Using argus with netmap

[Carter Bullard]

Hey Russ,
I’m going to be commercializing some aspects of argus this
year, and it appears that a really fast argus is going to
be a part of the first wave.  Maybe you guys would like
to be first in line, or a guinea pig ???

Carter


On Apr 14, 2014, at 11:18 AM, Russ Harvey <russ at cornucopia.ucr.edu> wrote:

> Thanks Carter, netmap and argus compiled and linked easily on Linux. Next we'll
> test it with our border fiber taps to see how it performs, 3Gbps is good for
> now, though it would be nice to understand what can be done to be able to
> capture at, or close to, line rate.
> 
> --russ
> 
> On Mon, Apr 14, 2014 at 10:26:45AM -0400, Carter Bullard wrote:
>> Hey Russ,
>> Yes, Harika @ gloriad.org has done quite a bit of argus +
>> netmap.  Her argus is pretty much vanilla with just a few
>> mods.
>> 
>> Definitely try argus linking to the netmap libpcap interface.
>> It will definitely work.  My understanding is that there is
>> some inefficiency, but out of the box argus should perform
>> up to 3.x+Gbps.
>> 
>> Harika is on the list, I believe, so possibly she can help
>> out if you have any problems.
>> 
>> Carter
>> 
>> 
>> On Apr 11, 2014, at 10:19 AM, Russ Harvey <russ at cornucopia.ucr.edu> wrote:
>> 
>>> Using PF_RING+DNA with argus on our border monitors for about a year, I'm still
>>> not convinced it is working correctly. We haven't yet pushed it from a
>>> performance perspective since normal traffic on our 10Gb links hasn't gone above
>>> about 250K PPS (yet), so that hasn't been an issue.
>>> 
>>> However, in an upgrade to new OS, hardware, argus, etc. we are trying out
>>> netmap. Recent posts on this list indicated people are using it, but not much
>>> technical detail. The FloCon2014 talk by Harika Tandra (Argus with Netmap:
>>> Monitoring Traffic at 10Gbits/s Line Rate Using Commodity Hardware) has slides
>>> and a blurb about using modified argus code to use the native netmap API,
>>> but is that necessary -- is it sufficient to compile netmap to get a libpcap
>>> and link argus with that?  We've done that (on Linux) and it seems to work with
>>> a test 1Gb span tap through our Intel I350, but haven't connected and tested
>>> our 82599EB cards yet.
>>> 
>>> Thanks,
>>> --russ
>>> 
>> 
> 
> 
> 

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 455 bytes
Desc: Message signed with OpenPGP using GPGMail
URL: <https://pairlist1.pair.net/pipermail/argus/attachments/20140414/af122490/attachment.sig>