Hi Cliff this is what happens with the adapters supporting ntuple filters (82599/X540). As far as I know 82598 has some limited filtering capabilities that are useless in practice.
Alfredo On Apr 1, 2013, at 3:34 AM, Cliff Burdick <[email protected]> wrote: > Thanks Alfredo. Since the 82598 doesn't support hardware filtering, but it > does support RSS queue filtering, couldn't that be used as a hardware filter? > In other words, couldn't you just create a simple rule for specific IPs to go > to a certain queue, and everything else will be dropped. Of course it won't > allow for complicated filters, but it seems like a start. > > > On Tue, Mar 26, 2013 at 8:51 PM, Cliff Burdick <[email protected]> wrote: > Hi, I have the intel 82598 controller, and I'm wondering what is the most > efficient way to filter packets since there's no HW filtering on the chip. I > expect that less than 1% of the packets will be filtered out. The options are: > > 1) PF_RING in transparent_mode = 1 with BPF in libpcap > 2) PF_RING in DMA mode and do the packet filtering in userspace > 3) PF_RING in transparent_mode = 1 with pf_ring doing the filtering in the > kernel > > The reason I'm asking is because my current setup is dropping packets as > reported by both pfcount and ifconfig. > > Thanks > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
