Using argus with netmap

Russ Harvey russ at cornucopia.ucr.edu
Fri Apr 11 10:19:39 EDT 2014


Using PF_RING+DNA with argus on our border monitors for about a year, I'm still
not convinced it is working correctly. We haven't yet pushed it from a
performance perspective since normal traffic on our 10Gb links hasn't gone above
about 250K PPS (yet), so that hasn't been an issue.

However, in an upgrade to new OS, hardware, argus, etc. we are trying out
netmap. Recent posts on this list indicated people are using it, but not much
technical detail. The FloCon2014 talk by Harika Tandra (Argus with Netmap:
Monitoring Traffic at 10Gbits/s Line Rate Using Commodity Hardware) has slides
and a blurb about using modified argus code to use the native netmap API,
but is that necessary -- is it sufficient to compile netmap to get a libpcap
and link argus with that?  We've done that (on Linux) and it seems to work with
a test 1Gb span tap through our Intel I350, but haven't connected and tested
our 82599EB cards yet.

Thanks,
--russ



More information about the argus mailing list