-
CMake Error at CMakeLists.txt:33 (message):
Could not find prerequisite package 'Readline'
-
Hi, sorry if this has been reported before, but I can't get easybutton-singlehost to compile moloch-capture:
root@auditor1 ~/t/g/moloch# ./easybutton-singlehost.sh
Looking for java /usr/bin/java
Use…
-
Hi:
I have downloaded 4.0.4 with the latest PF_RING changes from the repo on configure and configure.a (patch #88 )
My goal is to compile and tcpbridge using the libpcap included in the PF_RING dist…
-
I try to get PF_RING working yet.
It fails when started with the configuration:
```
[{interface,"eth1"},{cluster_id,1},{filter,"tcp"}
```
with error message:
sudo: sorry, you are not allowed to …
-
Output of build on 13.10 with gcc (Ubuntu/Linaro 4.8.1-10ubuntu9) 4.8.1
make
gcc -g -ggdb -fno-omit-frame-pointer -rdynamic -I. -Wall -O3 -Wno-format -c src/crypto-base64.c -o tmp/crypto-base64.o
gcc…
-
when building on a lin1x, pfring?
I get
make[1]: Entering directory `/root/dpmi/libcap_utils/build'
CC src/libcap_utils_07_la-address.lo
CC src/libcap_utils_07_la-error.lo
CC src/fo…
-
由于目前pfring只支持8192字节大小的数据包(在我测试机器上面,一旦设置超过此阈值,机器会崩溃),所以为了用户使用兼容pcap库的pfring,不至于机器崩溃,暂时设置为8192。希望用户注意此问题
-
1)对于外网实际应用,pcap抓包 pk raw socket抓包,结果如下:
pcap抓包后,复制过去的请求比在线少0.121%(一次测试);而raw socket方式抓包,却比在线多出0.25%。
注意:1)在tcpcopy中,pcap抓包是在数据链路层抓包,而raw socket抓包是在ip层抓包 2)我们内网的应用,经过测试,没有发现多出请求的问题
-
可以试验一下pf_ring或者netmap,查看抓包的丢失率
-
为什么我的防火墙 这样iptables -I OUTPUT -p tcp --sport 80 -j QUEUE后
从外面telnet 80端口 不通?
lsmod |grep ip_queue
ip_queue 44649 0
uname -r
2.6.18-308.el5