After following these instructions: http://www.ntop.org/pf_ring/best-practices-for-using-bro_ids-with-pf_ring-zc-reliably/
The actual command was like the following: zbalance_ipc -i zc:<link1>,zc:<link2>,zc:<link3>,zc:<link4> -n 4 -m 1 -c 2 -r 0:dummy0 -r 1:dummy1 -r 2:dummy2 -r 3:dummy3 I found it was reporting something like the following: 27/Sep/2016 18:17:56 [NetworkInterface.cpp:990] [dummy0] [8'854'686 pps/19.83 Gbps][29'412/0/0/512'000 act/exp/drop/max flows][0/0 RX/TX pkt drops][0 TX pps] 27/Sep/2016 18:17:56 [NetworkInterface.cpp:990] [dummy1] [18’428'232 pps/41.28 Gbps][29'412/0/0/512'000 act/exp/drop/max flows][0/0 RX/TX pkt drops][0 TX pps] If I configure cento to listen to the interfaces directly, I see that there is <5Gbit aggregate bandwidth. Is there something strange with the way cento attempts to listen to dummy interfaces? _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
