Craig pf_ring kernel module parameters do not affect DNA/Libzero as kernel is completely bypassed.
Regards Alfredo On Dec 8, 2012, at 10:08 PM, Craig Merchant <[email protected]> wrote: > Thanks! > > One more quick question... I see there is a "enable_ip_defrag" option for > the pf_ring module. Is it better for performance to enable it on the pf_ring > driver (assuming I'm running multiple Snort instances on top of DNA/Libzero)? > > Thx. > > Craig > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Luca Deri > Sent: Saturday, December 08, 2012 12:12 AM > To: [email protected] > Subject: Re: [Ntop-misc] ethtool settings > > Craig > I suggest to keep > >> ethtool -K $1 tso off &>/dev/null >> ethtool -K $1 gro off &>/dev/null >> ethtool -K $1 lro off &>/dev/null #may not be supported >> ethtool -K $1 gso off &>/dev/null > > the others I don't think are necessary > > Regards Luca > > On Dec 7, 2012, at 11:33 PM, Craig Merchant <[email protected]> wrote: > >> We have a Snort sensor that is running on a 10g Silicom card using >> DNA/Libzero. I see in the snortd init script it makes a number of changes >> to the NIC using ethtool. Are these the settings that I should be using for >> this scenario? >> >> ethtool -C $1 rx-usecs 1000 &>/dev/null >> ethtool -K $1 tso off &>/dev/null >> ethtool -K $1 gro off &>/dev/null >> ethtool -K $1 lro off &>/dev/null #may not be supported >> ethtool -K $1 gso off &>/dev/null >> ethtool -K $1 rx off &>/dev/null >> ethtool -K $1 tx off &>/dev/null >> ethtool -G $1 tx 32768 &>/dev/null >> ethtool -G $1 rx 32768 &>/dev/null >> ethtool -K $1 sg off &>/dev/null >> >> Thx. >> >> Craig >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
