Wireshark in a Multi-Core Environment Using Hardware Acceleration

More documents

Recommendations

Info

Line Speed Capturing ReviewNapatech Adapter Feature Benefit Standard Network AdaptersFrame burst buffering onadapterLong PCI burstsLarge host buffersOS bypass, zero copy ofcaptured packets directly touser application memoryNo data is lost, even when captured databursts exceed the PCI interface speed, orthe PCI interface is temporarily blocked.For NT20X 2 x 10 Gbps can be handleddown to 150 bytes frames.For NT20X 1 x 10 Gbps can be handled atany frame size.Data is lost, when captured burstsexceed the PCI interface speed, or thePCI interface is temporarily blocked.Very high PCI performance can be achieved The PCI performance will depend on thefor all frame sizes. frame size. E.g. the overhead for a 64-byte frame can be as much as 45%,while for a 1-KB frame it will be only 5%.Data can be processed at much higherspeed, and the frame processing overheadis much lower (releasing processing powerto the user application).There is no packet copying or OS handlingoverhead.Merging of streams Adapters can merge packets received on 2or more ports in reception time order,whereby the host CPU is off-loaded.Frames are handled one at a time givinga large processing overhead resulting inlower user application speed.A standard OS packet handling interfaceperforms one or more copy of all framesresulting in lower application speed.The sorting of frames in time order mustby done by the host CPU, reducing thepossible host processing performance.16
Programmable Adapter FiltersFilter functionality:• 64 fully programmable filters.• Received frames can be filtered at full line speed for all frame sizes andall combinations of filter settings.• Dynamic offset of filters, based on automatic detection of packet type:• 26 predefined fields (Ethernet, IPv4, IPv6, UDP, TCP, ICMP, …)(see next slide for example)• Fixed offset relative to dynamic offset position.• Predefined filters: IPv6, IPv4, VLAN, IP, MPLS, IPX.• 64-byte patterns can be matched.• The length of the received frame can be used for filtering frames.• The port on which the frame was received can be used for filtering.Benefits:• Enables filtering of network frames so that the user application onlyneeds to handle relevant frames, off-loading the user application.• Filtering can be done at network line speed.Napatech - Sharkfest 200917
Page 5 and 6: What problem does hardware accelera
Page 7 and 8: Adapter ArchitectureTime Stamp &GPS
Page 9 and 10: Merging of Streams, ContinuedThe Na
Page 11 and 12: OS Bypass, Zero CopyAll Napatech ad
Page 13 and 14: Large Host Buffers, ContinuedNapate
Page 15: Feature Details - DescriptorsPCAP d
Page 19 and 20: Fixed SlicingAll Napatech adapters
Page 22 and 23: Multi CPU Buffer Splitting, Continu
Page 24 and 25: DeduplicationDeduplication is a fun
Page 26 and 27: Host-based TransmitHigh-speed host-
Page 28: Napatech LibPCAP LibraryExample. Bu

Wireshark in a Multi-Core Environment Using Hardware Acceleration

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?