[Bro] dpdk

[Michael Shirk]

DPDK enable apps are apparently something that can be built on FreeBSD,
just need the port as recommended by Intel.

I have not been able to play with this, but it would be nice to have
options in addition to netmap for fast packet acquisition on FreeBSD.



--
Michael Shirk
Daemon Security, Inc.
http://www.daemon-security.com

On Apr 10, 2017 5:28 AM, "Jan Grashöfer" <jan.grashoefer at gmail.com> wrote:

> Hi Ed,
>
> thanks a lot for your detailed explanation!
>
> > I believe there would be some benefits in the ability to run high-speed
> > packet capture in VMs or Containers that are hosted on a cloud management
> > system (CMS). The world of NFV and service function chaining (which
> > encompasses IDSs such as Bro) often relies on DPDK applications.
>
> With virtualization in mind, using DPDK for packet acquisition seems to
> make sense.
>
> > I don't know that these benefits are enough to justify the amount of
> > development work it would take to implement and maintain a DPDK packet
> > acquisition plugin. Just throwing out an answer to the question. :-)
>
> At least it is worth a POC I think :)
>
> Jan
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170410/beeef30b/attachment.html