Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Support PF_RING #35

Closed
fako1024 opened this issue Aug 13, 2022 · 1 comment · Fixed by #36
Closed

Support PF_RING #35

fako1024 opened this issue Aug 13, 2022 · 1 comment · Fixed by #36
Assignees
Labels
feature New feature or request
Milestone

Comments

@fako1024
Copy link
Collaborator

Since gopacket supports the PF_RING module (see https://www.ntop.org/products/packet-capture/pf_ring/), we might consider supporting it via goprobe as well (refer to https://pkg.go.dev/github.com/google/gopacket/pfring for how to use it within the context of gopacket).
This way, we could support high-traffic scenarios without being limited to libpcap (which will, at some point, start dropping packets if rates get too high).
Ideally, we would support both capturing via libpcap and PF_RING without build constraint, but I'm unsure if that's possible (I wasn't yet able to test the module due to my Kernel being too new, see ntop/PF_RING#817).

@fako1024 fako1024 added the feature New feature or request label Aug 13, 2022
@fako1024 fako1024 self-assigned this Aug 13, 2022
@fako1024 fako1024 linked a pull request Aug 14, 2022 that will close this issue
@fako1024 fako1024 added this to the v4 Release milestone Aug 15, 2022
@els0r
Copy link
Owner

els0r commented Jan 12, 2023

I am testing the module with pf_ring at the moment. See PR for #34.

@els0r els0r closed this as completed in #36 Jan 25, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feature New feature or request
Projects
None yet
Development

Successfully merging a pull request may close this issue.

2 participants