Skip to main content

On Multi–gigabit Packet Capturing with Multi–core Commodity Hardware

  • Conference paper
Passive and Active Measurement (PAM 2012)

Part of the book series: Lecture Notes in Computer Science ((LNCCN,volume 7192))

Included in the following conference series:

Abstract

Nowadays commodity hardware is offering an ever increasing degree of parallelism (CPUs with more and more cores, NICs with parallel queues). However, most of the existing network monitoring software has not yet been designed with high parallelism in mind. Therefore we designed a novel packet capturing engine, named PFQ, that allows efficient capturing and in–kernel aggregation, as well as connection–aware load balancing. Such an engine is based on a novel lockless queue and allows parallel packet capturing to let the user–space application arbitrarily define its degree of parallelism. Therefore, both legacy applications and natively parallel ones can benefit from such a capturing engine. In addition, PFQ outperforms its competitors both in terms of captured packets and CPU consumption.

This is a preview of subscription content, log in via an institution to check access.

Access this chapter

Chapter
USD 29.95
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
eBook
USD 54.99
Price excludes VAT (USA)
  • Available as PDF
  • Read on any device
  • Instant download
  • Own it forever
Softcover Book
USD 69.99
Price excludes VAT (USA)
  • Compact, lightweight edition
  • Dispatched in 3 to 5 business days
  • Free shipping worldwide - see info

Tax calculation will be finalised at checkout

Purchases are for personal use only

Institutional subscriptions

Preview

Unable to display preview. Download preview PDF.

Unable to display preview. Download preview PDF.

References

  1. http://netserv.iet.unipi.it/software/pfq/

  2. Deri, L.: ncap: wire-speed packet capture and transmission. In: End-to-End Monitoring Techniques and Services on 2005, pp. 47–55. IEEE Computer Society, Washington, DC (2005)

    Chapter  Google Scholar 

  3. Rizzo, L.: http://info.iet.unipi.it/~luigi/netmap/

  4. Deri, L.: http://www.ntop.org

  5. Libpcap MMAP mode on linux Phil Woods, http://public.lanl.gov/cpw/

  6. Fusco, F., Deri, L.: High speed network traffic analysis with commodity multi-core systems. In: IMC 2010, pp. 218–224 (2010)

    Google Scholar 

  7. Egi, N., Greenhalgh, A., Handley, M., Hoerdt, M., Huici, F., Mathy, L., Papadimitriou, P.: Forwarding path architectures for multicore software routers. In: Proc. of PRESTO 2010, pp. 3:1–3:6. ACM, New York (2010)

    Google Scholar 

  8. Kohler, E., Morris, R., Chen, B., Jannotti, J., Frans Kaashoek, M.: The click modular router. ACM Trans. Comput. Syst. 18, 263–297 (2000)

    Article  Google Scholar 

  9. Dobrescu, M., Egi, N., Argyraki, K., Chun, B., Fall, K., Iannaccone, G., Knies, A., Manesh, M., Ratnasamy, S.: Routebricks: exploiting parallelism to scale software routers. In: ACM SIGOPS, pp. 15–28. ACM, New York (2009)

    Google Scholar 

  10. Han, S., Jang, K., Park, K., Moon, S.: Packetshader: a gpu-accelerated software router. In: Proceedings of the ACM SIGCOMM 2010 Conference on SIGCOMM, SIGCOMM 2010, pp. 195–206. ACM, New York (2010)

    Google Scholar 

  11. Han, S., Jang, K., Park, K., Moon, S.: Building a single-box 100 gbps software router. In: IEEE LANMAN (2010)

    Google Scholar 

  12. Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G.: Flexible high performance traffic generation on commodity multi-core platforms. In: To appear in Traffic Monitoring and Analysis (TMA 2012) Workshop (2012)

    Google Scholar 

  13. Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G.: Packet capturing on parallel architectures. In: IEEE Workshop on Measurements and Networking (2011)

    Google Scholar 

Download references

Author information

Authors and Affiliations

Authors

Editor information

Editors and Affiliations

Rights and permissions

Reprints and permissions

Copyright information

© 2012 Springer-Verlag Berlin Heidelberg

About this paper

Cite this paper

Bonelli, N., Di Pietro, A., Giordano, S., Procissi, G. (2012). On Multi–gigabit Packet Capturing with Multi–core Commodity Hardware. In: Taft, N., Ricciato, F. (eds) Passive and Active Measurement. PAM 2012. Lecture Notes in Computer Science, vol 7192. Springer, Berlin, Heidelberg. https://doi.org/10.1007/978-3-642-28537-0_7

Download citation

  • DOI: https://doi.org/10.1007/978-3-642-28537-0_7

  • Publisher Name: Springer, Berlin, Heidelberg

  • Print ISBN: 978-3-642-28536-3

  • Online ISBN: 978-3-642-28537-0

  • eBook Packages: Computer ScienceComputer Science (R0)

Publish with us

Policies and ethics