High-speed packet processing framework
Clone or download
cardigliano Merge pull request #444 from wang-xuefei/dev
invoke realloc return NULL, free previous pointer
Latest commit 1234e80 Dec 16, 2018


pfring ntop


Build Status


PF_RING™ is a Linux kernel module and user-space framework that allows you to process packets at high-rates while providing you a consistent API for packet processing applications.

Who needs PF_RING™?

Basically everyone who has to handle many packets per second. The term ‘many’ changes according to the hardware you use for traffic analysis. It can range from 80k pkt/sec on a 1,2GHz ARM to 15M pkt/sec and above per core on a low-end 2,5GHz Xeon. PF_RING™ not only enables you to capture packets faster, it also captures packets more efficiently preserving CPU cycles.


For more information about PF_RING™, please visit http://ntop.org

If you want to know about PF_RING™ internals or for the User’s Manual visit the Wiki or the ntop.org Documentation section.


PF_RING™ kernel module and drivers are distributed under the GNU GPLv2 license, LGPLv2.1 for the user-space PF_RING library, and are available in source code format.