PF_RING Documentation

PF_RING is a high speed packet capture library that turns a commodity PC into an efficient and cheap network measurement box suitable for both packet and active traffic analysis and manipulation. Moreover, PF_RING opens totally new markets as it enables the creation of efficient application such as traffic balancers or packet filters in a matter of lines of codes.

• Get Started
  • 1. Installing from GIT
  • 2. Installing from packages
• Vanilla PF_RING
  • Packet Parsing
  • Packet Filtering
  • Packet Clustering
• PF_RING ZC (Zero Copy)
  • Supported Cards
  • ZC API
• PF_RING FT (Flow Table)
  • API Overview
  • nDPI Integration
  • L7 Filtering and Shunting
  • IDS Acceleration
• Sample Applications
  • Compiling the Applications
  • Basic Packet Capture
  • Basic Packet Transmission
  • Basic Packet Forwarding
  • Load Balancing
  • Divide and Conquer
  • L7 Flow Classification
• Drivers and Modules
  • 1. Accolade Support
  • 2. Endace DAG Support
  • 3. Exablaze support
  • 4. Silicom/Fiberblaze Support
  • 5. Intel Support
  • 6. Myricom Support
  • 7. Napatech Support
  • 8. Netcope Support
  • 9. Linux TCP/IP Stack Injection Module
  • 10. n2disk Timeline Module
  • 11. Sysdig Module
  • Supported NICs Comparison
• Load Balancing / RSS
  • RSS (Receive Side Scaling)
  • PF_RING Cluster (Kernel)
  • ZC Load-Balancing (zbalance_ipc)
• nBPF
  • 1. nBPF
  • 2. Intel FM10K nBPF Support
• nBroker
  • 1. Installation
  • 2. nBrokerd Daemon
  • 3. API
  • 4. CLI Tool
• Containers Support
  • 1. Network Namespaces
  • 2. Using PF_RING with Docker
  • 3. Using PF_RING with CoreOS
• VM Support
  • 1. PCI Passthrough with PF_RING ZC
  • 2. SR-IOV with PF_RING ZC
  • 3. QEMU/KVM Support in PF_RING ZC
• IDS/IPSs Integration
  • 1. Using Bro with PF_RING
  • 2. Using Suricata with PF_RING
  • 3. Using Snort with PF_RING
  • 4. Using Snort with PF_RING ZC
• Hugepages Support
  • For the impatient
  • The whole story
  • Possible errors
• Capabilities
• AMD Processors
• API Documentation
  • 1. PF_RING Kernel Internal API
  • 2. PF_RING API
  • 3. PF_RING ZC API
  • 4. PF_RING FT API
  • 5. nBroker API
  • 6. RRC Low-Level API