Are you an EPFL student looking for a semester project?
Work with us on data science and visualisation projects, and deploy your project as an app on top of Graph Search.
Concept
Netsniff-ng
Summary
netsniff-ng is a free Linux network analyzer and networking toolkit originally written by Daniel Borkmann. Its gain of performance is reached by zero-copy mechanisms for network packets (RX_RING, TX_RING), so that the Linux kernel does not need to copy packets from kernel space to user space via system calls such as recvmsg(). libpcap, starting with release 1.0.0, also supports the zero-copy mechanism on Linux for capturing (RX_RING), so programs using libpcap also use that mechanism on Linux.
netsniff-ng was initially created as a network sniffer with support of the Linux kernel packet-mmap interface for network packets, but later on, more tools have been added to make it a useful toolkit such as the iproute2 suite, for instance. Through the kernel's zero-copy interface, efficient packet processing can be reached even on commodity hardware. For instance, Gigabit Ethernet wire-speed has been reached with netsniff-ng's trafgen. The netsniff-ng toolkit does not depend on the libpcap library. Moreover, no special operating system patches are needed to run the toolkit. netsniff-ng is free software and has been released under the terms of the GNU General Public License version 2.
The toolkit currently consists of a network analyzer, packet capturer and replayer, a wire-rate traffic generator, an encrypted multiuser IP tunnel, a Berkeley Packet Filter compiler, networking statistic tools, an autonomous system trace route and more:
netsniff-ng, a zero-copy analyzer, packet capturer and replayer, itself supporting the pcap file format
trafgen, a zero-copy wire-rate traffic generator
mausezahn, a packet generator and analyzer for HW/SW appliances with a Cisco-CLI
bpfc, a Berkeley Packet Filter compiler
ifpps, a top-like kernel networking statistics tool
flowtop, a top-like netfilter connection tracking tool with Geo-IP information
curvetun, a lightweight multiuser IP tunnel based on elliptic-curve cryptography
astraceroute, an autonomous system trace route utility with Geo-IP information
Distribution specific packages are available for all major operating system distributions such as Debian or Fedora Linux.
Official source
About this result
This page is automatically generated and may contain information that is not correct, complete, up-to-date, or relevant to your search query. The same applies to every other page on this website. Please make sure to verify the information with EPFL's official sources.