ab6dd0f103
unmaintained: aircrack-ng unmaintained: alsaequal unmaintained: arp-scan unmaintained: arpspoof unmaintained: asleap unmaintained: aspell-ro unmaintained: aspell-ru unmaintained: binwalk unmaintained: bully unmaintained: caps unmaintained: capstone unmaintained: cowpatty unmaintained: cramfs-tools unmaintained: dhcp-spoof unmaintained: gmtp unmaintained: hashcat-utils unmaintained: hashcat unmaintained: hashid unmaintained: hcxdumptool unmaintained: hcxtools unmaintained: hcxtools3 unmaintained: hwloc unmaintained: lft unmaintained: libewf-legacy unmaintained: libmtp unmaintained: libxcrypt2.4 unmaintained: macchanger unmaintained: masscan unmaintained: mdk3 unmaintained: mdk4 unmaintained: ncrack unmaintained: p5-file-remove unmaintained: p5-gtk2-trayicon unmaintained: p5-module-install unmaintained: p5-module-scandeps unmaintained: p5-net-pcap unmaintained: p5-net-rawip unmaintained: p5-netpacket unmaintained: p5-string-crc32 unmaintained: p5-text-asciitable unmaintained: p5-yaml-tiny unmaintained: padbuster unmaintained: perltidy unmaintained: pixiewps unmaintained: polipo unmaintained: proxychains-ng unmaintained: qt5-styleplugins unmaintained: qt5ct unmaintained: radare2 unmaintained: sasquatch unmaintained: scapy unmaintained: sleuthkit unmaintained: sslsplit unmaintained: thc-ipv6 unmaintained: tor unmaintained: torsocks unmaintained: wordlistctl unmaintained: xautolock unmaintained: xxhash unmaintained: yersinia |
||
|---|---|---|
| .. | ||
| .footprint | ||
| .signature | ||
| Pkgfile | ||
| README | ||
README for masscan
NOTES
PF_RING
To get beyond 2 million packets/second, you need an Intel 10-gbps Ethernet
adapter and a special driver known as "PF_RING ZC" from ntop:
http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/
Masscan doesn't need to be rebuilt in order to use PF_RING.
To use PF_RING, you need to build the following components:
libpfring.so (installed in /usr/lib/libpfring.so)
pf_ring.ko (their kernel driver)
ixgbe.ko (their version of the Intel 10-gbps Ethernet driver)
You don't need to build their version of libpcap.so.
When Masscan detects that an adapter is named something like zc:enp1s0
instead of something like enp1s0, it'll automatically switch to PF_RING ZC
mode.