libraries.
> >
> > As of now, I don't know whether it's a library issue or not.
> >
> > Thanks
> >
> >
> >
> > _______________________________________________
> > Ntop-misc mailing list
> > [email protected]
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
> --
> --+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+---+-
> Christopher Wakelin,                           [email protected]
> IT Services Centre, The University of Reading,  Tel: +44 (0)118 378 2908
> Whiteknights, Reading, RG6 6AF, UK              Fax: +44 (0)118 975 3094
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>



-- 
- Jon
-- 
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs -  http://www.bloominglabs.org
ISSA-Kentuckiana  -  http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983  AD3C 6C20 BEFD 8109 03CB
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to