Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread Stephen Donnelly
On Thu, 2008-01-10 at 14:53 +1300, Stephen Donnelly wrote: > On Wed, 2008-01-09 at 17:25 -0800, Guy Harris wrote: > > On Jan 9, 2008, at 3:37 PM, lei wei wrote: > > > > > I'm actually trying to get Argus working with DAG but argus still > > > can't read > > > anything from it. > > > > From a q

Re: [tcpdump-workers] setting the initial ring size

2008-01-09 Thread Guy Harris
On Jan 7, 2008, at 4:05 PM, Andy Howell wrote: A 'capabilities' API could be useful. It would allow the developer to take advantage of platform specific features in a generic way. Capabilities might include: Can get/set receive buffer size Has nmap Has pf_ring

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread lei wei
Hi Guy and Stephen, Thanks for this info. I've been trying to get argus working with DAG for a while. Based on your suggestions I guess I should quit doing that. What I'm really doing is to monitor border traffic with an inbound link and an outbound link. I'm trying to use DAG card to merge the tra

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread Stephen Donnelly
On Wed, 2008-01-09 at 17:25 -0800, Guy Harris wrote: > On Jan 9, 2008, at 3:37 PM, lei wei wrote: > > > I'm actually trying to get Argus working with DAG but argus still > > can't read > > anything from it. > > From a quick look at the source to Argus 2.0.6, it appears to be > assuming that

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread Guy Harris
On Jan 9, 2008, at 3:37 PM, lei wei wrote: I'm actually trying to get Argus working with DAG but argus still can't read anything from it. Do you have any experience on it? No, I don't. From a quick look at the source to Argus 2.0.6, it appears to be assuming that you can do a select() on

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread lei wei
Hi Guy, I recompiled tcpdump again and it's working now. :) Thanks for the help. I'm actually trying to get Argus working with DAG but argus still can't read anything from it. Do you have any experience on it? Lei On 1/9/08, lei wei <[EMAIL PROTECTED]> wrote: > > Hi Guy, > > In config.h file:

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread lei wei
Hi Guy, In config.h file: /* define if you have the DAG API */ #define HAVE_DAG_API 1 so I think it is set. The output of ldd on tcpdump is: $ ldd tcpdump tcpdump: libcrypto.so.3 => /lib/libcrypto.so.3 (0x2810d000) libc.so.5 => /lib/libc.so.5 (0x28204000) I don't know if or not

Re: [tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread Guy Harris
On Jan 9, 2008, at 2:04 PM, lei wei wrote: I'm trying to get tcpdump work with DAG interface. I installed the dag-enabled libpcap0.9.8 and tcpdump3.9.8 on a FreeBSD5.4 system. When I typed "tcpdump -i dag0", it gives me the error "tcpdump: BIOCSETIF: dag0: Device not configured". Could anyo

[tcpdump-workers] tcpdump problem with DAG card

2008-01-09 Thread lei wei
Hello, I'm trying to get tcpdump work with DAG interface. I installed the dag-enabled libpcap0.9.8 and tcpdump3.9.8 on a FreeBSD5.4 system. When I typed "tcpdump -i dag0", it gives me the error "tcpdump: BIOCSETIF: dag0: Device not configured". Could anyone give me any hint on what the problem is?

Re: [tcpdump-workers] NIC / driver performance with libpcap

2008-01-09 Thread Stephen Donnelly
On Wed, 2008-01-09 at 17:12 +0100, Fabian Schneider wrote: > Hi Andy, > > The two metrics I looking at now are: > > > > - What throughput can I get before seeing dropped packets > > - CPU usage > > maybe you want to take a look at [1] where I have done exactly this for a > special systems w

Re: [tcpdump-workers] NIC / driver performance with libpcap

2008-01-09 Thread Fabian Schneider
Hi Andy, > The two metrics I looking at now are: > > - What throughput can I get before seeing dropped packets > - CPU usage maybe you want to take a look at [1] where I have done exactly this for a special systems with Intel cards. If you want to read more background on this have a loo