Re: PF_RING + bridge continue

Eitan Michaelson <[email protected]> Mon, 15 Jul 2019 11:15:49 +0300
Newsgroups gmane.linux.ntop.devel
Message-ID <[email protected]>
--===============1900354986931531914==
Content-Type: text/html; charset=windows-1252
Content-Language: en-US
Content-Transfer-Encoding: 8bit

<html style="direction: ltr;">
  <head>
    <meta http-equiv="Content-Type" content="text/html;
      charset=windows-1252">
    <style type="text/css">body p { margin-bottom: 0cm; margin-top: 0pt; } </style>
  </head>
  <body bidimailui-detected-decoding-type="latin-charset"
    style="direction: ltr;" bgcolor="#FFFFFF" text="#000000">
    <p>OK will do,</p>
    <p>But, I'm currently using 7.5.0 as seen on that mini log as sent
      (DL it about 14 days ago)<br>
    </p>
    <p>should this be the fixed version ?</p>
    <p><br>
    </p>
    <p><br>
    </p>
    <div class="moz-cite-prefix">On 15/07/2019 11:04, Alfredo
      Cardigliano wrote:<br>
    </div>
    <blockquote type="cite"
      cite="mid:[email protected]">
      <meta http-equiv="Content-Type" content="text/html;
        charset=windows-1252">
      <div class="">Hi Eitan</div>
      <div class="">please check the other email thread, I pushed a fix
        for this, please update from github or wait for the next
        packages later today.</div>
      <div class=""><br class="">
        Thank you<br class="">
        Alfredo</div>
      <div><br class="">
        <blockquote type="cite" class="">
          <div class="">On 14 Jul 2019, at 19:55, Eitan Michaelson &lt;<a
              href="mailto:[email protected]" class=""
              moz-do-not-send="true">[email protected]</a>&gt; wrote:</div>
          <br class="Apple-interchange-newline">
          <div class="">
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class=""><br
                class="Apple-interchange-newline">
              Looks like after the first packet is drooped there is no
              way for my application to continue and receive packets.</div>
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">As long as
              there are no doped packets all is OK, the first drop
              practically breaks the application.</div>
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">It does not
              matter if pfring_recv() is blocking or not</div>
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class=""><br class="">
            </div>
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">[  679.175760]
              [PF_RING] Welcome to PF_RING 7.5.0 ($Revision: unknown$)
              // Custom kernel<br class="">
              [  679.175760] (C) 2004-17<span
                class="Apple-converted-space"> </span><a
                href="http://ntop.org/" class="" moz-do-not-send="true">ntop.org</a><br
                class="">
              [  679.185328] LINUX_VERSION_CODE 00040E7B<br class="">
              [  679.189173] [PF_RING] Min # ring slots 4096<br class="">
              [  679.193358] [PF_RING] Slot version     17<br class="">
              [  679.197368] [PF_RING] Capture TX       Yes [RX+TX]<br
                class="">
              [  679.202183] [PF_RING] IP Defragment    No<br class="">
              [  679.206208] NET: Registered protocol family 27<br
                class="">
              [  679.210679] [PF_RING] pf_ring initialized correctly</div>
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class=""><br class="">
            </div>
            <br style="caret-color: rgb(0, 0, 0); font-family:
              Helvetica; font-size: 12px; font-style: normal;
              font-variant-caps: normal; font-weight: normal;
              letter-spacing: normal; text-align: start; text-indent:
              0px; text-transform: none; white-space: normal;
              word-spacing: 0px; -webkit-text-stroke-width: 0px;
              background-color: rgb(255, 255, 255); text-decoration:
              none;" class="">
            <div style="margin-bottom: 0cm; margin-top: 0pt;
              caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class=""><br class="">
            </div>
            <div class="moz-cite-prefix" style="caret-color: rgb(0, 0,
              0); font-family: Helvetica; font-size: 12px; font-style:
              normal; font-variant-caps: normal; font-weight: normal;
              letter-spacing: normal; text-align: start; text-indent:
              0px; text-transform: none; white-space: normal;
              word-spacing: 0px; -webkit-text-stroke-width: 0px;
              background-color: rgb(255, 255, 255); text-decoration:
              none;">On 14/07/2019 19:38, Eitan Michaelson wrote:<br
                class="">
            </div>
            <blockquote type="cite"
              cite="mid:[email protected]"
              style="font-family: Helvetica; font-size: 12px;
              font-style: normal; font-variant-caps: normal;
              font-weight: normal; letter-spacing: normal; orphans:
              auto; text-align: start; text-indent: 0px; text-transform:
              none; white-space: normal; widows: auto; word-spacing:
              0px; -webkit-text-size-adjust: auto;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">Hello,<span
                  class="Apple-converted-space"> </span><br class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class=""><br
                  class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">After
                some more testing it looks like it might have nothing to
                do with PF_RING attached to a bridge.</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">My
                test is sending a 1024 bytes UDP packet at a fast rate
                (about 110,000 packets per second) to a small old Linux</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">box
                running the PF_RING enabled process.</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class=""><br
                  class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">The
                process is pending on pfring_recv() waiting to get new
                packets on br0 .<br class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class=""><br
                  class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">What
                I was able to see is that at some point after the test
                has started,</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">the
                drops count (got it from pfring_stats()) went up
                rapidly.<br class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">while
                pfring_recv() was pending forever and not getting
                triggered to read more packets.<br class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class=""><br
                  class="">
              </div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">What
                did I do wrong?<br class="">
                Thanks</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class="">Eitan.</div>
              <div style="margin-bottom: 0cm; margin-top: 0pt;" class=""><br
                  class="">
              </div>
              <br class="">
              <fieldset class="mimeAttachmentHeader"></fieldset>
              <pre class="moz-quote-pre" wrap="">_______________________________________________
Ntop-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]" moz-do-not-send="true">[email protected]</a>
<a class="moz-txt-link-freetext" href="http://listgateway.unipi.it/mailman/listinfo/ntop-dev" moz-do-not-send="true">http://listgateway.unipi.it/mailman/listinfo/ntop-dev</a></pre>
            </blockquote>
            <span style="caret-color: rgb(0, 0, 0); font-family:
              Helvetica; font-size: 12px; font-style: normal;
              font-variant-caps: normal; font-weight: normal;
              letter-spacing: normal; text-align: start; text-indent:
              0px; text-transform: none; white-space: normal;
              word-spacing: 0px; -webkit-text-stroke-width: 0px;
              background-color: rgb(255, 255, 255); text-decoration:
              none; float: none; display: inline !important;" class="">_______________________________________________</span><br
              style="caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">
            <span style="caret-color: rgb(0, 0, 0); font-family:
              Helvetica; font-size: 12px; font-style: normal;
              font-variant-caps: normal; font-weight: normal;
              letter-spacing: normal; text-align: start; text-indent:
              0px; text-transform: none; white-space: normal;
              word-spacing: 0px; -webkit-text-stroke-width: 0px;
              background-color: rgb(255, 255, 255); text-decoration:
              none; float: none; display: inline !important;" class="">Ntop-dev
              mailing list</span><br style="caret-color: rgb(0, 0, 0);
              font-family: Helvetica; font-size: 12px; font-style:
              normal; font-variant-caps: normal; font-weight: normal;
              letter-spacing: normal; text-align: start; text-indent:
              0px; text-transform: none; white-space: normal;
              word-spacing: 0px; -webkit-text-stroke-width: 0px;
              background-color: rgb(255, 255, 255); text-decoration:
              none;" class="">
            <a href="mailto:[email protected]"
              style="font-family: Helvetica; font-size: 12px;
              font-style: normal; font-variant-caps: normal;
              font-weight: normal; letter-spacing: normal; orphans:
              auto; text-align: start; text-indent: 0px; text-transform:
              none; white-space: normal; widows: auto; word-spacing:
              0px; -webkit-text-size-adjust: auto;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255);" class="" moz-do-not-send="true">[email protected]</a><br
              style="caret-color: rgb(0, 0, 0); font-family: Helvetica;
              font-size: 12px; font-style: normal; font-variant-caps:
              normal; font-weight: normal; letter-spacing: normal;
              text-align: start; text-indent: 0px; text-transform: none;
              white-space: normal; word-spacing: 0px;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255); text-decoration: none;" class="">
            <a
              href="http://listgateway.unipi.it/mailman/listinfo/ntop-dev"
              style="font-family: Helvetica; font-size: 12px;
              font-style: normal; font-variant-caps: normal;
              font-weight: normal; letter-spacing: normal; orphans:
              auto; text-align: start; text-indent: 0px; text-transform:
              none; white-space: normal; widows: auto; word-spacing:
              0px; -webkit-text-size-adjust: auto;
              -webkit-text-stroke-width: 0px; background-color: rgb(255,
              255, 255);" class="" moz-do-not-send="true">http://listgateway.unipi.it/mailman/listinfo/ntop-dev</a></div>
        </blockquote>
      </div>
      <br class="">
      <br>
      <fieldset class="mimeAttachmentHeader"></fieldset>
      <pre class="moz-quote-pre" wrap="">_______________________________________________
Ntop-dev mailing list
<a class="moz-txt-link-abbreviated" href="mailto:[email protected]">[email protected]</a>
<a class="moz-txt-link-freetext" href="http://listgateway.unipi.it/mailman/listinfo/ntop-dev">http://listgateway.unipi.it/mailman/listinfo/ntop-dev</a></pre>
    </blockquote>
  </body>
</html>

--===============1900354986931531914==
Content-Type: text/plain; charset="us-ascii"
MIME-Version: 1.0
Content-Transfer-Encoding: 7bit
Content-Disposition: inline

_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
--===============1900354986931531914==--