> I am considering to use pfring with tnapi on my project, in which I process > high amounts of traffic (around 1gbps or 900kpps). The problem is, most of > the incoming data consists of sip packets, which are sent using udp, hence no > sessions are established as in tcp case. How does tnapi process those > packets? Does it send each packet belonging to the same sip session to some > random thread in its list, or does it have some sort of mechanism that > enables the whole sip session to be sent to the same thread? My question is > not solely about sip ofcourse, since it is an application layer issue, but more > about the distribution of udp packets among threads. > > Thanks
As far as I know PF_RING/TNAPI will only give access to the packet from your capture program. It will not deal at all with what is inside the packet, and no SIP packet will be decoded nor session followed. Yann _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
