README for masscan
NOTES
PF_RING
To get beyond 2 million packets/second, you need an Intel 10-gbps Ethernet
adapter and a special driver known as "PF_RING ZC" from ntop:
http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/
Masscan doesn't need to be rebuilt in order to use PF_RING.
To use PF_RING, you need to build the following components:
libpfring.so (installed in /usr/lib/libpfring.so)
pf_ring.ko (their kernel driver)
ixgbe.ko (their version of the Intel 10-gbps Ethernet driver)
You don't need to build their version of libpcap.so.
When Masscan detects that an adapter is named something like zc:enp1s0
instead of something like enp1s0, it'll automatically switch to PF_RING ZC
mode.
