Whoever has developed network applications, soon or later had to buy or rent a traffic generator. Years ago I have purchased my 1 Gbit IXIA 400T on ebay for 2500$, and I wanted to buy a 10 Gbit traffic generator … Continue reading
Released ntop 4.1
Over the week end we released ntop 4.1. We decided to create a smaller version with respect to the previous 4.0.3 in order to remove some legacy code that caused trouble in the past. This release lacks some of the … Continue reading
Running a load-balanced Snort in a PF_RING cluster
Today I came across this article that I think all PF_RING/snort/suricata users should read.
Ok, but how much time do I have?
Accelerating packet capture and processing is a constant race. New hardware innovations, modern computing architectures, and improvements in packet capture (e.g. PF_RING) allow applications to reduce the (both CPU and real) time they need for processing packets. But the main … Continue reading
Tutorial: Monitoring Application and Network Latency with nProbe
Last May I did a tutorial at the Nagios Conference Europe about application and network latency measurement using nProbe. The video of the tutorial has been now released and you are free to watch it if interested in he topic. … Continue reading
10 Gbit PF_RING DNA on Virtual Machines (VMware and KVM)
As you know, PF_RING DNA allows you to manipulate packets at 10 Gbit wire speed (any packet size) on low-end Linux servers. As virtualization is becoming pervasive in data-centers, you might wonder whether you can benefit of DNA on virtualized … Continue reading
NetFlow-lite Webcast Invitation
This is to invite you to webcast NetFlow-lite: Enable Data Center-wide Monitoring which is scheduled for Tuesday, 06-28-2011. I will be speaking about NetFlow-lite together with the key Cisco people who worked with me at this project. Hope you will join … Continue reading
Introducing the 10 Gbit PF_RING DNA Driver
Today we released PF_RING 4.7.0. It includes 10 Gbit DNA support (RX/TX) for Intel-based 82598/99 ethernet adapters thus you can finally manipulate packets at wire-rate using commodity adapters. With a low-end Core2Duo you can handle more than 11 Mpps per queue, … Continue reading
How to send/receive 26Mpps using PF_RING on commodity hardware
Until last month, I have struggled to reach 7 Mpps packet capture using TNAPI. This week I see users still asking questions about how to handle 2 x 1 Gbit wire rate on commodity hardware. I believe it’s now time to … Continue reading
NetFlow-Lite and nProbe: a Tutorial
Today we have held a webinar about NetFlow-Lite with both Cisco and Plixer. Subscribers of this blog should know by now what is NetFlow-Lite and why nProbe is necessary to exploit this technology. Nevertheless you might be interested to know … Continue reading