Using argus with netmap

[Russ Harvey]

Thanks Carter, netmap and argus compiled and linked easily on Linux. Next we'll
test it with our border fiber taps to see how it performs, 3Gbps is good for
now, though it would be nice to understand what can be done to be able to
capture at, or close to, line rate.

--russ

On Mon, Apr 14, 2014 at 10:26:45AM -0400, Carter Bullard wrote:
> Hey Russ,
> Yes, Harika @ gloriad.org has done quite a bit of argus +
> netmap.  Her argus is pretty much vanilla with just a few
> mods.
> 
> Definitely try argus linking to the netmap libpcap interface.
> It will definitely work.  My understanding is that there is
> some inefficiency, but out of the box argus should perform
> up to 3.x+Gbps.
> 
> Harika is on the list, I believe, so possibly she can help
> out if you have any problems.
> 
> Carter
> 
> 
> On Apr 11, 2014, at 10:19 AM, Russ Harvey <russ at cornucopia.ucr.edu> wrote:
> 
> > Using PF_RING+DNA with argus on our border monitors for about a year, I'm still
> > not convinced it is working correctly. We haven't yet pushed it from a
> > performance perspective since normal traffic on our 10Gb links hasn't gone above
> > about 250K PPS (yet), so that hasn't been an issue.
> > 
> > However, in an upgrade to new OS, hardware, argus, etc. we are trying out
> > netmap. Recent posts on this list indicated people are using it, but not much
> > technical detail. The FloCon2014 talk by Harika Tandra (Argus with Netmap:
> > Monitoring Traffic at 10Gbits/s Line Rate Using Commodity Hardware) has slides
> > and a blurb about using modified argus code to use the native netmap API,
> > but is that necessary -- is it sufficient to compile netmap to get a libpcap
> > and link argus with that?  We've done that (on Linux) and it seems to work with
> > a test 1Gb span tap through our Intel I350, but haven't connected and tested
> > our 82599EB cards yet.
> > 
> > Thanks,
> > --russ
> > 
>