On Thu, Nov 22, 2018 at 8:18 AM Jerome Tollet (jtollet) <jtol...@cisco.com> wrote:
> Hi Peter, > (It's actually Brian, BTW.) > Did you try creating a pg interface and spanning packet from your port to > this interface? > I didn't, there wasn't a lot of documentation that would have pointed in that direction. But, I will, thanks for the suggestion. Brian > Jerome > > > > *De : *<vpp-dev@lists.fd.io> au nom de "brian.peter.dick...@gmail.com" < > brian.peter.dick...@gmail.com> > *Date : *jeudi 22 novembre 2018 à 00:58 > *À : *"vpp-dev@lists.fd.io" <vpp-dev@lists.fd.io> > *Objet : *[vpp-dev] Request: please add "real" pcap ability #vpp > > > > Hi, dev folks, > > Apologies for my first message being kind of demanding. > > However, I think this is a reasonable request. > > What I am interested in, and I think this is likely to be a fairly > universal desire, is the ability to properly integrate some kind of pcap > packet capture to the full VPP graph. > > The current available mechanisms (pcap drop trace and pcap tx trace) do > not apply to packets that are only "handled" by the host in question, i.e. > neither originate or terminate on the local host. > > In particular, I'm interested in something that can run on a bare metal > host and, presuming sufficient resources can be given to it (cores, memory, > etc), do packet capture at line rate. > > Thus, any restriction ("run it on a VM") is not adequate. > > Given that there is already stuff for handling the pcap file already (in > vnet/unix IIRC), this should not be a lot of work. > > There are two use cases I have: > > · debugging data plane stuff on a vpp-based router (i.e. using > the vppsb netlink and router projects) > > · packet capture at line rate (a vpp host that only listens/drops > traffic, incidental to the packet capture, i.e. a single-purpose host, > bypassing kernel/driver limitations, to take all ethernet traffic on a port > and stuff it into a pcap file.) > > o NB: for scaling purposes, it is reasonable to implement the pcap > captures using RSS/RFS to multiple cores and having each core be a thread > doing pcap file writing; how that would be put into the "vpp graph" might > be a little less than trivial, but should be straightforward, IMHO) > > Thanks in advance. > > Brian Dickson > > P.S. There is a SERIOUS lack of useful documentation on how to actually do > this, as a potential ad-hoc contributor. Not sure if you guys have gotten > this feedback from anyone else. > P.P.S. I'm using 18.07 because that is the last version that builds > alongside the vppsb netlink and router plugins. > P.P.P.S. Even getting 18.07 and vppsb to build was a nightmare. You should > try doing this from scratch, i.e. put yourselves in the shoes of someone > who just discovered vpp... >
-=-=-=-=-=-=-=-=-=-=-=- Links: You receive all messages sent to this group. View/Reply Online (#11374): https://lists.fd.io/g/vpp-dev/message/11374 Mute This Topic: https://lists.fd.io/mt/28282785/21656 Mute #vpp: https://lists.fd.io/mk?hashtag=vpp&subid=1480452 Group Owner: vpp-dev+ow...@lists.fd.io Unsubscribe: https://lists.fd.io/g/vpp-dev/unsub [arch...@mail-archive.com] -=-=-=-=-=-=-=-=-=-=-=-