From owner-freebsd-net@FreeBSD.ORG Sun Aug 25 11:38:49 2013 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1 with cipher ADH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTP id 51561F91 for ; Sun, 25 Aug 2013 11:38:49 +0000 (UTC) (envelope-from carlopmart@gmail.com) Received: from mail-wg0-x22f.google.com (mail-wg0-x22f.google.com [IPv6:2a00:1450:400c:c00::22f]) (using TLSv1 with cipher ECDHE-RSA-RC4-SHA (128/128 bits)) (No client certificate requested) by mx1.freebsd.org (Postfix) with ESMTPS id DD2DC28F7 for ; Sun, 25 Aug 2013 11:38:48 +0000 (UTC) Received: by mail-wg0-f47.google.com with SMTP id j13so1891327wgh.14 for ; Sun, 25 Aug 2013 04:38:46 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:subject :content-type:content-transfer-encoding; bh=/bJ6qMSD1TB8cvoForhTmwhJHf2wkELF2nZqu1RaN8w=; b=N1fdSNU/gyqxHYxIkjhURFyuVOVsZb0+BXSXEbUucRNni66CQe62TaGWSLT9selsb1 G4Rw46VSrD2HBPW8L1zguevc6SJiQS2zAJYE9tHG9yt6KMJejr0Re+/B5/i1lJz1cDOc 84bualg95H50T0CCEFB5lb9Fly3I8ZRdOLkKbOmswfj+6WjQLgaFbd3EXoWArbo+NLg1 +ZSH1dKrWoQRckrtSG7nqCJXPz4fdF0KtWaNHMY468znXHt3y42DaZUt7KqmxAIIdMhl ebEBWadrynZh89kWDXUIxsdFPp0J47h6qst3mnlmcavn3nlXJLhnno382OH27U7gJwx5 VgZw== X-Received: by 10.194.75.165 with SMTP id d5mr6068163wjw.18.1377430726285; Sun, 25 Aug 2013 04:38:46 -0700 (PDT) Received: from [172.17.35.3] (6.Red-79-156-165.staticIP.rima-tde.net. [79.156.165.6]) by mx.google.com with ESMTPSA id ei6sm10199233wid.11.1969.12.31.16.00.00 (version=TLSv1 cipher=ECDHE-RSA-RC4-SHA bits=128/128); Sun, 25 Aug 2013 04:38:45 -0700 (PDT) Message-ID: <5219ECBD.4040209@gmail.com> Date: Sun, 25 Aug 2013 11:38:37 +0000 From: carlopmart User-Agent: Mozilla/5.0 (X11; Linux i686; rv:17.0) Gecko/17.0 Thunderbird/17.0 MIME-Version: 1.0 To: freebsd-net@freebsd.org Subject: Options to monitor/sniff network traffic under a vm Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.14 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sun, 25 Aug 2013 11:38:49 -0000 Hi all, I need to monitor/sniff network traffic for three subnets (1 GiB nets) and I need to do this using a virtual guest under an ESXi 5 host (yes, it is a "handicap"). I would like to use FreeBSD 8.4 + netmap, but I see some problems: a) How can I avoid sharing interrupts for nics interfaces?? This vm needs to use 6 nic interfaces. b) Which is best: em or ixgb emulated drivers?? c) Is it a good idea to enable polling in these nics?? Thanks.