[devel] Потеря пакетов libpcap и как с этим бороться
Alexey Shabalin
a.shabalin на gmail.com
Ср Мар 3 13:01:49 UTC 2010
2 марта 2010 г. 15:39 пользователь Slava Dubrovskiy написал:
> 18.02.2010 15:00, Alexey Shabalin пишет:
>>
>>> 1. Собрать дополнительный модуль к ядру
>>>
>> Первый пункт я сделал :) модуль ядра отправил в сизиф.
>>
> Не работает у меня. Пробовал на 2 разных железках с ядрами std-def и un-def
> При попытке выполнить
> [root на dubrhost slava]# modprobe
> pf_ring
> Убито
У меня загрузился без проблем:
#modinfo pf_ring
filename: /lib/modules/2.6.32-std-def-alt9/pf_ring/pf_ring.ko
alias: net-pf-27
description: Packet capture acceleration by means of a ring buffer
author: Luca Deri <deri на ntop.org>
license: GPL
srcversion: 1588EE2C94A339482ABBA16
depends:
vermagic: 2.6.32-std-def-alt9 SMP mod_unload modversions 586
parm: num_slots:Number of ring slots (uint)
parm: transparent_mode:0=standard Linux,
1=direct2pfring+transparent, 2=direct2pfring+non transparentFor 1 and
2 you need to use a PF_RING aware driver (uint)
parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint)
parm: enable_ip_defrag:Set to 1 to enable IP
defragmentation(only rx traffic is defragmentead) (uint)
# modprobe pf_ring
# dmesg
[ 510.098750] [PF_RING] Welcome to PF_RING 4.1.3 ($Revision: $)
[ 510.098753] (C) 2004-10 L.Deri <deri на ntop.org>
[ 510.098771] [PF_RING] registered /proc/net/pf_ring/
[ 510.098775] NET: Registered protocol family 27
[ 510.098784] [PF_RING] Device lo does NOT support hw filtering [2]
[ 510.098789] [PF_RING] Device e100 does NOT support hw filtering [2]
[ 510.098795] [PF_RING] Device integ does NOT support hw filtering [2]
[ 510.098800] [PF_RING] Device pan0 does NOT support hw filtering [2]
[ 510.098805] [PF_RING] Device virbr1 does NOT support hw filtering [2]
[ 510.098809] [PF_RING] Ring slots 4096
[ 510.098812] [PF_RING] Slot version 10
[ 510.098814] [PF_RING] Capture TX Yes [RX+TX]
[ 510.098817] [PF_RING] Transparent Mode 0
[ 510.098819] [PF_RING] IP Defragment No
[ 510.098821] [PF_RING] Initialized correctly
--
Alexey Shabalin
Подробная информация о списке рассылки Devel