24 lines
774 B
Plaintext
24 lines
774 B
Plaintext
README for masscan
|
|
|
|
NOTES
|
|
|
|
PF_RING
|
|
|
|
To get beyond 2 million packets/second, you need an Intel 10-gbps Ethernet
|
|
adapter and a special driver known as "PF_RING ZC" from ntop:
|
|
|
|
http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/
|
|
|
|
Masscan doesn't need to be rebuilt in order to use PF_RING.
|
|
To use PF_RING, you need to build the following components:
|
|
|
|
libpfring.so (installed in /usr/lib/libpfring.so)
|
|
pf_ring.ko (their kernel driver)
|
|
ixgbe.ko (their version of the Intel 10-gbps Ethernet driver)
|
|
|
|
You don't need to build their version of libpcap.so.
|
|
|
|
When Masscan detects that an adapter is named something like zc:enp1s0
|
|
instead of something like enp1s0, it'll automatically switch to PF_RING ZC
|
|
mode.
|