> On 8 May 2018, at 18:13, Carl Rotenan <[email protected]> wrote:
> 
> First off, Alfredo thanks for answering all my questions as I get up to speed 
> on PF_RING.
> 
> I have a few other questions based off of some /proc/net/pf_ring/ output.
> 
> 1. In the first cat I have 0 free slots and the second 13k, am I dropping 
> traffic when there aren't free slots?

This happens when the application is too slow processing traffic

> Should I increase the slots even more?

Yes, that would help with traffic bursts, however it doesn’t help much if the 
application cannot keep up with sustained traffic

> 2. Why do I have lost packets? I have some rings with 0% and others with 
> about 5% packet drops. Is this normal?

This depends on traffic distribution or other factors such as core affinity of 
the application threads

> 3. My capture mode is set for RX only in the info file, but the ring file 
> says both?

With "info file” do you mean the bro configuration? It seems that bro is not 
setting the capture direction.

> 4. Is socket mode something I should worry about?

You can ignore it, it’s just the ‘ability’ to receive and send (even if you are 
not actually sending)

Alfredo

> 
> Thanks,
> 
> 
> PF_RING Version          : 7.0.0 
> (7.0.0-stable:aef22ec763b2541f8c0632ed86b242cf7cff88aa)
> Total rings              : 18
> 
> Standard (non ZC) Options
> Ring slots               : 65534
> Slot version             : 16
> Capture TX               : No [RX only]
> IP Defragment            : No
> Socket Mode              : Standard
> Cluster Fragment Queue   : 0
> Cluster Fragment Discard : 0
> 
> cat 14952-p1p1.36
> 
> Bound Device(s)    : p1p1
> Active             : 1
> Breed              : Standard
> Appl. Name         : bro-p1p1
> Socket Mode        : RX+TX
> Capture Direction  : RX+TX
> Sampling Rate      : 1
> IP Defragment      : No
> BPF Filtering      : Disabled
> Sw Filt Hash Rules : 0
> Sw Filt WC Rules   : 0
> Sw Filt Hash Match : 0
> Sw Filt Hash Miss  : 0
> Hw Filt Rules      : 0
> Poll Pkt Watermark : 1
> Num Poll Calls     : 150166290
> Channel Id Mask    : 0xFFFFFFFFFFFFFFFF
> VLAN Id            : 65535
> Cluster Id         : 1
> Slot Version       : 16 [7.0.0]
> Min Num Slots      : 65534
> Bucket Len         : 8192
> Slot Len           : 8248 [bucket+header]
> Tot Memory         : 540536832
> Tot Packets        : 1136861832
> Tot Pkt Lost       : 69635693
> Tot Insert         : 1067226139
> Tot Read           : 1067142762
> Insert Offset      : 435486256
> Remove Offset      : 315309304
> Num Free Slots     : 0
> TX: Send Ok        : 0
> TX: Send Errors    : 0
> Reflect: Fwd Ok    : 0
> Reflect: Fwd Errors: 0
> 
> Bound Device(s)    : p1p1
> Active             : 1
> Breed              : Standard
> Appl. Name         : bro-p1p1
> Socket Mode        : RX+TX
> Capture Direction  : RX+TX
> Sampling Rate      : 1
> IP Defragment      : No
> BPF Filtering      : Disabled
> Sw Filt Hash Rules : 0
> Sw Filt WC Rules   : 0
> Sw Filt Hash Match : 0
> Sw Filt Hash Miss  : 0
> Hw Filt Rules      : 0
> Poll Pkt Watermark : 1
> Num Poll Calls     : 150166290
> Channel Id Mask    : 0xFFFFFFFFFFFFFFFF
> VLAN Id            : 65535
> Cluster Id         : 1
> Slot Version       : 16 [7.0.0]
> Min Num Slots      : 65534
> Bucket Len         : 8192
> Slot Len           : 8248 [bucket+header]
> Tot Memory         : 540536832
> Tot Packets        : 1136867856
> Tot Pkt Lost       : 69635693
> Tot Insert         : 1067232163
> Tot Read           : 1067179680
> Insert Offset      : 444167560
> Remove Offset      : 368221880
> Num Free Slots     : 13051
> TX: Send Ok        : 0
> TX: Send Errors    : 0
> Reflect: Fwd Ok    : 0
> Reflect: Fwd Errors: 0
> 
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Attachment: signature.asc
Description: Message signed with OpenPGP

_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Reply via email to