Ignore my last e-mail.
The problem I'm having is that the particular system is limited to 8 million
packets/second, no matter what it does. There appears to be a hardware problem.
I have a second system that is nearly identical (same case, same motherboard,
same dual-port 10gbps NIC), but with a different CPU (Sandy Bridge instead of
Ivy Bridge), and it seems to run fine. At least, a single thread is getting 11
million packets/second, and two threads are getting 17 million packets/second.
Of course, I think it should be getting 22 megapkts instead of 17, but at least
I'm getting "wire speed" :).
________________________________
From: Robert Graham <[email protected]>
To: "[email protected]" <[email protected]>
Sent: Friday, September 13, 2013 10:18 PM
Subject: [Ntop-misc] masscan
Hi,
I have a fast port scanner that works with PF_RING DNA:
https://github.com/robertdavidgraham/masscan/
Right now, it's transmitting 8.7 million packets/second, which is a bit slow,
so I want to add multiple transmit threads using both multiple network adapters
and/or multiple transmit/receive queues per adapter.
But that doesn't work. When I start two transmit threads, each goes half as
fast. The same is true whether they are part of the same process (two threads),
or whether I launch two processes, one on each network adapter. Does anybody
know why this might happen?
------
If you want to try it out on your own machine, the code is pretty simple. To
build, just do the following:
git clone https://github.com/robertdavidgraham/masscan/
cd masscan
make
The create a configuration file "foo.conf" like the following:
range = 0.0.0.0/0
ports = 0-65535
exclude-ip = 255.255.255.255
rate = 20000000
router-mac[0] = 66-55-44-33-22-11
router-mac[1] = 66-55-44-33-22-11
adapter-ip[0] = 192.168.168.168
adapter-ip[1] = 192.168.168.168
adapter[0] = dna0
adapter[1] = dna1
Then run it:
masscan -c foo.conf
The output looks like the following. The last line is a status that updates
once per second showing the current rate.It bounces around between 8.5 and 8.8
million packets-per-second.
Starting masscan 1.0 (http://bit.ly/14GZzcT) at 2013-09-14 02:16:10 GMT
-- forced options: -sS -Pn -n --randomize-hosts -v --send-eth
Initiating SYN Stealth Scan
Scanning 4026531839 hosts [65536 ports/host]
rate:8568.89-kpps, 0.00% done,9164:18:27 remaining, 0-tcbs,
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
