Hello! I have found new approach for this task. This approach could be implemented with bundled feature of 82599 hardware.
Intel 82599 NIC has support of traffic mirroring. I.e. we could create two virtual NIC with one physical. Attach one virtual NIC to Linux and another virtual NIC to PF_RING ZC. Finally, we could provide wire speed monitoring of traffic and Linux stack will work. Unfortunately, ixgbe driver lacks of support for this feature, thus I have created issue for it: https://sourceforge.net/p/e1000/bugs/480/ I will be very glad if you could add this feature to PF_RING's ixgbe. On Sun, May 31, 2015 at 1:22 PM, Alfredo Cardigliano <[email protected]> wrote: > Something like zbounce -i zc:ethX -o stack:ethX -b should do the job. > > Alfredo > >> On 31 May 2015, at 12:03, Pavel Odintsov <[email protected]> wrote: >> >> Hello! >> >> Thank you for fast answer! Do you have any examples of simple two >> direction forwarder between ZC and Linux Network Stack? >> >> On Sat, May 30, 2015 at 5:27 PM, Alfredo Cardigliano >> <[email protected]> wrote: >>> >>> >>>> On 30 May 2015, at 15:55, Pavel Odintsov <[email protected]> wrote: >>>> >>>> Hello! >>>> >>>> I need ability to monitor traffic at wire speed on server with only one >>>> physical interface. I need some way to monitor traffic without detaching >>>> interface from the stack. >>>> >>>> I.e. Linux network stack should work too. There is any way to implement >>>> this approach without custom traffic copying and injecting it to the linux >>>> stack? >>> >>> You have two options: standard mode or ZC mode. If you want to capture >>> line-rate traffic you need to open the device in ZC mode and send (a subset >>> of) them to the stack, this is the only way. >>> >>>> Could I achieve wire speed for traffic injection to the Linux network >>>> stack? >>> >>> The stack is the bottleneck here. >>> >>> Alfredo >>> >>>> >>>> >>>> -- >>>> Sincerely yours, Pavel Odintsov >>>> _______________________________________________ >>>> Ntop-misc mailing list >>>> [email protected] >>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>> >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> >> >> -- >> Sincerely yours, Pavel Odintsov >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc -- Sincerely yours, Pavel Odintsov _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
