<p dir="ltr">I want to do that because I have to write a packet inspection module sort of idps solution.<br>
We are targeting kernel space because of performance.</p>
<div class="gmail_quote">On Jan 29, 2016 12:09 AM, "Greg KH" <<a href="mailto:greg@kroah.com">greg@kroah.com</a>> wrote:<br type="attribution"><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">On Thu, Jan 28, 2016 at 11:47:36PM +0530, Tarun Batra wrote:<br>
> Hi All,<br>
><br>
> I have to write a kernel module in which I have to capture packets from 10g nic<br>
> interface and make a copy of them.<br>
<br>
Why do you want to do that?<br>
<br>
> I have two options<br>
> Either use netfilters<br>
> Either use add dev pack<br>
<br>
What do you mean by this last choice?<br>
<br>
> If any options u thing please let me know.<br>
><br>
> Should the module be multi threaded?<br>
<br>
Why would it be?<br>
<br>
> As I can't compromise with performance.<br>
><br>
> Can I bind kernel threads to specific core?<br>
<br>
Yes, but are you sure you really want to do this in the kernel? Can't<br>
you do this today already from userspace?<br>
<br>
thanks,<br>
<br>
greg k-h<br>
</blockquote></div>