Home // ICN 2014, The Thirteenth International Conference on Networks // View article

Comparing Network Traffic Probes based on Commodity Hardware

Authors:
Luis Zabala
Alberto Pineda
Armando Ferro
Daniel Fernandez

Keywords: capturing; Ksensor; Adviser; NAPI, PF_RING; PFQ

Abstract:
Due to the fact that, nowadays, it is possible to capture traffic in 1-10 Gigabit Ethernet networks using commodity hardware, many traffic monitoring systems, and especially capturing tools, have been proposed in recent years. This paper presents a comparison between two software probes named Adviser and Ksensor. Both of them are multi-processor systems and are built over conventional hardware. However, while Adviser is designed in user space, Ksensor runs in kernel space. This work compares the performance results of the two probes considering several capture engines (NAPI, PF_RING with DNA, PFQ) and, at the same time, different application or analysis loads. The evaluations of the probes with the different settings have been performed on the same hardware multi-core configuration. The results of the evaluations let conclude which solution is better in each situation and which solution must be discarded.

Pages: 261 to 267

Copyright: Copyright (c) IARIA, 2014

Publication date: February 23, 2014

Published in: conference

ISSN: 2308-4413

ISBN: 978-1-61208-318-6

Location: Nice, France

Dates: from February 23, 2014 to February 27, 2014