Hi Afredo and anyone "listening", I would like to rule out if pf_ring is the culprit here... What would be the correct way to have nprobe use libpcap (or AF_PACKET??) mode of getting packets from the NIC? Blacklisting pf_ring module from loading?
Thank you Marco 2018-01-17 22:16 GMT+00:00 Alfredo Cardigliano <[email protected]>: > “Absolute Stats” is the total / average number of packets/bytes > “Actual Stats” is the current number of packets/bytes (last second) > > Alfredo > > On 17 Jan 2018, at 21:13, Marco Teixeira <[email protected]> wrote: > > Hello list, > > Any PFRING wizard that can offer clues on where to start troubleshooting > this variance between "Absolut Stats" vs "Actual Stats"...? > > > === > [marco@nprobe ~]$ sudo pfcount -i ens2f0 > [sudo] password for marco: > Using PF_RING v.7.0.0 > Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed: > 10000Mb/s] > # Device RX channels: 1 > # Polling threads: 1 > Dumping statistics on /proc/net/pf_ring/stats/3096-ens2f0.3 > ========================= > Absolute Stats: [136'980 pkts total][0 pkts dropped][0.0% dropped] > [136'980 pkts rcvd][126'559'478 bytes rcvd] > ========================= > > ========================= > Absolute Stats: [274'202 pkts total][0 pkts dropped][0.0% dropped] > [274'202 pkts rcvd][254'708'653 bytes rcvd][274'163.89 pkt/sec][2'037.38 > Mbit/sec] > ========================= > Actual Stats: [137'222 pkts rcvd][1'000.13 ms][137'202.92 pps][1.03 Gbps] > ========================= > > ========================= > Absolute Stats: [411'199 pkts total][0 pkts dropped][0.0% dropped] > [411'199 pkts rcvd][382'383'683 bytes rcvd][205'575.03 pkt/sec][1'529.35 > Mbit/sec] > ========================= > Actual Stats: [136'997 pkts rcvd][1'000.09 ms][136'983.43 pps][1.02 Gbps] > ========================= > === > > Thankx > Marco > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
