DMCA
Comparing and Improving Current Packet Capturing Solutions based on Commodity Hardware (2010)
| Venue: | in Proceedings of the 10th Annual Conference on Internet Measurement (IMC ’10 |
| Citations: | 15 - 3 self |
BibTeX
@INPROCEEDINGS{Braun10comparingand,
author = {Lothar Braun and Er Didebulidze and Nils Kammenhuber and Georg Carle and Technische Universität München},
title = {Comparing and Improving Current Packet Capturing Solutions based on Commodity Hardware},
booktitle = {in Proceedings of the 10th Annual Conference on Internet Measurement (IMC ’10},
year = {2010}
}
Share
 |
 |
 |
 |
||
OpenURL
Abstract
Capturing network traffic with commodity hardware has become a feasible task: Advances in hardware as well as software have boosted off-the-shelf hardware to performance levels that some years ago were the domain of expensive specialpurpose hardware. However, the capturing hardware still needs to be driven by a well-performing software stack in order to minimise or avoid packet loss. Improving the capturing stack of Linux and FreeBSD has been an extensively covered research topic in the past years. Although the majority of the proposed enhancements have been backed by evaluations, these have mostly been conducted on different hardware platforms and software versions, which renders a comparative assessment of the various approaches difficult, if not impossible. This paper summarises and evaluates the performance of current packet capturing solutions based on commodity hardware. We identify bottlenecks and pitfalls within the capturing stack of FreeBSD and Linux, and give explanations for the observed effects. Based on our experiments, we provide guidelines for users on how to configure their capturing systems for optimal performance and we also give hints on debugging bad performance. Furthermore, we propose improvements to the operating system’s capturing processes that reduce packet loss, and evaluate their impact on capturing performance.
Keyphrases
commodity hardware improving current packet capturing solution packet loss various approach bad performance performance level capturing hardware software version expensive specialpurpose hardware past year off-the-shelf hardware operating system current packet research topic different hardware platform network traffic optimal performance observed effect well-performing software stack feasible task comparative assessment
