Hi Alfredo
Thank you for your help so far. If you could answer few more questions:
1) we are planning to use PF_RING with libpcap and jnetpcap. Can we add
hardware filtering directly from jnetPcap?
2) when adding filter using PF_RING/userland/examples_zc/zcount.c what
parameters for -c and -g should we use? It is hard to understand from code what
cluster_id and core_id means. Do you have any other documentation? When using
"./zcount -i eth2 -c 1 -g 1 -R" we get:
pfring_zc_add_hw_rule(0) failed: did you enable the FlowDirector
(ethtool -K ethX ntuple on)
3) when inserting hardware filtering rule with ethtool we can add one filter:
ethtool -U eth2 flow-type ip4 src-ip 192.168.102.87 action 0
but adding additional similar filter:
ethtool -U eth2 flow-type ip4 dst-ip 192.168.102.87 action 0
results in error (dmesg):
ixgbe 0000:02:00.1: eth2: Only one mask supported per port
We have traced that this message comes from ixgbe_ethtool.c file from ixgbe
driver from PF_RING. In original ixgbe driver this message does not appear. Is
this some specific limitation when using PF_RING?
Thank you,
Katarina Valent
-----Original Message-----
From: [email protected]
[mailto:[email protected]] On Behalf Of Pavel Odintsov
Sent: Tuesday, November 25, 2014 4:20 PM
To: [email protected]
Subject: Re: [Ntop-misc] Hardware filtering problem
Hello!
We checked PF_RING hw filters and add they correctly. But we can't see added
rules with ethtool. Maybe it buggy...
On Tue, Nov 25, 2014 at 2:44 PM, Katarina Valent
<[email protected]> wrote:
> Thank you. This was very helpful.
>
>
>
> Best regards,
>
> Katarina Valent
>
>
>
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Alfredo
> Cardigliano
> Sent: Tuesday, November 25, 2014 12:36 PM
>
>
> To: [email protected]
> Subject: Re: [Ntop-misc] Hardware filtering problem
>
>
>
> Hi Katarina
>
> ethtool should work but it is not pf_ring-specific, we do not have
> documentation for that sorry.
>
>
>
> Alfredo
>
>
>
> On 25 Nov 2014, at 12:32, Katarina Valent
> <[email protected]>
> wrote:
>
>
>
> Hi Alfredo
>
>
>
> I have looked into example in zcount.c and have few questions. In
> script there is mentioned FlowDirector and ehtool.
>
> In https://www.kernel.org/doc/Documentation/networking/ixgbe.txt I
> have found how FlowDirector is used using ethool.
> My question is: to start hardware filtering is it enough to add rule
> using ethtool? Do you have any documentation on adding filters using ethtool?
>
>
>
> Thank you,
>
> Katarina Valent
>
>
>
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Alfredo
> Cardigliano
> Sent: Tuesday, November 25, 2014 10:23 AM
> To: [email protected]
> Subject: Re: [Ntop-misc] Hardware filtering problem
>
>
>
> Hi Katarina
>
> you are right, we will update the documentation asap,
>
> please also look at PF_RING/userland/examples/pfcount_82599.c for more
> examples.
>
>
>
> Best Regartds
>
> Alfredo
>
>
>
> On 25 Nov 2014, at 08:49, Katarina Valent
> <[email protected]>
> wrote:
>
>
>
> Hi Alfredo
>
>
>
> Thank you for your prompt response. We will look into examples you
> have mentioned.
>
> We were using instructions from:
> http://www.ntop.org/products/pf_ring/hardware-packet-filtering/
>
> Are there any updated instructions we could use?
>
>
>
> Best regards,
>
> Katarina Valent
>
>
>
> From: [email protected]
> [mailto:[email protected]] On Behalf Of Alfredo
> Cardigliano
> Sent: Monday, November 24, 2014 5:03 PM
> To: [email protected]
> Subject: Re: [Ntop-misc] Hardware filtering problem
>
>
>
> Hi Katarina
>
> please read below
>
>
>
> On 24 Nov 2014, at 15:18, Katarina Valent
> <[email protected]>
> wrote:
>
>
>
> Hi
>
>
>
> Until now, we have used PF_RING TNAPI for packet filtering on Intel 1G
> card so we are familiar with PF_RING. We are now working on a project
> that requires hardware filtering on 82599 Intel network card using PF_RING.
>
> We have recently purchased PF_RING ZC license for 10 Gbit adapters
>
> Steps we have done:
>
> - Downloaded downloaded PF_RING-6.0.2.tar.gz
>
> - Compiled PF_RING and drivers from PF_RING-6.0.2
>
> - purchased PF_RING ZC license for 10 Gbit adapters (order
> 1416498630)
>
> - downloaded
> http://www.nmon.net/packages/debian/7.6/all/PF_RING-dkms/pfring-dkms_6
> .0.3_all.deb
> and installed it
>
> - activated licence per instructions
>
> - insmoding pf_ring and ixgbe.ko driver using script in attachment
> (script is located in
> /opt/PF_RING-6.0.2/drivers/PF_RING_aware/intel/ixgbe/ixgbe-3.21.2-zc/s
> rc)
>
>
>
> Problems we have:
>
> - we don't seem to get file in cat /proc/net/pf_ring/dev/eth2/rules
> where rules for hardware filtering can be set.
>
>
>
> /proc is deprecated, you should add/remove rules using the API.
>
> Please take a look at the examples in
> PF_RING/userland/{examples,examples_zc}, for instance ./zcount -h |
> grep "\-R"
>
>
>
>
>
> - Insmod ixgbe.ko with parameter FdirMode=2,2,2,2 returns: Error:
> could not insert module ixgbe.ko: Unknown symbol in module
>
>
>
> FdirMode is deprecated, actually it is not present in the enclosed script.
>
>
>
>
>
> - In dmesg after using load_driver_“.sh script we do not get line:
> ixgbe: 0000:02:00.0: ixgbe_check_options: Flow Director perfect
> filtering enabled
>
>
>
> You should not expect this message in latest driver.
>
>
>
>
>
> I have attached output from dmesg after using script load_driver_2.sh
>
>
>
> Can you help us determine what are we doing wrong?
>
>
>
> Thank you in advance,
>
> Katarina Valent
>
>
>
> Best Regards
>
> Alfredo
>
>
>
>
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
--
Sincerely yours, Pavel Odintsov
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
