Hi Gautam
could you provide a pcap we can use to reproduce this?

Alfredo

> On 10 Nov 2016, at 11:22, Chandrika Gautam <[email protected]> 
> wrote:
> 
> Hi, 
> 
> We are using PFRING cluster feature and using cluster_2_tuple and 2 
> applications
> are reading from same cluster id.
> 
> We have observed that the packets having same source and destination ip 
> addresses are getting distributed across 2 applications which has completely 
> tossed our logic as we are trying to assemble the fragments in our 
> applications.
> 
> Is there any bug in PFRING clustering mechanism which is causing this. 
> 
> Using PFRING 6.2.0 and  pfring is loaded with below command -
> insmod pf_ring.ko min_num_slots=409600 enable_tx_capture=0 
> 
> I tried with this also.
> insmod pf_ring.ko min_num_slots=409600 enable_tx_capture=0 
> enable_frag_coherence=1
> 
> 
> Regards,
> Gautam
> 
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to