SWF-PCCH10GEE-07
Fabian Schneider, Jörg Wallerich, Anja Feldmann. Packet Capture in 10-Gigabit Ethernet Environments Using Contemporary Commodity Hardware. In Proceedings of the 8th International Conference on Passive and Active Network Measurement, (Location: Louvain-la-Neuve, Belgium), Lecture Notes in Computer Science, Volume 4427, Pages 207-217, Springer-Verlag Berlin Heidelberg, New York, NY, USA, April 2007.
Download [help]
Download paper:
Doi page 
Download paper:
Adobe portable document (pdf) 
Copyright notice: This material is presented to ensure timely dissemination of scholarly and technical work. Copyright and all rights therein are retained by authors or by other copyright holders. All persons copying this information are expected to adhere to the terms and constraints invoked by each author's copyright. These works may not be reposted without the explicit permission of the copyright holder.
Abstract
Tracing traffic using commodity hardware in contemporary highspeed access or aggregation networks such as 10-Gigabit Ethernet is an increasingly common yet challenging task. In this paper we investigate if today's commodity hardware and software is in principle able to capture traffic from a fully loaded Ethernet. We find that this is only possible for data rates up to 1 Gigabit/s without reverting to using special hardware due to, e. g., limitations with the current PC buses. Therefore, we propose a novel way for monitoring higher speed interfaces (e. g., 10-Gigabit) by distributing their traffic across a set of lower speed interfaces (e. g., 1-Gigabit).
This opens the next question: which system configuration is capable of monitoring one such 1-Gigabit/s interface? To answer this question we present a methodology for evaluating the performance impact of different system components including different CPU architectures and different operating system. Our results indicate that the combination of AMD Opteron with FreeBSD outperforms all others, independently of running in single- or multi-processor mode. Moreover, the impact of packet filtering, running multiple capturing applications, adding per packet analysis load, saving the captured packets to disk, and using 64-bit OSes is investigated.
Keywords
Contact
Fabian Schneider 
Jörg Wallerich
Anja Feldmann
BibTex Reference
@InProceedings{SWF-PCCH10GEE-07,
Author = {Schneider, Fabian and Wallerich, Jörg and Feldmann, Anja},
Title = {Packet Capture in 10-Gigabit Ethernet Environments Using Contemporary Commodity Hardware},
BookTitle = {Proceedings of the 8th International Conference on Passive and Active Network Measurement},
Volume = {4427},
Pages = {207--217},
Series = {Lecture Notes in Computer Science},
Publisher = {Springer-Verlag Berlin Heidelberg},
Address = {New York, NY, USA},
Location = {Louvain-la-Neuve, Belgium},
Month = {April},
Year = {2007}
}
EndNote Reference [help]
Get EndNote Reference (.ref)
It has been automatically generated using the bib2html program.