Skip to content
Nicola Bonelli edited this page May 10, 2014 · 38 revisions

Architecture

architecture

PFQ is a Linux Kernel module for packet capture and functional processing, designed to be efficient on multi-core architectures. It's lock-less architecture provides performance similar to those of its competitors PF_RING-DNA and Netmap, while maintaining the total flexibility of the software and the full compatibility with a plethora of device drivers.

PFQ is able to capture as a network sniffer (as PF_PACKET), or through accelerated drivers obtained by simply recompiling the source codes though the pfq-omatic script. Software acceleration is done by overloading certain kernel symbols at compile time and providing more efficient implementations.

Module parameters

Performance

Clone this wiki locally