Comparing and improving current packet capturing solutions based on commodity hardware

Proceedings of the ACM SIGCOMM Internet Measurement Conference, IMC

Volumn , Issue , 2010, Pages 206-217

  Braun, Lothar ^a   Didebulidze, Alexander ^a   Kammenhuber, Nils ^a   Carle, Georg ^a  

^a TECHNICAL UNIVERSITY OF MUNICH   (Germany)

Author keywords

Measurement; Performance

Indexed keywords

LINUX; PROGRAM DEBUGGING;

'CURRENT; COMMODITY HARDWARE; FREEBSD; NETWORK TRAFFIC; OFF-THE-SHELF HARDWARES; PACKET CAPTURING; PACKETS LOSS; PERFORMANCE; PERFORMANCE:LEVEL; SPECIAL-PURPOSE HARDWARES;

PACKET LOSS;

EID: 78650884702     PISSN: None     EISSN: None     Source Type: Conference Proceeding    
DOI: 10.1145/1879141.1879168     Document Type: Conference Paper

References (20)

1. Endace Measurement Systems, http://www.endace.com/.
2. F. Schneider and J. Wallerich, "Performance evaluation of packet capturing systems for high-speed networks," in CoNEXT'05: Proceedings of the 2005 ACM conference on Emerging network experiment and technology. New York, NY, USA: ACM Press, Oct. 2005, pp. 284-285.
3. L. Deri, "ncap: Wire-speed packet capture and transmission," in In Proceedings of the IEEE/IFIP Workshop on End-to-End Monitoring Techniques and Services (E2EMON), May 2005.
4. F. Schneider, J. Wallerich, and A. Feldmann, "Packet capture in 10-gigabit ethernet environments using contemporary commodity hardware," in In Proceedings of the 8th International Conference on Passive and Active Network Measurement, Apr. 2007.
5. L. Deri and F. Fusco, "Exploiting commodity multi-core systems for network traffic analysis," http://luca.ntop.org/MulticorePacketCapture.pdf, July 2009.
6. G. A. Cascallana and E. M. Lizarrondo, "Collecting packet traces at high speed," in Proc. of Workshop on Monitoring, Attack Detection and Mitigation (MonAM) 2006, Tübingen, Germany, Sep. 2006.
7. J. Mogul and K. K. Ramakrishnan, "Eliminating receive livelock in an interrupt-driven kernel," ACM Transactions on Computer Systems, vol. 15, no. 3, pp. 217-252, 1997.
8. L. Deri, "Improving passive packet capture: Beyond device polling," in In Proceedings of the Foruth International System Adminstration and Network Engineering Conference (SANE 2004), Sep. 2004.
9. Intel Corporation, "An Introduction to the Intel QuickPath Interconnect," http://www.intel.com/technology/quickpath-/introduction.pdf, 2009.
10. I. Kim, J. Moon, and H. Y. Yeom, "Timer-based interrupt mitigation for high performance packet processing," in 5th International Conference on High-Performance Computing in the Asia-Pacific Region, 2001.
11. Luigi Rizzo, "Device Polling Support for FreeBSD," in BSDCon Europe Conference 2001, 2001.
12. V. Jacobson, C. Leres, and S. McCanne, "libpcap," http://www.tcpdump.org.
13. Phil Woods, "libpcap MMAP mode on linux," http://public.lanl. gov/cpw/.
14. R. Olsson, "pktgen the linux packet generator.
15. tcpdump, http://www.tcpdump.org.
16. S. Kornexl, V. Paxson, H. Dreger, A. Feldmann, and R. Sommer, "Building a Time Machine for Efficient Recording and Retrieval of High-Volume Network Traffic," in Proc. of ACM SIGCOMM Internet Measurement Conference (IMC) 2005, Berkeley, CA, USA, Oct. 2005.
17. G. Maier, R. Sommer, H. Dreger, A. Feldmann, V. Paxson, and F. Schneider, "Enriching Network Security Analysis with Time Travel," in Proc. of ACM SIGCOMM 2008 Conference on Applications, Technologies, Architectures, and Protocols for Computer Communication, Seattle, WA, USA, Aug. 2008.
18. R. T. Lampert, C. Sommer, G. Münz, and F. Dressler, "Vermont - A Versatile Monitoring Toolkit for IPFIX and PSAMP," in Proceedings of Workshop on Monitoring, Attack Detection and Mitigation (MonAM) 2006, Tuebingen, Germany, Sep. 2006.
19. Homepage of the zlib project, http://www.zlib.net/.
20. C. Satten, "Lossless gigabit remote packet capture with linux," http://staff.washington.edu/corey/gulp/, University of Washington Network Systems, Mar. 2008.