> On 14 Oct 2015, at 13:28, Lars Kulseng <[email protected]> wrote: > > Using zbalance_ipc works. I have a couple related questions: > 1. Will the names of the queues always be: > zc:<cluster_number>@<queue_number>?
Yes > 2. Will the numbers always be in configuration order? i.e. for -c 99 -n > 2,4,1, will the queue names be: > App1: > zc:99@0, zc:99@1 > App2: > zc:99@2, zc:99@3, zc:99@4, zc:99@5 > App3: > zc:99@6 Yes Alfredo > > > > > ons. 14. okt. 2015 kl. 11.05 skrev Alfredo Cardigliano <[email protected] > <mailto:[email protected]>>: > Hi Lars > I guess you are using RSS queues, > what you need is zbalance_ipc, which is a software load balancer. > Please disable RSS (RSS=1,1) and run for instance: > zbalance_ipc -i zc:ethX -c 99 -m 1 -n 4,2,1 > where 4 is the number of queues for suricata, 2 for snort, and 1 for argus, > just as an example. > Take a look at the output for the queue names. > > Alfredo > > > On 14 Oct 2015, at 10:51, Lars Kulseng <[email protected] > > <mailto:[email protected]>> wrote: > > > > I am setting up some IDS tools to work with pf_ring in ZC-mode. So far my > > testing has shown that 2 queues is sufficient for the traffic I'm seeing. > > > > Setting e.g. Suricata to use these two queues seems to bind them to > > Suricata, meaning that other programs, e.g. Argus, cannot listen to the > > same data. > > > > Lets say I have 4 tools that I want to listen to the same traffic. How do I > > setup pf_ring ZC to support this? Or, if this is not possible, Could I set > > up some tools to use ZC and some to use vanilla pf_ring, reserving ZC for > > the most resource intensive tools? > > > > Lars > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] <mailto:[email protected]> > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> > > _______________________________________________ > Ntop-misc mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc> > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
