Mailing List Archive: nProbe Pro won't do more then 1Gb/s?

nProbe Pro won't do more then 1Gb/s?

Jan 16, 2018, 7:52 AM

Post #1 of 8 (1377 views)

Hi list,

Do you know of any limitation (license wise) on the capture speed of nProbe?
Can't seem to go above 1Gb/s, but machine still has plenty of CPU
available, and PCIe 10Gb/s NIC...

===
Build OS: CentOS Linux release 7.4.1708 (Core)
GIT rev: 8.2-stable:fe33351b54075fa76a242548fb830e2bdf1d9224:20180112
Edition: nProbe Pro
License Type: Permanent License
===

===
[marco@nprobe ~]$ more /proc/net/pf_ring/stats/1361-ens2f0.1
Duration: 0:00:33:05:185
Bytes: 238825829235
Packets: 272020616
Dropped: 0

[marco@nprobe ~]$ more /proc/net/pf_ring/1361-ens2f0.1
Bound Device(s) : ens2f0
Active : 1
Breed : Standard
Appl. Name : nProbe
Socket Mode : RX only
Capture Direction : RX+TX
Sampling Rate : 1
IP Defragment : No
BPF Filtering : Disabled
Sw Filt Hash Rules : 0
Sw Filt WC Rules : 0
Sw Filt Hash Match : 0
Sw Filt Hash Miss : 0
Hw Filt Rules : 0
Poll Pkt Watermark : 8
Num Poll Calls : 0
Channel Id Mask : 0xFFFFFFFFFFFFFFFF
VLAN Id : 65535
Slot Version : 16 [7.0.0]
Min Num Slots : 4108
Bucket Len : 128
Slot Len : 336 [bucket+header]
Tot Memory : 1388544
Tot Packets : 276360318
Tot Pkt Lost : 0
Tot Insert : 276360318
Tot Read : 276360318
Insert Offset : 711632
Remove Offset : 711632
Num Free Slots : 4108
Reflect: Fwd Ok : 0
Reflect: Fwd Errors: 0
===

Regards,
Marco

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

marco at scom

Jan 16, 2018, 8:17 AM

Post #2 of 8 (1377 views)

Permalink

Hello,

Is PF_RING the culprit here ?? How to tweak this?
Absolute stats showing around 2Gb/s and Actual stats near 1Gb/s...

===
[marco@nprobe ~]$ sudo pfcount -i ens2f0
Using PF_RING v.7.0.0
Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed:
10000Mb/s]
# Device RX channels: 1
# Polling threads: 1
Dumping statistics on /proc/net/pf_ring/stats/2553-ens2f0.2
=========================
Absolute Stats: [136'889 pkts total][0 pkts dropped][0.0% dropped]
[136'889 pkts rcvd][128'561'396 bytes rcvd]
=========================

=========================
Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
[274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec][2'015.88
Mbit/sec]
=========================
Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps][0.99 Gbps]
=========================

===

Cumprimentos,

*Marco Teixeira*

-----------------------------------------------------------------------------------------------------------------------------------
Serviços de Comunicações da Universidade do Minho
Campus de Azurém, 4800-058 Guimarães - Portugal
Tel.: +351 253510141, Fax: +351 253604021
*marco@scom.uminho.pt <marco@scom.uminho.pt> *|
*http://www.scom.uminho.pt <http://www.scom.uminho.pt/>*
-----------------------------------------------------------------------------------------------------------------------------------

2018-01-16 15:52 GMT+00:00 Marco Teixeira <marco@scom.uminho.pt>:

> Hi list,
>
> Do you know of any limitation (license wise) on the capture speed of
> nProbe?
> Can't seem to go above 1Gb/s, but machine still has plenty of CPU
> available, and PCIe 10Gb/s NIC...
>
> ===
> Build OS: CentOS Linux release 7.4.1708 (Core)
> GIT rev: 8.2-stable:fe33351b54075fa76a242548fb830e
> 2bdf1d9224:20180112
> Edition: nProbe Pro
> License Type: Permanent License
> ===
>
> ===
> [marco@nprobe ~]$ more /proc/net/pf_ring/stats/1361-ens2f0.1
> Duration: 0:00:33:05:185
> Bytes: 238825829235
> Packets: 272020616
> Dropped: 0
>
> [marco@nprobe ~]$ more /proc/net/pf_ring/1361-ens2f0.1
> Bound Device(s) : ens2f0
> Active : 1
> Breed : Standard
> Appl. Name : nProbe
> Socket Mode : RX only
> Capture Direction : RX+TX
> Sampling Rate : 1
> IP Defragment : No
> BPF Filtering : Disabled
> Sw Filt Hash Rules : 0
> Sw Filt WC Rules : 0
> Sw Filt Hash Match : 0
> Sw Filt Hash Miss : 0
> Hw Filt Rules : 0
> Poll Pkt Watermark : 8
> Num Poll Calls : 0
> Channel Id Mask : 0xFFFFFFFFFFFFFFFF
> VLAN Id : 65535
> Slot Version : 16 [7.0.0]
> Min Num Slots : 4108
> Bucket Len : 128
> Slot Len : 336 [bucket+header]
> Tot Memory : 1388544
> Tot Packets : 276360318
> Tot Pkt Lost : 0
> Tot Insert : 276360318
> Tot Read : 276360318
> Insert Offset : 711632
> Remove Offset : 711632
> Num Free Slots : 4108
> Reflect: Fwd Ok : 0
> Reflect: Fwd Errors: 0
> ===
>
> Regards,
> Marco
>

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

cardigliano at ntop

Jan 16, 2018, 8:21 AM

Post #3 of 8 (1377 views)

Permalink

Hi Marco
it seems there is no packet loss, did you check the interface stats with ethtool -S to check if pats are getting lost at interface level?

Best Regards
Alfredo

> On 16 Jan 2018, at 17:17, Marco Teixeira <marco@scom.uminho.pt> wrote:
>
> Hello,
>
> Is PF_RING the culprit here ?? How to tweak this?
> Absolute stats showing around 2Gb/s and Actual stats near 1Gb/s...
>
> ===
> [marco@nprobe ~]$ sudo pfcount -i ens2f0
> Using PF_RING v.7.0.0
> Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed: 10000Mb/s]
> # Device RX channels: 1
> # Polling threads: 1
> Dumping statistics on /proc/net/pf_ring/stats/2553-ens2f0.2
> =========================
> Absolute Stats: [136'889 pkts total][0 pkts dropped][0.0% dropped]
> [136'889 pkts rcvd][128'561'396 bytes rcvd]
> =========================
>
> =========================
> Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
> [274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec][2'015.88 Mbit/sec]
> =========================
> Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps][0.99 Gbps]
> =========================
>
> ===
>
> Cumprimentos,
>
> Marco Teixeira
>
> -----------------------------------------------------------------------------------------------------------------------------------
> Serviços de Comunicações da Universidade do Minho
> Campus de Azurém, 4800-058 Guimarães - Portugal
> Tel.: +351 253510141, Fax: +351 253604021
> marco@scom.uminho.pt <mailto:marco@scom.uminho.pt> | http://www.scom.uminho.pt <http://www.scom.uminho.pt/>
> -----------------------------------------------------------------------------------------------------------------------------------
>
>
> 2018-01-16 15:52 GMT+00:00 Marco Teixeira <marco@scom.uminho.pt <mailto:marco@scom.uminho.pt>>:
> Hi list,
>
> Do you know of any limitation (license wise) on the capture speed of nProbe?
> Can't seem to go above 1Gb/s, but machine still has plenty of CPU available, and PCIe 10Gb/s NIC...
>
> ===
> Build OS: CentOS Linux release 7.4.1708 (Core)
> GIT rev: 8.2-stable:fe33351b54075fa76a242548fb830e2bdf1d9224:20180112
> Edition: nProbe Pro
> License Type: Permanent License
> ===
>
> ===
> [marco@nprobe ~]$ more /proc/net/pf_ring/stats/1361-ens2f0.1
> Duration: 0:00:33:05:185
> Bytes: 238825829235
> Packets: 272020616
> Dropped: 0
>
> [marco@nprobe ~]$ more /proc/net/pf_ring/1361-ens2f0.1
> Bound Device(s) : ens2f0
> Active : 1
> Breed : Standard
> Appl. Name : nProbe
> Socket Mode : RX only
> Capture Direction : RX+TX
> Sampling Rate : 1
> IP Defragment : No
> BPF Filtering : Disabled
> Sw Filt Hash Rules : 0
> Sw Filt WC Rules : 0
> Sw Filt Hash Match : 0
> Sw Filt Hash Miss : 0
> Hw Filt Rules : 0
> Poll Pkt Watermark : 8
> Num Poll Calls : 0
> Channel Id Mask : 0xFFFFFFFFFFFFFFFF
> VLAN Id : 65535
> Slot Version : 16 [7.0.0]
> Min Num Slots : 4108
> Bucket Len : 128
> Slot Len : 336 [bucket+header]
> Tot Memory : 1388544
> Tot Packets : 276360318
> Tot Pkt Lost : 0
> Tot Insert : 276360318
> Tot Read : 276360318
> Insert Offset : 711632
> Remove Offset : 711632
> Num Free Slots : 4108
> Reflect: Fwd Ok : 0
> Reflect: Fwd Errors: 0
> ===
>
> Regards,
> Marco
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

marco at scom

Jan 16, 2018, 8:27 AM

Post #4 of 8 (1377 views)

Permalink

Hi Alfredo,

I think our emails got crossed... but nevertheless here is ethtool -S
output... Shows no drops.

===
[marco@nprobe ~]$ sudo ethtool --statistics ens2f0
NIC statistics:
xmit_called: 0
xmit_finished: 0
rx_dropped: 0
tx_dropped: 0
csummed: 0
rx_pkts: 544668580
lro_pkts: 0
rx_bytes: 480924479057
tx_bytes: 0
===

Like i said... on my previous email, the problem might be with PFRING ?
===
=========================
Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
[274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec]*[2'015.88
Mbit/sec]*
=========================
Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps]*[0.99 Gbps]*
=========================
===

Cumprimentos,

*Marco Teixeira*

-----------------------------------------------------------------------------------------------------------------------------------
Serviços de Comunicações da Universidade do Minho
Campus de Azurém, 4800-058 Guimarães - Portugal
Tel.: +351 253510141, Fax: +351 253604021
*marco@scom.uminho.pt <marco@scom.uminho.pt> *|
*http://www.scom.uminho.pt <http://www.scom.uminho.pt/>*
-----------------------------------------------------------------------------------------------------------------------------------

2018-01-16 16:21 GMT+00:00 Alfredo Cardigliano <cardigliano@ntop.org>:

> Hi Marco
> it seems there is no packet loss, did you check the interface stats with
> ethtool -S to check if pats are getting lost at interface level?
>
> Best Regards
> Alfredo
>
> On 16 Jan 2018, at 17:17, Marco Teixeira <marco@scom.uminho.pt> wrote:
>
> Hello,
>
> Is PF_RING the culprit here ?? How to tweak this?
> Absolute stats showing around 2Gb/s and Actual stats near 1Gb/s...
>
> ===
> [marco@nprobe ~]$ sudo pfcount -i ens2f0
> Using PF_RING v.7.0.0
> Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed:
> 10000Mb/s]
> # Device RX channels: 1
> # Polling threads: 1
> Dumping statistics on /proc/net/pf_ring/stats/2553-ens2f0.2
> =========================
> Absolute Stats: [136'889 pkts total][0 pkts dropped][0.0% dropped]
> [136'889 pkts rcvd][128'561'396 bytes rcvd]
> =========================
>
> =========================
> Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
> [274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec][2'015.88
> Mbit/sec]
> =========================
> Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps][0.99 Gbps]
> =========================
>
> ===
>
> Cumprimentos,
>
> *Marco Teixeira*
>
> ------------------------------------------------------------
> -----------------------------------------------------------------------
> Serviços de Comunicações da Universidade do Minho
> Campus de Azurém, 4800-058 Guimarães - Portugal
> Tel.: +351 253510141, Fax: +351 253604021
> *marco@scom.uminho.pt <marco@scom.uminho.pt> *|
> *http://www.scom.uminho.pt <http://www.scom.uminho.pt/>*
> ------------------------------------------------------------
> -----------------------------------------------------------------------
>
> 2018-01-16 15:52 GMT+00:00 Marco Teixeira <marco@scom.uminho.pt>:
>
>> Hi list,
>>
>> Do you know of any limitation (license wise) on the capture speed of
>> nProbe?
>> Can't seem to go above 1Gb/s, but machine still has plenty of CPU
>> available, and PCIe 10Gb/s NIC...
>>
>> ===
>> Build OS: CentOS Linux release 7.4.1708 (Core)
>> GIT rev: 8.2-stable:fe33351b54075fa76a242548fb830e2bdf1d9224:
>> 20180112
>> Edition: nProbe Pro
>> License Type: Permanent License
>> ===
>>
>> ===
>> [marco@nprobe ~]$ more /proc/net/pf_ring/stats/1361-ens2f0.1
>> Duration: 0:00:33:05:185
>> Bytes: 238825829235
>> Packets: 272020616
>> Dropped: 0
>>
>> [marco@nprobe ~]$ more /proc/net/pf_ring/1361-ens2f0.1
>> Bound Device(s) : ens2f0
>> Active : 1
>> Breed : Standard
>> Appl. Name : nProbe
>> Socket Mode : RX only
>> Capture Direction : RX+TX
>> Sampling Rate : 1
>> IP Defragment : No
>> BPF Filtering : Disabled
>> Sw Filt Hash Rules : 0
>> Sw Filt WC Rules : 0
>> Sw Filt Hash Match : 0
>> Sw Filt Hash Miss : 0
>> Hw Filt Rules : 0
>> Poll Pkt Watermark : 8
>> Num Poll Calls : 0
>> Channel Id Mask : 0xFFFFFFFFFFFFFFFF
>> VLAN Id : 65535
>> Slot Version : 16 [7.0.0]
>> Min Num Slots : 4108
>> Bucket Len : 128
>> Slot Len : 336 [bucket+header]
>> Tot Memory : 1388544
>> Tot Packets : 276360318
>> Tot Pkt Lost : 0
>> Tot Insert : 276360318
>> Tot Read : 276360318
>> Insert Offset : 711632
>> Remove Offset : 711632
>> Num Free Slots : 4108
>> Reflect: Fwd Ok : 0
>> Reflect: Fwd Errors: 0
>> ===
>>
>> Regards,
>> Marco
>>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

deri at ntop

Jan 16, 2018, 8:31 AM

Post #5 of 8 (1377 views)

Permalink

Marco
how much traffic are you injecting and how (pfsend)? What does the sender say?

Luca

> On 16 Jan 2018, at 17:27, Marco Teixeira <marco@scom.uminho.pt> wrote:
>
> Hi Alfredo,
>
> I think our emails got crossed... but nevertheless here is ethtool -S output... Shows no drops.
>
> ===
> [marco@nprobe ~]$ sudo ethtool --statistics ens2f0
> NIC statistics:
> xmit_called: 0
> xmit_finished: 0
> rx_dropped: 0
> tx_dropped: 0
> csummed: 0
> rx_pkts: 544668580
> lro_pkts: 0
> rx_bytes: 480924479057
> tx_bytes: 0
> ===
>
> Like i said... on my previous email, the problem might be with PFRING ?
> ===
> =========================
> Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
> [274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec][2'015.88 Mbit/sec]
> =========================
> Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps][0.99 Gbps]
> =========================
> ===
>
> Cumprimentos,
>
> Marco Teixeira
>
> -----------------------------------------------------------------------------------------------------------------------------------
> Serviços de Comunicações da Universidade do Minho
> Campus de Azurém, 4800-058 Guimarães - Portugal
> Tel.: +351 253510141, Fax: +351 253604021
> marco@scom.uminho.pt <mailto:marco@scom.uminho.pt> | http://www.scom.uminho.pt <http://www.scom.uminho.pt/>
> -----------------------------------------------------------------------------------------------------------------------------------
>
>
> 2018-01-16 16:21 GMT+00:00 Alfredo Cardigliano <cardigliano@ntop.org <mailto:cardigliano@ntop.org>>:
> Hi Marco
> it seems there is no packet loss, did you check the interface stats with ethtool -S to check if pats are getting lost at interface level?
>
> Best Regards
> Alfredo
>
>> On 16 Jan 2018, at 17:17, Marco Teixeira <marco@scom.uminho.pt <mailto:marco@scom.uminho.pt>> wrote:
>>
>> Hello,
>>
>> Is PF_RING the culprit here ?? How to tweak this?
>> Absolute stats showing around 2Gb/s and Actual stats near 1Gb/s...
>>
>> ===
>> [marco@nprobe ~]$ sudo pfcount -i ens2f0
>> Using PF_RING v.7.0.0
>> Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed: 10000Mb/s]
>> # Device RX channels: 1
>> # Polling threads: 1
>> Dumping statistics on /proc/net/pf_ring/stats/2553-ens2f0.2
>> =========================
>> Absolute Stats: [136'889 pkts total][0 pkts dropped][0.0% dropped]
>> [136'889 pkts rcvd][128'561'396 bytes rcvd]
>> =========================
>>
>> =========================
>> Absolute Stats: [274'090 pkts total][0 pkts dropped][0.0% dropped]
>> [274'090 pkts rcvd][252'023'439 bytes rcvd][274'048.34 pkt/sec][2'015.88 Mbit/sec]
>> =========================
>> Actual Stats: [137'201 pkts rcvd][1'000.15 ms][137'180.28 pps][0.99 Gbps]
>> =========================
>>
>> ===
>>
>> Cumprimentos,
>>
>> Marco Teixeira
>>
>> -----------------------------------------------------------------------------------------------------------------------------------
>> Serviços de Comunicações da Universidade do Minho
>> Campus de Azurém, 4800-058 Guimarães - Portugal
>> Tel.: +351 253510141, Fax: +351 253604021
>> marco@scom.uminho.pt <mailto:marco@scom.uminho.pt> | http://www.scom.uminho.pt <http://www.scom.uminho.pt/>
>> -----------------------------------------------------------------------------------------------------------------------------------
>>
>>
>> 2018-01-16 15:52 GMT+00:00 Marco Teixeira <marco@scom.uminho.pt <mailto:marco@scom.uminho.pt>>:
>> Hi list,
>>
>> Do you know of any limitation (license wise) on the capture speed of nProbe?
>> Can't seem to go above 1Gb/s, but machine still has plenty of CPU available, and PCIe 10Gb/s NIC...
>>
>> ===
>> Build OS: CentOS Linux release 7.4.1708 (Core)
>> GIT rev: 8.2-stable:fe33351b54075fa76a242548fb830e2bdf1d9224:20180112
>> Edition: nProbe Pro
>> License Type: Permanent License
>> ===
>>
>> ===
>> [marco@nprobe ~]$ more /proc/net/pf_ring/stats/1361-ens2f0.1
>> Duration: 0:00:33:05:185
>> Bytes: 238825829235
>> Packets: 272020616
>> Dropped: 0
>>
>> [marco@nprobe ~]$ more /proc/net/pf_ring/1361-ens2f0.1
>> Bound Device(s) : ens2f0
>> Active : 1
>> Breed : Standard
>> Appl. Name : nProbe
>> Socket Mode : RX only
>> Capture Direction : RX+TX
>> Sampling Rate : 1
>> IP Defragment : No
>> BPF Filtering : Disabled
>> Sw Filt Hash Rules : 0
>> Sw Filt WC Rules : 0
>> Sw Filt Hash Match : 0
>> Sw Filt Hash Miss : 0
>> Hw Filt Rules : 0
>> Poll Pkt Watermark : 8
>> Num Poll Calls : 0
>> Channel Id Mask : 0xFFFFFFFFFFFFFFFF
>> VLAN Id : 65535
>> Slot Version : 16 [7.0.0]
>> Min Num Slots : 4108
>> Bucket Len : 128
>> Slot Len : 336 [bucket+header]
>> Tot Memory : 1388544
>> Tot Packets : 276360318
>> Tot Pkt Lost : 0
>> Tot Insert : 276360318
>> Tot Read : 276360318
>> Insert Offset : 711632
>> Remove Offset : 711632
>> Num Free Slots : 4108
>> Reflect: Fwd Ok : 0
>> Reflect: Fwd Errors: 0
>> ===
>>
>> Regards,
>> Marco
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc@listgateway.unipi.it <mailto:Ntop-misc@listgateway.unipi.it>
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc <http://listgateway.unipi.it/mailman/listinfo/ntop-misc>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it <mailto:Ntop-misc@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc <http://listgateway.unipi.it/mailman/listinfo/ntop-misc>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

marco at scom

Jan 17, 2018, 12:13 PM

Post #6 of 8 (1370 views)

Permalink

Hello list,

Any PFRING wizard that can offer clues on where to start troubleshooting
this variance between "Absolut Stats" vs "Actual Stats"...?

?
===
[marco@nprobe ~]$ sudo pfcount -i ens2f0
[sudo] password for marco:
Using PF_RING v.7.0.0
Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed:
10000Mb/s]
# Device RX channels: 1
# Polling threads: 1
Dumping statistics on /proc/net/pf_ring/stats/3096-ens2f0.3
=========================
Absolute Stats: [136'980 pkts total][0 pkts dropped][0.0% dropped]
[136'980 pkts rcvd][126'559'478 bytes rcvd]
=========================

=========================
Absolute Stats: [274'202 pkts total][0 pkts dropped][0.0% dropped]
[274'202 pkts rcvd][254'708'653 bytes rcvd][274'163.89 pkt/sec][2'037.38
Mbit/sec]
=========================
Actual Stats: [137'222 pkts rcvd][1'000.13 ms][137'202.92 pps][1.03 Gbps]
=========================

=========================
Absolute Stats: [411'199 pkts total][0 pkts dropped][0.0% dropped]
[411'199 pkts rcvd][382'383'683 bytes rcvd][205'575.03 pkt/sec][1'529.35
Mbit/sec]
=========================
Actual Stats: [136'997 pkts rcvd][1'000.09 ms][136'983.43 pps][1.02 Gbps]
=========================
===

Thankx
Marco

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

cardigliano at ntop

Jan 17, 2018, 2:16 PM

Post #7 of 8 (1370 views)

Permalink

“Absolute Stats” is the total / average number of packets/bytes
“Actual Stats” is the current number of packets/bytes (last second)

Alfredo

> On 17 Jan 2018, at 21:13, Marco Teixeira <marco@scom.uminho.pt> wrote:
>
> Hello list,
>
> Any PFRING wizard that can offer clues on where to start troubleshooting this variance between "Absolut Stats" vs "Actual Stats"...?
>
> ?===
> [marco@nprobe ~]$ sudo pfcount -i ens2f0
> [sudo] password for marco:
> Using PF_RING v.7.0.0
> Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed: 10000Mb/s]
> # Device RX channels: 1
> # Polling threads: 1
> Dumping statistics on /proc/net/pf_ring/stats/3096-ens2f0.3
> =========================
> Absolute Stats: [136'980 pkts total][0 pkts dropped][0.0% dropped]
> [136'980 pkts rcvd][126'559'478 bytes rcvd]
> =========================
>
> =========================
> Absolute Stats: [274'202 pkts total][0 pkts dropped][0.0% dropped]
> [274'202 pkts rcvd][254'708'653 bytes rcvd][274'163.89 pkt/sec][2'037.38 Mbit/sec]
> =========================
> Actual Stats: [137'222 pkts rcvd][1'000.13 ms][137'202.92 pps][1.03 Gbps]
> =========================
>
> =========================
> Absolute Stats: [411'199 pkts total][0 pkts dropped][0.0% dropped]
> [411'199 pkts rcvd][382'383'683 bytes rcvd][205'575.03 pkt/sec][1'529.35 Mbit/sec]
> =========================
> Actual Stats: [136'997 pkts rcvd][1'000.09 ms][136'983.43 pps][1.02 Gbps]
> =========================
> ===
>
> Thankx
> Marco
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

Re: nProbe Pro won't do more then 1Gb/s? [ In reply to ]

marco at scom

Jan 18, 2018, 2:35 AM

Post #8 of 8 (1362 views)

Permalink

Hi Afredo and anyone "listening",

I would like to rule out if pf_ring is the culprit here...
What would be the correct way to have nprobe use libpcap (or AF_PACKET??)
mode of getting packets from the NIC?
Blacklisting pf_ring module from loading?

Thank you
Marco

2018-01-17 22:16 GMT+00:00 Alfredo Cardigliano <cardigliano@ntop.org>:

> “Absolute Stats” is the total / average number of packets/bytes
> “Actual Stats” is the current number of packets/bytes (last second)
>
> Alfredo
>
> On 17 Jan 2018, at 21:13, Marco Teixeira <marco@scom.uminho.pt> wrote:
>
> Hello list,
>
> Any PFRING wizard that can offer clues on where to start troubleshooting
> this variance between "Absolut Stats" vs "Actual Stats"...?
>
> ?
> ===
> [marco@nprobe ~]$ sudo pfcount -i ens2f0
> [sudo] password for marco:
> Using PF_RING v.7.0.0
> Capturing from ens2f0 [mac: D8:D3:85:A0:12:50][if_index: 5][speed:
> 10000Mb/s]
> # Device RX channels: 1
> # Polling threads: 1
> Dumping statistics on /proc/net/pf_ring/stats/3096-ens2f0.3
> =========================
> Absolute Stats: [136'980 pkts total][0 pkts dropped][0.0% dropped]
> [136'980 pkts rcvd][126'559'478 bytes rcvd]
> =========================
>
> =========================
> Absolute Stats: [274'202 pkts total][0 pkts dropped][0.0% dropped]
> [274'202 pkts rcvd][254'708'653 bytes rcvd][274'163.89 pkt/sec][2'037.38
> Mbit/sec]
> =========================
> Actual Stats: [137'222 pkts rcvd][1'000.13 ms][137'202.92 pps][1.03 Gbps]
> =========================
>
> =========================
> Absolute Stats: [411'199 pkts total][0 pkts dropped][0.0% dropped]
> [411'199 pkts rcvd][382'383'683 bytes rcvd][205'575.03 pkt/sec][1'529.35
> Mbit/sec]
> =========================
> Actual Stats: [136'997 pkts rcvd][1'000.09 ms][136'983.43 pps][1.02 Gbps]
> =========================
> ===
>
> Thankx
> Marco
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>

Mailing List Archive

Attached Files:

Attached Files: