Hi,
I have a fast port scanner that works with PF_RING DNA:
https://github.com/robertdavidgraham/masscan/
Right now, it's transmitting 8.7 million packets/second, which is a bit slow,
so I want to add multiple transmit threads using both multiple network adapters
and/or multiple transmit/receive queues per adapter.
But that doesn't work. When I start two transmit threads, each goes half as
fast. The same is true whether they are part of the same process (two threads),
or whether I launch two processes, one on each network adapter. Does anybody
know why this might happen?
------
If you want to try it out on your own machine, the code is pretty simple. To
build, just do the following:
git clone https://github.com/robertdavidgraham/masscan/
cd masscan
make
The create a configuration file "foo.conf" like the following:
range = 0.0.0.0/0
ports = 0-65535
exclude-ip = 255.255.255.255
rate = 20000000
router-mac[0] = 66-55-44-33-22-11
router-mac[1] = 66-55-44-33-22-11
adapter-ip[0] = 192.168.168.168
adapter-ip[1] = 192.168.168.168
adapter[0] = dna0
adapter[1] = dna1
Then run it:
masscan -c foo.conf
The output looks like the following. The last line is a status that updates
once per second showing the current rate.It bounces around between 8.5 and 8.8
million packets-per-second.
Starting masscan 1.0 (http://bit.ly/14GZzcT) at 2013-09-14 02:16:10 GMT
-- forced options: -sS -Pn -n --randomize-hosts -v --send-eth
Initiating SYN Stealth Scan
Scanning 4026531839 hosts [65536 ports/host]
rate:8568.89-kpps, 0.00% done,9164:18:27 remaining, 0-tcbs,
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
