I did some research on this previously before concluding NDPI wouldn't help me much with my own particular application.
Just for running NDPI DPDK is not strictly needed, as NDPI is normally read-only so something like PF_RING would work in default ntop / ndpi. If you're trying to use NDPI in a read-write application then you'd need to make the integration yourself. However the much harder part than just the integration would be tracking flow-starts for TCP and UDP sockets to feed to NDPI. From what I found NDPI by itself does not appear to offer connection tracking. It has to be implemented separately. My advice: carefully research how ntop calls ndpi in their code using cscope. Because the ndpi documentation about how to use all the functions is kind of bad and not so clear. It took quite some hours before I understood it wasn't going to help with what I was coding in my application. Matthew. On Mon, Feb 16, 2015 at 04:22:25AM -0800, harshavardhan Reddy wrote: > Hi All, > > Is ntop DPI integration available for Intel DPDK..? > > I could see only Propretory qosmos ixEngine integrated with DPDK and > Windriver with its own DPI. > > But not found any info about nDPI integration with DPDK. > > > Thank You, > > Regards, > HVR
