https://github.com/njcx/packetbeat8_dpdk
Packetbeat8 with DPDK
https://github.com/njcx/packetbeat8_dpdk
dpdk network-analysis packetbeat pcap
Last synced: 6 months ago
JSON representation
Packetbeat8 with DPDK
- Host: GitHub
- URL: https://github.com/njcx/packetbeat8_dpdk
- Owner: njcx
- Created: 2025-02-17T06:35:31.000Z (over 1 year ago)
- Default Branch: master
- Last Pushed: 2025-02-25T05:12:05.000Z (over 1 year ago)
- Last Synced: 2025-02-25T05:30:13.944Z (over 1 year ago)
- Topics: dpdk, network-analysis, packetbeat, pcap
- Language: Go
- Homepage:
- Size: 4.81 MB
- Stars: 2
- Watchers: 1
- Forks: 2
- Open Issues: 0
-
Metadata Files:
- Readme: README.md
- Contributing: CONTRIBUTING.md
- Support: SUPPORT_PROTOCOL.md
Awesome Lists containing this project
README
# Packetbeat
Packetbeat is an open source network packet analyzer that ships the data to
Elasticsearch. Think of it like a distributed real-time Wireshark with a lot
more analytics features.
The Packetbeat shippers sniff the traffic between your application processes,
parse on the fly protocols like HTTP, MySQL, PostgreSQL, Redis or Thrift and
correlate the messages into transactions.
For each transaction, the shipper inserts a JSON document into Elasticsearch,
where it is stored and indexed. You can then use Kibana to view key metrics and
do ad-hoc queries against the data.
To learn more about Packetbeat, check out .
## Getting started
Please follow the [getting started](https://www.elastic.co/guide/en/beats/packetbeat/current/packetbeat-installation-configuration.html)
guide from the docs.
```bash
dpdk >= DPDK 20.02.1
kernel >= 3.10.0
CentOS
# yum install -y libpcap-devel gcc gcc-c++ make meson ninja numactl-devel numactl net-tools pciutils
# yum install -y kernel-devel-$(uname -r) kernel-headers-$(uname -r)
Debian + Ubuntu
# apt install -y libpcap-dev gcc g++ make meson ninja-build libnuma-dev numactl net-tools pciutils
# apt install -y linux-headers-$(uname -r)
# wget http://fast.dpdk.org/rel/dpdk-20.11.10.tar.xz
# tar -Jxvf dpdk-20.11.10.tar.xz
# cd dpdk-stable-20.11.10 && meson build && cd build && ninja && ninja install
# export LD_LIBRARY_PATH=/usr/local/lib64:$LD_LIBRARY_PATH
# git clone git://dpdk.org/dpdk-kmods && cd dpdk-kmods/linux/igb_uio
# make
# modprobe uio && insmod igb_uio.ko
# dpdk-devbind.py -b igb_uio 0000:03:00.0(pci-addr)
# go clean -modcache && go mod tidy
# CGO_CFLAGS="-msse4.2 -fno-strict-aliasing " CGO_LDFLAGS=" -lrte_eal -lrte_mbuf -lrte_mempool -lrte_ethdev -lpcap" go build
# ./packetbeat8_dpdk --dpdk_status enable --dpdk_port 0 -c packetbeat.dpdk.yml
```
