1. Для блокировка используем

[Antares]

указываю 1 и 2 ядро использовать, запускается, но не фильтрует.

 

В логах счетчики пакетов увеличиваются?

Да.

2016-11-06 20:46:44.166 [19248] Information Application - Port 0 input packets: 12534, input errors: 0, mbuf errors: 0
2016-11-06 20:46:44.167 [19248] Information Application - Reader thread on core 2 received packets: 12534, enqueued packets: 12534, missed packets: 0, traffic throughtput: 110.41 pps
2016-11-06 20:46:44.167 [19248] Information Application - Worker thread on core 3 statistics:
2016-11-06 20:46:44.167 [19248] Information Application - Thread seen packets: 12534, IP packets: 0 (IPv4 packets: 0, IPv6 packets: 0), seen bytes: 0, Average packet size: 0 bytes, Traffic throughput: 110.41 pps
2016-11-06 20:46:44.167 [19248] Information Application - Thread IPv4 fragments: 0, IPv6 fragments: 0, IPv4 short packets: 0
2016-11-06 20:46:44.167 [19248] Information Application - Thread matched by ip/port: 0, matched by ssl: 0, matched by ssl/ip: 0, matched by domain: 0, matched by url: 0
2016-11-06 20:46:44.167 [19248] Information Application - Thread redirected domains: 0, redirected urls: 0, rst sended: 0
2016-11-06 20:46:44.167 [19248] Information Application - Thread active flows: 0 (IPv4 flows: 0 IPv6 flows: 0), expired flows: 0
2016-11-06 20:46:44.167 [19248] Information Application - All worker threads seen packets: 12534, IP packets: 0 (IPv4 packets: 0, IPv6 packets: 0), seen bytes: 0, traffic throughtput: 110.41 pps
2016-11-06 20:46:44.167 [19248] Information Application - All worker IPv4 fragments: 0, IPv6 fragments: 0, IPv4 short packets: 0
2016-11-06 20:46:44.167 [19248] Information Application - All worker threads matched by ip/port: 0, matched by ssl: 0, matched by ssl/ip: 0, matched by domain: 0,  matched by url: 0
2016-11-06 20:46:44.167 [19248] Information Application - All worker threads redirected domains: 0, redirected urls: 0, rst sended: 0
2016-11-06 20:46:44.167 [19248] Information Application - All worker threads active flows: 0(IPv4 flows: 0 IPv6 flows: 0), expired flows: 0

 

При обновлении дополнительно настраивать ничего не надо, типа dpkd или PcapPlusPlus????

Изменено 6 ноября, 2016 пользователем Antares

[max1976]

При обновлении дополнительно настраивать ничего не надо, типа dpkd или PcapPlusPlus????

 

 

В счетчиках ipv4 и ipv6 по нулям - это говорит о том, что на фильтр прилетают тегированные пакеты. Я пока не добавлял функционал по работе с тегами. В старой версии работало, т.к. там использовался pcapplusplus для парсинга пакетов, но от этого пришлось уйти из-за сниженного быстродействия.

[Antares]

в смысле тегированные??? Я не виланы зеркалю, а абонентский порт. что мне сделать тогда? зеркало как-то подкрутить или что??

 

ps: добавил зеркальный порт в общий вилан с тестовой машиной, стало блокироваться...но это не правильно ведь

Изменено 6 ноября, 2016 пользователем Antares

[flow-control]

 

В счетчиках ipv4 и ipv6 по нулям - это говорит о том, что на фильтр прилетают тегированные пакеты. Я пока не добавлял функционал по работе с тегами. В старой версии работало, т.к. там использовался pcapplusplus для парсинга пакетов, но от этого пришлось уйти из-за сниженного быстродействия.

Уважаемый Max1976 как быть если свитч TX пакеты отдает с тегом?

http://forum.dlink.ru/viewtopic.php?f=2&t=146050

[Antares]

 

В счетчиках ipv4 и ipv6 по нулям - это говорит о том, что на фильтр прилетают тегированные пакеты. Я пока не добавлял функционал по работе с тегами. В старой версии работало, т.к. там использовался pcapplusplus для парсинга пакетов, но от этого пришлось уйти из-за сниженного быстродействия.

Уважаемый Max1976 как быть если свитч TX пакеты отдает с тегом?

http://forum.dlink.ru/viewtopic.php?f=2&t=146050

на des-3200 прокатило у меня

[max1976]

Добавил поддержку тегированных пакетов.

[Antares]

Добавил поддержку тегированных пакетов.

Не помогло, так же пакеты не попадают

[flow-control]

тоже не помогло.

[Troj]

2016-11-07 13:14:40.962 [1634] Information Application - Reader thread on core 1 received packets: 3058654, enqueued packets: 3058654, missed packets: 0, traffic throughtput: 2.46 K pps
2016-11-07 13:14:40.962 [1634] Information Application - Worker thread on core 2 statistics:
2016-11-07 13:14:40.962 [1634] Information Application - Thread seen packets: 3058654, IP packets: 4130 (IPv4 packets: 4040, IPv6 packets: 102), seen bytes: 0, Average packet size: 0 bytes, Traffic throughput: 2.46 K pps
2016-11-07 13:14:40.962 [1634] Information Application - Thread IPv4 fragments: 12, IPv6 fragments: 0, IPv4 short packets: 0
2016-11-07 13:14:40.962 [1634] Information Application - Thread matched by ip/port: 0, matched by ssl: 0, matched by ssl/ip: 0, matched by domain: 0, matched by url: 0
2016-11-07 13:14:40.962 [1634] Information Application - Thread redirected domains: 0, redirected urls: 0, rst sended: 0
2016-11-07 13:14:40.962 [1634] Information Application - Thread active flows: 0 (IPv4 flows: 0 IPv6 flows: 0), expired flows: 0
2016-11-07 13:14:40.962 [1634] Information Application - All worker threads seen packets: 3058654, IP packets: 4130 (IPv4 packets: 4040, IPv6 packets: 102), seen bytes: 0, traffic throughtput: 2.46 K pps
2016-11-07 13:14:40.962 [1634] Information Application - All worker IPv4 fragments: 12, IPv6 fragments: 0, IPv4 short packets: 0
2016-11-07 13:14:40.962 [1634] Information Application - All worker threads matched by ip/port: 0, matched by ssl: 0, matched by ssl/ip: 0, matched by domain: 0,  matched by url: 0
2016-11-07 13:14:40.962 [1634] Information Application - All worker threads redirected domains: 0, redirected urls: 0, rst sended: 0
2016-11-07 13:14:40.962 [1634] Information Application - All worker threads active flows: 0(IPv4 flows: 0 IPv6 flows: 0), expired flows: 0

 

редирект не работает :(

и такой вопрос сетевой интерфейс забинденый на дпдк не должен же виден быть в ifconfig и быть поднятым ?

[flow-control]

и такой вопрос сетевой интерфейс забинденый на дпдк не должен же виден быть в ifconfig и быть поднятым ?

да, не должен

 

пакеты с тегом приходят?

 

tcpdump -i enp6s0f0 -Uw - | tcpdump -en -r -

[Troj]

13:40:05.402727 e0:3f:49:20:f5:98 > 00:1f:ce:5e:ea:14, ethertype 802.1Q (0x8100), length 70: vlan 2109, p 0, ethertype IPv4, 10.0.109.116.37374 > 31.13.74.52.80: Flags [.], ack 11494, win 1762, options [nop,nop,TS val 3643381 ecr 437542908], length 0

тегированый :(

[swelf]

Помогите с nfqfilter.

debian 8 64bit, собрал poco 1.7.6, собрал nfqfilter, сделал минимальные правки в конфиге, прописал путь списка доменов и урлов, в файле доменов только 1 запись www.pixiv.net

запустился процесс без ошибок, на той же машине и проверяю все. Добавил правило.

iptables -t mangle -I OUTPUT -s 10.9.4.6/32 -p tcp -m tcp -j NFQUEUE --queue-num 0 --queue-bypass
#iptables -L OUTPUT -v -n -t mangle
Chain OUTPUT (policy ACCEPT 22908 packets, 3809K bytes)
pkts bytes target     prot opt in     out     source               destination
 130  5705 NFQUEUE    tcp  --  *      *       10.9.4.6             0.0.0.0/0            tcp dpt:80 NFQUEUE num 0 bypass

при попытке с этой же машины зайти на www.pixiv.net страница открывается, в логах

2016-11-07 13:52:07.142 [26771] Debug nfqThread - Got the packet from queue
2016-11-07 13:52:07.142 [26771] Warning nfqThread - NFQ: Packet not for our callback

 

разобрался, с той же машины проверять нельзя, сделал цепочку

iptables -t mangle -I PREROUTING -s 10.9.4.0/29 -p tcp -m tcp -j NFQUEUE --queue-num 0 --queue-bypass

и с соседней машины дернул сайт, все ок вроде, редирект получил.

Изменено 7 ноября, 2016 пользователем swelf

[max1976]

тоже не помогло.

 

Добавьте в файл worker.cpp в строку 228:

_logger.information("Ether type %u", ether_type);

 

Скомпилируйте, запустите на несколько секунд, скопируйте из лога результат сюда.

[flow-control]

 

Скомпилируйте, запустите на несколько секунд, скопируйте из лога результат сюда.

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2752 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2753 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2754 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2755 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 2 packets, total 2757 packets, packets in ring 40

[max1976]

 

Скомпилируйте, запустите на несколько секунд, скопируйте из лога результат сюда.

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2752 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2753 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2754 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 1 packets, total 2755 packets, packets in ring 4095

2016-11-07 17:31:42.334 [25834] Information WorkerThread 1 - Ether type [ERRFMT]

2016-11-07 17:31:42.334 [25834] Information ReaderThread 0 - Missed 2 packets, total 2757 packets, packets in ring 40

 

 

Тогда замените на:

_logger.information("Ether type %d", (int) ether_type);

[flow-control]

 

Тогда замените на:

 

_logger.information("Ether type %d", (int) ether_type);

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 1 packets, total 3095 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 4 packets, total 3099 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 7 packets, total 3106 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 8 packets, total 3114 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 1 packets, total 3115 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 3 packets, total 3118 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 3 packets, total 3121 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 2 packets, total 3123 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 9 packets, total 3132 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

2016-11-07 17:51:57.470 [25999] Information ReaderThread 0 - Missed 3 packets, total 3135 packets, packets in ring 4095

2016-11-07 17:51:57.470 [25999] Information WorkerThread 1 - Ether type 36967

^C

[max1976]

 

Пришлите небольшой дамп трафика.

[flow-control]

max1976 внес изменения в код, у меня фильтр начал работать

[Antares]

max1976 внес изменения в код, у меня фильтр начал работать

Подтверждаю, тоже заработало

Спасибо доброму человеку!!!

[Troj]

+1 заработало, но у меня не доконца :)

016-11-07 17:26:05.216 [27154] Debug WorkerThread 1 - Host myip.ru present in domain (file line 1) list from ip 10.0.97.101 to ip 178.62.9.171
2016-11-07 17:26:05.216 [27154] Debug CSender - Trying to send packet to 10.0.97.101 port 55013

а в браузере все равно высвечивается искомая страница

все понял, заработало

Изменено 7 ноября, 2016 пользователем Troj

[banec]

root@shluz12core:~/extfilter/extfilter# make
Making all in src
make[1]: вход в каталог «/home/temp/extfilter/extfilter/src»
g++  -std=c++11 -O2 -Wall -pthread -msse -msse2 -msse3 -mssse3 -Wl,--whole-archive -lrte_pmd_bond -lrte_pmd_vmxnet3_uio -lrte_pmd_virtio -lrte_pmd_enic -lrte_pmd_i40e -lrte_pmd_fm10k -lrte_pmd_ixgbe -lrte_pmd_e1000 -lrte_pmd_ring -lrte_pmd_af_packet -lethdev -lrte_eal -lrte_mbuf -lrte_mempool -lrte_ring -lrte_kvargs -lrte_hash -lrte_cmdline -Wl,--no-whole-archive  -o extFilter main.o worker.o AhoCorasickPlus.o ahocorasick.o node.o patricia.o patr.o qdpi.o sender.o sendertask.o statistictask.o reloadtask.o flow.o reader.o -lpcap -L.././PcapPlusPlus/Dist -lPcap++ -lPacket++ -lCommon++ -L /opt/dpdk/build/lib  -lrt -lm -ldl ../nDPI/src/lib/.libs/libndpi.a -lPocoNet -lPocoUtil -lPocoFoundation
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::IPcapFileDevice::close()':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:52: undefined reference to `pcap_close'
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::PcapFileWriterDevice::close()':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:277: undefined reference to `pcap_dump_close'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:264: undefined reference to `pcap_dump_flush'
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::PcapFileReaderDevice::open()':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:79: undefined reference to `pcap_open_offline'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:87: undefined reference to `pcap_datalink'
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::PcapFileWriterDevice::open()':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:239: undefined reference to `pcap_open_dead'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:248: undefined reference to `pcap_dump_open'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:251: undefined reference to `pcap_geterr'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:251: undefined reference to `pcap_geterr'
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::PcapFileReaderDevice::getNextPacket(pcpp::RawPacket&)':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:120: undefined reference to `pcap_next'
.././PcapPlusPlus/Dist/libPcap++.a(PcapFileDevice.o): In function `pcpp::PcapFileWriterDevice::writePacket(pcpp::RawPacket const&)':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapFileDevice.cpp:183: undefined reference to `pcap_dump'
.././PcapPlusPlus/Dist/libPcap++.a(PcapDevice.o): In function `pcpp::IPcapDevice::setFilter(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >)':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:23: undefined reference to `pcap_compile'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:34: undefined reference to `pcap_setfilter'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:29: undefined reference to `pcap_geterr'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:41: undefined reference to `pcap_geterr'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:29: undefined reference to `pcap_geterr'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:41: undefined reference to `pcap_geterr'
.././PcapPlusPlus/Dist/libPcap++.a(PcapDevice.o): In function `pcpp::IPcapDevice::verifyFilter(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >)':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:66: undefined reference to `pcap_compile_nopcap'
.././PcapPlusPlus/Dist/libPcap++.a(PcapDevice.o): In function `pcpp::IPcapDevice::matchPakcetWithFilter(std::__cxx11::basic_string<char, std::char_traits<char>, std::allocator<char> >, pcpp::RawPacket*)':
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:81: undefined reference to `pcap_compile_nopcap'
/home/temp/extfilter/extfilter/PcapPlusPlus/Pcap++/src/PcapDevice.cpp:94: undefined reference to `pcap_offline_filter'
collect2: error: ld returned 1 exit status
Makefile:362: ошибка выполнения рецепта для цели «extFilter»
make[1]: *** [extFilter] Ошибка 1
make[1]: выход из каталога «/home/temp/extfilter/extfilter/src»
Makefile:344: ошибка выполнения рецепта для цели «all-recursive»
make: *** [all-recursive] Ошибка 1
root@shluz12core:~/extfilter/extfilter#

Что-то собрать не могу PcapPlusPlus, через make от extfilter.

хотя если отдельно PcapPlusPlus то собирается

[banec]

и

Ubuntu 16.04

libpcap-dev - установлен

[max1976]

Что-то собрать не могу PcapPlusPlus, через make от extfilter.

хотя если отдельно PcapPlusPlus то собирается

 

PPP собирается, только у вас в системе видимо какая-то проблема с libpcap.

Изменено 8 ноября, 2016 пользователем max1976

[banec]

а Poco можно с гита ставить?

[hsvt]

Прочитал все последние страницы с возможными подводными камнями, но так и не смог запустить на стенде.

 

./dpdk-devbind.py --status

Network devices using DPDK-compatible driver
============================================
0000:05:00.1 '82576 Gigabit Network Connection' drv=igb_uio unused=

Network devices using kernel driver
===================================
0000:05:00.0 '82576 Gigabit Network Connection' if=enp5s0f0 drv=igb unused=igb_uio *Active*

Other network devices
=====================
<none>

 

systemctl status extfilter
? extfilter.service - extFilter is a daemon for filtering traffic using DPDK
  Loaded: loaded (/etc/systemd/system/extfilter.service; disabled; vendor preset: disabled)
  Active: inactive (dead)

Nov 08 17:02:02 extfilter pcapplusplusapp[16777]: EAL: PCI device 0000:05:00.0 on NUMA socket -1
Nov 08 17:02:02 extfilter pcapplusplusapp[16777]: EAL:   probe driver: 8086:10c9 rte_igb_pmd
Nov 08 17:02:02 extfilter pcapplusplusapp[16777]: EAL: PCI device 0000:05:00.1 on NUMA socket -1
Nov 08 17:02:02 extfilter pcapplusplusapp[16777]: EAL:   probe driver: 8086:10c9 rte_igb_pmd
Nov 08 17:05:51 extfilter systemd[1]: Starting extFilter is a daemon for filtering traffic using DPDK...
Nov 08 17:05:51 extfilter systemd[1]: Started extFilter is a daemon for filtering traffic using DPDK.
Nov 08 17:05:51 extfilter pcapplusplusapp[19384]: EAL: PCI device 0000:05:00.0 on NUMA socket -1
Nov 08 17:05:51 extfilter pcapplusplusapp[19384]: EAL:   probe driver: 8086:10c9 rte_igb_pmd
Nov 08 17:05:51 extfilter pcapplusplusapp[19384]: EAL: PCI device 0000:05:00.1 on NUMA socket -1
Nov 08 17:05:51 extfilter pcapplusplusapp[19384]: EAL:   probe driver: 8086:10c9 rte_igb_pmd

 

 

2016-11-08 17:02:02.061 [16777] Information Application - Setting mbuf size to 8191
2016-11-08 17:02:02.392 [16777] Fatal Application - DPDK device for port 1 doesn't exist
2016-11-08 17:05:51.646 [19384] Information Application - Setting mbuf size to 8191
2016-11-08 17:05:51.982 [19384] Fatal Application - DPDK device for port 1 doesn't exist

 

; dpdk порт, где анализировать трафик
dpdk_port = 1

grep -i huge /proc/meminfo
AnonHugePages:    757760 kB
HugePages_Total:      70
HugePages_Free:        0
HugePages_Rsvd:        0
HugePages_Surp:        0
Hugepagesize:       2048 kB

 

cat /sys/devices/system/node/node0/hugepages/hugepages-2048kB/nr_hugepages
70

cat /sys/devices/system/node/node0/hugepages/hugepages-1048576kB/nr_hugepages
0

 

 

modinfo /opt/dpdk/dpdk-16.07/build/kmod/igb_uio.ko
filename:       /opt/dpdk/dpdk-16.07/build/kmod/igb_uio.ko
author:         Intel Corporation
license:        GPL
description:    UIO driver for Intel IGB PCI cards
rhelversion:    7.2
srcversion:     47AE41AD0F20FAA13A85D76
depends:        uio
vermagic:       3.10.0-327.18.2.el7.x86_64 SMP mod_unload modversions
parm:           intr_mode:igb_uio interrupt mode (default=msix):
   msix       Use MSIX interrupt
   legacy     Use Legacy interrupt