Jeremy, I annoy sure I understand. in essence you have attached cento to zbalance_ipc queues, and the traffic rates are not correct? What you see with pfcount instead?
This said, what do you want to do exactly? Perhaps use cento as flow-generator and attach bro to it on balanced egress queues? Regards luca > On 3 Oct 2016, at 16:04, Jeremy Ashton <[email protected]> wrote: > > After following these instructions: > http://www.ntop.org/pf_ring/best-practices-for-using-bro_ids-with-pf_ring-zc-reliably/ > > The actual command was like the following: > > zbalance_ipc -i zc:<link1>,zc:<link2>,zc:<link3>,zc:<link4> -n 4 -m 1 > -c 2 -r 0:dummy0 -r 1:dummy1 -r 2:dummy2 -r 3:dummy3 > > > I found it was reporting something like the following: > > 27/Sep/2016 18:17:56 [NetworkInterface.cpp:990] [dummy0] [8'854'686 > pps/19.83 Gbps][29'412/0/0/512'000 act/exp/drop/max flows][0/0 RX/TX > pkt drops][0 TX pps] > > 27/Sep/2016 18:17:56 [NetworkInterface.cpp:990] [dummy1] [18’428'232 > pps/41.28 Gbps][29'412/0/0/512'000 act/exp/drop/max flows][0/0 RX/TX > pkt drops][0 TX pps] > > > If I configure cento to listen to the interfaces directly, I see that > there is <5Gbit aggregate bandwidth. Is there something strange with > the way cento attempts to listen to dummy interfaces? > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
