Re: [dpdk-dev] Intel DPDK support for ntop DPI

[Matthew Hall <mhall@mhcomputing.net>]

I did some research on this previously before concluding NDPI wouldn't help me 
much with my own particular application.

Just for running NDPI DPDK is not strictly needed, as NDPI is normally 
read-only so something like PF_RING would work in default ntop / ndpi. If 
you're trying to use NDPI in a read-write application then you'd need to make 
the integration yourself.

However the much harder part than just the integration would be tracking 
flow-starts for TCP and UDP sockets to feed to NDPI. From what I found NDPI by 
itself does not appear to offer connection tracking. It has to be implemented 
separately.

My advice: carefully research how ntop calls ndpi in their code using cscope. 
Because the ndpi documentation about how to use all the functions is kind of 
bad and not so clear. It took quite some hours before I understood it wasn't 
going to help with what I was coding in my application.

Matthew.

On Mon, Feb 16, 2015 at 04:22:25AM -0800, harshavardhan Reddy wrote:
> Hi All,
> 
> Is ntop DPI integration available for Intel DPDK..?
> 
> I could see only Propretory qosmos ixEngine integrated with DPDK and
> Windriver with its own DPI.
> 
> But not found any info about nDPI integration with DPDK.
> 
> 
> Thank You,
> 
> Regards,
> HVR