From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <mhall@mhcomputing.net>
Received: from mail.mhcomputing.net (master.mhcomputing.net [74.208.46.186])
 by dpdk.org (Postfix) with ESMTP id 96CA2B64F
 for <dev@dpdk.org>; Tue, 17 Feb 2015 01:58:35 +0100 (CET)
Received: by mail.mhcomputing.net (Postfix, from userid 1000)
 id 6484580C005; Mon, 16 Feb 2015 16:58:05 -0800 (PST)
Date: Mon, 16 Feb 2015 16:58:05 -0800
From: Matthew Hall <mhall@mhcomputing.net>
To: harshavardhan Reddy <hvreddy1110@gmail.com>
Message-ID: <20150217005805.GA30617@mhcomputing.net>
References: <CAERxyUXBd8=r9e8-LOkcdG_NgRKK3pbgmi_u4whNQJudA9gXDg@mail.gmail.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <CAERxyUXBd8=r9e8-LOkcdG_NgRKK3pbgmi_u4whNQJudA9gXDg@mail.gmail.com>
User-Agent: Mutt/1.5.23 (2014-03-12)
Cc: dev@dpdk.org
Subject: Re: [dpdk-dev] Intel DPDK support for ntop DPI
X-BeenThere: dev@dpdk.org
X-Mailman-Version: 2.1.15
Precedence: list
List-Id: patches and discussions about DPDK <dev.dpdk.org>
List-Unsubscribe: <http://dpdk.org/ml/options/dev>,
 <mailto:dev-request@dpdk.org?subject=unsubscribe>
List-Archive: <http://dpdk.org/ml/archives/dev/>
List-Post: <mailto:dev@dpdk.org>
List-Help: <mailto:dev-request@dpdk.org?subject=help>
List-Subscribe: <http://dpdk.org/ml/listinfo/dev>,
 <mailto:dev-request@dpdk.org?subject=subscribe>
X-List-Received-Date: Tue, 17 Feb 2015 00:58:35 -0000

I did some research on this previously before concluding NDPI wouldn't help me 
much with my own particular application.

Just for running NDPI DPDK is not strictly needed, as NDPI is normally 
read-only so something like PF_RING would work in default ntop / ndpi. If 
you're trying to use NDPI in a read-write application then you'd need to make 
the integration yourself.

However the much harder part than just the integration would be tracking 
flow-starts for TCP and UDP sockets to feed to NDPI. From what I found NDPI by 
itself does not appear to offer connection tracking. It has to be implemented 
separately.

My advice: carefully research how ntop calls ndpi in their code using cscope. 
Because the ndpi documentation about how to use all the functions is kind of 
bad and not so clear. It took quite some hours before I understood it wasn't 
going to help with what I was coding in my application.

Matthew.

On Mon, Feb 16, 2015 at 04:22:25AM -0800, harshavardhan Reddy wrote:
> Hi All,
> 
> Is ntop DPI integration available for Intel DPDK..?
> 
> I could see only Propretory qosmos ixEngine integrated with DPDK and
> Windriver with its own DPI.
> 
> But not found any info about nDPI integration with DPDK.
> 
> 
> Thank You,
> 
> Regards,
> HVR