> On 30 May 2015, at 15:55, Pavel Odintsov <[email protected]> wrote: > > Hello! > > I need ability to monitor traffic at wire speed on server with only one > physical interface. I need some way to monitor traffic without detaching > interface from the stack. > > I.e. Linux network stack should work too. There is any way to implement this > approach without custom traffic copying and injecting it to the linux stack?
You have two options: standard mode or ZC mode. If you want to capture line-rate traffic you need to open the device in ZC mode and send (a subset of) them to the stack, this is the only way. > Could I achieve wire speed for traffic injection to the Linux network stack? The stack is the bottleneck here. Alfredo > > > -- > Sincerely yours, Pavel Odintsov > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
