On Fri, Mar 26, 2010 at 11:41:44PM +0000, Paolo Lucente wrote: > I see. It's just not clear whether you are using pmacctd compiled > against vanilla libpcap. If this is the case, i can advice to give > a try to PF_RING. The kernel module can be configured for sampling > by passing the "sample_rate" parameter. At a glance, it would just > seem fitting better your scenario. > > In case you want to go this way, please use the code from the CVS > as the build sub-system (configure script, etc.) has been patched > to recognize presence of PF_RING. This will indeed make it in the > upcoming release 0.12.1.
Ah - didn't realize that PF_RING could sample on it's end. I tried PF_RING previously and actually ran into worse performance than non PF_RING, but I didn't configure sampling. Looking into that though, my PF_RING installation doesn't seem to support it: [r...@hmspmacct002 ~]# modprobe pf_ring sample_rate=2000 insmod /lib/modules/2.6.18-128.1.16.el5/kernel/net/pf_ring/pf_ring.ko sample_rate=2000 FATAL: Error inserting pf_ring (/lib/modules/2.6.18-128.1.16.el5/kernel/net/pf_ring/pf_ring.ko): Unknown symbol in module, or unknown parameter (see dmesg) [r...@hmspmacct002 ~]# dmesg | tail -n 1 pf_ring: Unknown parameter `sample_rate' I rebuilt PF_RING from SVN today - it looks like the pf_ring module has and understands stuff about sample_rate. Do I miss some step to enable this functionality? Thanks for your help, Ross -- Ross Vandegrift [email protected] "If the fight gets hot, the songs get hotter. If the going gets tough, the songs get tougher." --Woody Guthrie
signature.asc
Description: Digital signature
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
