dpdk 抓包
dump DOC
需要修改源代码
- The
dpdk-pdump
tool can only be used in conjunction with a primary application which has the packet capture framework initialized already. In dpdk, only thetestpmd
is modified to initialize packet capture framework, other applications remain untouched. So, if thedpdk-pdump
tool has to be used with any application other than the testpmd, user needs to explicitly modify that application to call packet capture framework initialization code. Referapp/test-pmd/testpmd.c
code to see how this is done. - The
dpdk-pdump
tool depends on DPDK pcap PMD, so the system should have libpcap development files installed and the pcap PMD not disabled in the build. - The
dpdk-pdump
tool runs as a DPDK secondary process. It exits when the primary application exits. - 代码: test-pmd/testpmd.c
Prepare
yum install -y libpcap.x86_64 libpcap-devel.x86_64
dpdk-dumpcap
VS older dpdk-pdump
DPDK packet capture libraries and tools
REF:
video SF20V - 04 Improving packet capture in the DPDK (Stephen Hemminger)
Analyzing DPDK applications with eBPF
wireshark dumpcap(1) Manual Page