Re: Libpcap performance under VMWare guest OSes

["Mark Bednarczyk" <voytechs () yahoo com>]

ubuntu9-x86:~# uname -a
Linux ubuntu9-x86 2.6.28-11-server #42-Ubuntu SMP Fri Apr 17 02:48:10 UTC
2009 i686 GNU/Linux

ubuntu9-x86:~# tcpdump -h
tcpdump version 3.9.8
libpcap version 1.0.0

deb5-x86:~# uname -a
Linux deb5-x86 2.6.26-1-686 #1 SMP Sat Jan 10 18:29:31 UTC 2009 i686
GNU/Linux

deb5-x86:~# tcpdump -h
tcpdump version 3.9.8
libpcap version 0.9.8

And both of these "guest" OSes are running on old version of FedoraCore 8
using VMServer version 4:
[root@b7 ~]# uname -a
Linux b7 2.6.24.5-85.fc8 #1 SMP Sat Apr 19 12:39:34 EDT 2008 i686 i686 i386
GNU/Linux


I also have a litany of the same type of OSes on a WinXP system where I use
both VMWorkstation 6.5 (and VMPLayer if needed). I ran guest ubuntu1 on
WinXP host and guest ubuntu2 on FC8 host.

As to the NICs. The FC8 system is a rackmount 1U server, its one of the
onboard ether cards:
/var/log/messages: "Dec 10 21:03:43 b7 kernel: e1000: eth0: e1000_probe:
Intel(R) PRO/1000 Network Connection"

The WinXP uses "Intel(R) PRO/100 VE Network Connection" card (it's a HP
retail system).

Cheers,
mark...


> -----Original Message-----
> From: tcpdump-workers-owner () lists tcpdump org
> [mailto:tcpdump-workers-owner () lists tcpdump org] On Behalf Of
> Guy Harris
> Sent: Thursday, December 10, 2009 9:41 PM
> To: tcpdump-workers () lists tcpdump org
> Subject: Re: [tcpdump-workers] Libpcap performance under
> VMWare guest OSes
>
>
> On Dec 10, 2009, at 6:33 PM, Mark Bednarczyk wrote:
>
> > The debian packages are:
> >
> > ubuntu9-x86:~# dpkg-query --show libpcap0.8
> > libpcap0.8      1.0.0-1
>
> I *suspect* that means that it's libpcap 1.0.0, which means
> that *if* the kernel supports the memory-mapped interface to
> PF_PACKET sockets, libpcap will use it, which might improve
> the capture performance.  (Run "tcpdump -h" to find out the
> actual libpcap version number, and "uname -r" to get the
> kernel version number.)
>
> That's the OS running both as a native host and as a guest
> under Windows XP, right?
>
> What type of network adapters are being used on the host and
> the guest?  In particular, what drivers are being used?
>
> > deb5-x86:~# dpkg-query --show libpcap0.8
> > libpcap0.8      0.9.8-5
>
> And *that* probably means it's libpcap 0.9.8, which means
> that, unless the Debian folk added memory-mapped interface
> support, libpcap *won't* use the memory-mapped interface.-
> This is the tcpdump-workers list.
> Visit https://cod.sandelman.ca/ to unsubscribe.


-
This is the tcpdump-workers list.
Visit https://cod.sandelman.ca/ to unsubscribe.