Abstract
Nowadays commodity hardware is offering an ever increasing degree of parallelism (CPUs with more and more cores, NICs with parallel queues). However, most of the existing network monitoring software has not yet been designed with high parallelism in mind. Therefore we designed a novel packet capturing engine, named PFQ, that allows efficient capturing and in–kernel aggregation, as well as connection–aware load balancing. Such an engine is based on a novel lockless queue and allows parallel packet capturing to let the user–space application arbitrarily define its degree of parallelism. Therefore, both legacy applications and natively parallel ones can benefit from such a capturing engine. In addition, PFQ outperforms its competitors both in terms of captured packets and CPU consumption.
This is a preview of subscription content, log in via an institution to check access.
Access this chapter
Tax calculation will be finalised at checkout
Purchases are for personal use only
Preview
Unable to display preview. Download preview PDF.
Similar content being viewed by others
References
Deri, L.: ncap: wire-speed packet capture and transmission. In: End-to-End Monitoring Techniques and Services on 2005, pp. 47–55. IEEE Computer Society, Washington, DC (2005)
Rizzo, L.: http://info.iet.unipi.it/~luigi/netmap/
Deri, L.: http://www.ntop.org
Libpcap MMAP mode on linux Phil Woods, http://public.lanl.gov/cpw/
Fusco, F., Deri, L.: High speed network traffic analysis with commodity multi-core systems. In: IMC 2010, pp. 218–224 (2010)
Egi, N., Greenhalgh, A., Handley, M., Hoerdt, M., Huici, F., Mathy, L., Papadimitriou, P.: Forwarding path architectures for multicore software routers. In: Proc. of PRESTO 2010, pp. 3:1–3:6. ACM, New York (2010)
Kohler, E., Morris, R., Chen, B., Jannotti, J., Frans Kaashoek, M.: The click modular router. ACM Trans. Comput. Syst. 18, 263–297 (2000)
Dobrescu, M., Egi, N., Argyraki, K., Chun, B., Fall, K., Iannaccone, G., Knies, A., Manesh, M., Ratnasamy, S.: Routebricks: exploiting parallelism to scale software routers. In: ACM SIGOPS, pp. 15–28. ACM, New York (2009)
Han, S., Jang, K., Park, K., Moon, S.: Packetshader: a gpu-accelerated software router. In: Proceedings of the ACM SIGCOMM 2010 Conference on SIGCOMM, SIGCOMM 2010, pp. 195–206. ACM, New York (2010)
Han, S., Jang, K., Park, K., Moon, S.: Building a single-box 100 gbps software router. In: IEEE LANMAN (2010)
Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G.: Flexible high performance traffic generation on commodity multi-core platforms. In: To appear in Traffic Monitoring and Analysis (TMA 2012) Workshop (2012)
Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G.: Packet capturing on parallel architectures. In: IEEE Workshop on Measurements and Networking (2011)
Author information
Authors and Affiliations
Editor information
Editors and Affiliations
Rights and permissions
Copyright information
© 2012 Springer-Verlag Berlin Heidelberg
About this paper
Cite this paper
Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G. (2012). On Multi–gigabit Packet Capturing with Multi–core Commodity Hardware. In: Taft, N., Ricciato, F. (eds) Passive and Active Measurement. PAM 2012. Lecture Notes in Computer Science, vol 7192. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-28537-0_7
Download citation
DOI: https://doi.org/10.1007/978-3-642-28537-0_7
Publisher Name: Springer, Berlin, Heidelberg
Print ISBN: 978-3-642-28536-3
Online ISBN: 978-3-642-28537-0
eBook Packages: Computer ScienceComputer Science (R0)