From mboxrd@z Thu Jan 1 00:00:00 1970 From: Matthew Hall Subject: Re: [PKTGEN] dumb question: how to start packet TX and set the payload Date: Thu, 21 Jan 2016 15:09:16 -0500 Message-ID: <20160121200916.GB11016@mhcomputing.net> References: <56A07787.2040807@mhcomputing.net> <20160121190037.GB10170@mhcomputing.net> <88FD4A1B-A860-4488-96E0-28D6C544204B@intel.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Cc: "dev@dpdk.org" To: "Wiles, Keith" Return-path: Received: from mail.mhcomputing.net (master.mhcomputing.net [74.208.228.170]) by dpdk.org (Postfix) with ESMTP id 205398E65 for ; Thu, 21 Jan 2016 21:09:17 +0100 (CET) Content-Disposition: inline In-Reply-To: <88FD4A1B-A860-4488-96E0-28D6C544204B@intel.com> List-Id: patches and discussions about DPDK List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , Errors-To: dev-bounces@dpdk.org Sender: "dev" On Thu, Jan 21, 2016 at 07:44:21PM +0000, Wiles, Keith wrote: > What type of data do you want to add to the packets? Now it builds > IPv4/UDP/TCP packets, do you need to replace UDP or TCP or just add more > protocol layers? I perform content inspection of various types: IPv4 - supported IPv6 - supported TCP - supported UDP - supported DNS - need custom binary payload sFlow - need custom binary payload Netflow - need custom sequence (supported) and custom binary payload UDP Syslog - need custom ASCII payload (binary would of course work) TCP Syslog - need custom ASCII payload (probably impossible w/ this tool as a three-way handshake is needed for me to begin receiving in the app, which is among other things a high performance Syslog digester, but UDP is enough for now) Because it's a security app I have to model things like "99% boring, 1% interesting" as packets which raise alerts cost more resources than packets which do not. Matthew.