Thanks Alfredo. Since the 82598 doesn't support hardware filtering, but it does support RSS queue filtering, couldn't that be used as a hardware filter? In other words, couldn't you just create a simple rule for specific IPs to go to a certain queue, and everything else will be dropped. Of course it won't allow for complicated filters, but it seems like a start.
On Tue, Mar 26, 2013 at 8:51 PM, Cliff Burdick <[email protected]> wrote: > Hi, I have the intel 82598 controller, and I'm wondering what is the most > efficient way to filter packets since there's no HW filtering on the chip. > I expect that less than 1% of the packets will be filtered out. The options > are: > > 1) PF_RING in transparent_mode = 1 with BPF in libpcap > 2) PF_RING in DMA mode and do the packet filtering in userspace > 3) PF_RING in transparent_mode = 1 with pf_ring doing the filtering in the > kernel > > The reason I'm asking is because my current setup is dropping packets as > reported by both pfcount and ifconfig. > > Thanks >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
