On multi---gigabit packet capturing with multi---core commodity hardware

  • Authors:
  • Nicola Bonelli;Andrea Di Pietro;Stefano Giordano;Gregorio Procissi

  • Affiliations:
  • CNIT and Università di Pisa, Pisa, Italy;CNIT and Università di Pisa, Pisa, Italy;CNIT and Università di Pisa, Pisa, Italy;CNIT and Università di Pisa, Pisa, Italy

  • Venue:
  • PAM'12 Proceedings of the 13th international conference on Passive and Active Measurement
  • Year:
  • 2012

Quantified Score

Hi-index 0.00

Visualization

Abstract

Nowadays commodity hardware is offering an ever increasing degree of parallelism (CPUs with more and more cores, NICs with parallel queues). However, most of the existing network monitoring software has not yet been designed with high parallelism in mind. Therefore we designed a novel packet capturing engine, named PFQ, that allows efficient capturing and in---kernel aggregation, as well as connection---aware load balancing. Such an engine is based on a novel lockless queue and allows parallel packet capturing to let the user---space application arbitrarily define its degree of parallelism. Therefore, both legacy applications and natively parallel ones can benefit from such a capturing engine. In addition, PFQ outperforms its competitors both in terms of captured packets and CPU consumption.