Wireshark in a Multi-Core Environment Using Hardware Acceleration

More documents

Recommendations

Info

Programmable Adapter Filters, ContinuedFilter Example• The figure below illustrates how filters can be used to capture IP/UDP and IP/TCP frames• NTPL syntax:Capture[Priority=0; Feed=0] = ((Layer3Protocol == IP) AND((Layer4Protocol == UDP) OR (Layer4Protocol == TCP)))Napatech - Sharkfest200918
Fixed SlicingAll Napatech adapters support fixed slicing.Using fixed slicing it is possible to slice captured frames to a fixed maximum length before they aretransferred to the user application memory.The fixed slicing is configured using the NTPL:• Example: Slice captured frames to a maximum length of 128 bytes:Slice[Priority=0; Offset=128] = all• Note: snaplen in libpcap translated automatically to slicing in hardwareFor many use cases it will be much more useful to use the dynamic slicing functionality of theNapatech adapters(see next slide).Napatech - Sharkfest 200919
Page 5 and 6: What problem does hardware accelera
Page 7 and 8: Adapter ArchitectureTime Stamp &GPS
Page 9 and 10: Merging of Streams, ContinuedThe Na
Page 11 and 12: OS Bypass, Zero CopyAll Napatech ad
Page 13 and 14: Large Host Buffers, ContinuedNapate
Page 15 and 16: Feature Details - DescriptorsPCAP d
Page 17: Programmable Adapter FiltersFilter
Page 22 and 23: Multi CPU Buffer Splitting, Continu
Page 24 and 25: DeduplicationDeduplication is a fun
Page 26 and 27: Host-based TransmitHigh-speed host-
Page 28: Napatech LibPCAP LibraryExample. Bu

Wireshark in a Multi-Core Environment Using Hardware Acceleration

Create successful ePaper yourself

Delete template?

Save as template?