[Ntop-misc] pfring_multichannel - packets are not evenly distributed

[Jaime Nebrera]

Hi Emre,

Pfring clustering is limited to hash, thus if original traffic is not
well balanced (nat, proxy, ...) load won't be balanced

Jaime Nebrera
Enviado / Sent iPhone

El 16/04/2012, a las 15:46, Emre Güler <gueler at internet-sicherheit.de> escribió:

> I'm using PF_RING with ixgbe-3.7.17-DNA. I'm sending a pcap file with
> "./pfsend -i dna0 -f /tmp/dump.pcap -n 1 -r 10". This is what
> "./pfcount_multichannel -i dna0" says (I made it more readable):
>
> Absolute Stats: [channel=0][2220 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=1][521 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=2][514 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=3][326 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=4][1383179 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=5][319 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=6][430 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=7][4164 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=8][398 pkts rcvd][0 pkts dropped]
> Absolute Stats: [channel=9][674886 pkts rcvd][0 pkts dropped]
>
> If you look at channel 4, you can see that it processed 1383179 packets,
> while channel 5 only processed 319 (it's the same amount everytime I
> repeat the test with the same pcap file).
> Is there anything I can do (without changing the pcpap file) to make the
> distribution of the packets more fair? Or is this something I have no
> control over?
> I thought that using pfring_set_cluster with cluster_round_robin is the
> solution to my problem, but DNA doesn't seem to support set_cluster.
>
> Regards,
> Emre
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc at listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc