Hi Katarina if you have our libpcap installed under /usr/local for instance, you can force tshark to use it:
# export LD_PRELOAD="/usr/local/lib/libpcap.so" # ldd /usr/bin/tshark | grep libpcap In order to use ZC you have to prepend the prefic “zc:” to the interface name (tshark -i zc:eth1). Alfredo > On 03 Dec 2014, at 16:02, Katarina Valent <[email protected]> > wrote: > > Hi Alfredo > > We are using PF_RING via jnetpcap that uses PF_RING aware libpcap. How to > enable ZC when using PF_RING in this way? > > Thank you, > Katarina > > From: [email protected] > [mailto:[email protected]] On Behalf Of Katarina Valent > Sent: Tuesday, December 02, 2014 6:30 PM > To: [email protected] > Subject: Re: [Ntop-misc] PF_RING ZC and jnetpcap > > Hi Alfredo > > thank you for your fast response. > Do you have any instructions how to link pf_ring aware libpcap? Seems that we > are using it wrong. > > Thank you, > Katarina > > > Katarina Valent > > tel: +385 1 6699 555 > fax: +385 1 6699 542 > mob: +385 91 7605 124 > > Intenda Net > Member of Recro Group > Av. V. Holjevca 40 > 10 010 Zagreb, Hrvatska > www.intendanet.hr > <https://owa.recro.hr/owa/redir.aspx?C=c60469cef3dc4cd4b8c1bad12ea50624&URL=http%3a%2f%2fwww.intendanet.hr> > > Šalje: [email protected] > <mailto:[email protected]> > <[email protected] > <mailto:[email protected]>> u ime Alfredo Cardigliano > <[email protected] <mailto:[email protected]>> > Poslano: 2. prosinca 2014. 18:25 > Prima: [email protected] <mailto:[email protected]> > Predmet: Re: [Ntop-misc] PF_RING ZC and jnetpcap > > Hi Katarina > pcount and tcpdump in the pf_ring tarball are our libpcap-based sample > applications you can use for testing, > please make sure tshark is linked against our pf_ring-aware libpcap. > > Alfredo > > On 02 Dec 2014, at 17:11, Katarina Valent <[email protected] > <mailto:[email protected]>> wrote: > > Hi > > We have been using PF_RING TNAPI and Intel 1G card with an java application > that used jnetpcap and libpcap to receive packets from PF_RING. Now we are > trying to upgrade existing system to use Intel 10G 82599 card and PF_RING ZC. > > Using instructions from > https://svn.ntop.org/svn/ntop/trunk/PF_RING/userland/examples_zc/README.quickstart > > <https://svn.ntop.org/svn/ntop/trunk/PF_RING/userland/examples_zc/README.quickstart>we > have installed ZC ixgbe driver and PF_RING. Additionaly, we have copied > libpcap from PF_RING into usr/lib and linked it with libpcap.so.1 because we > use jnetpcap and libpcap in our java application. > Usage of example program zcount seems to be working fine, but we cannot se > packets using tshark tool. Is there something extra we need to do to see > these packets? Our fear is that if tshark doesn't see packets, our > application also won't see them. Do we need to use some other JNI in our > applicatio for it to work with PF_RING ZC? > > Thank you, > Katarina Valent > > <image001.png> > Katarina Valent > Software developer > > tel: +385 1 6699 555 > fax: +385 1 6699 542 > mob: +385 91 7605 124 > > Intenda Net > Member of Recro Group > Av. V. Holjevca 40 > 10 010 Zagreb, Hrvatska > www.intendanet.hr <http://www.intendanet.hr/> > www.intaxisolutions.com <http://www.intaxisolutions.com/> > > > _______________________________________________ > Ntop-misc mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
