From mboxrd@z Thu Jan 1 00:00:00 1970 Return-Path: Received: from mail-io0-f170.google.com (mail-io0-f170.google.com [209.85.223.170]) by dpdk.org (Postfix) with ESMTP id 3ED3E68CA for ; Thu, 4 May 2017 09:44:30 +0200 (CEST) Received: by mail-io0-f170.google.com with SMTP id f102so11878532ioi.2 for ; Thu, 04 May 2017 00:44:30 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=semihalf-com.20150623.gappssmtp.com; s=20150623; h=mime-version:in-reply-to:references:from:date:message-id:subject:to :cc:content-transfer-encoding; bh=0rxCS50GTYYD8WOcYjN0jxBwX1QM+wZ36SR4GX+LrCg=; b=fUjlicaXh2NGm6CrMtMjdMf4YHeuMRJW80nNi8KxOJg29P/m1ggQvGkuEwr1aC4sDf Cadl08yc74nl2jZ4tSS1WWlyBmonPS+Lz+cnnzN7a3BKmBuLs1BIEipknOH297r7A9u8 NUphpdkStyrLiU3hxTiyEd4WgZSg1XooSKirrLN60DlMjdx8ugV9N4/eXI3lhvZ/C9Db I/KdfeqQzx/o9CgFvrVsRwr8rCuSX0WOp3cXmJ3MiMzoSZB1Oxpz5b8SfXKDJwEuR1NH 9ZdDxneMrtN286mXPkUEEAd3F4vyRwpGzV3rhtEQlTJTsQIacwKM5Q9bfTYKsLVyQnx2 QN6g== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:in-reply-to:references:from:date :message-id:subject:to:cc:content-transfer-encoding; bh=0rxCS50GTYYD8WOcYjN0jxBwX1QM+wZ36SR4GX+LrCg=; b=cxPEBaE6zbky2ouNbmGfuHFHy11FQQQyizyNMAT/OYUIieXbkGYCB/g9cBw6LPNSn6 AbID21mvYVwdLFrHMHOd8yTmLO8e2fdbxR1YO0QvIcwp80b1BPdCRuskT4V58J2jtRLr 2zM78jVKgqyaf96550Xch6frvhF/IlkC3E4C/5+xJKxL6B1Z3R/e4yq8JAtrMWb7BnKP NCGmEOVKbbXrqBrUkpUyuY0I8g4vjyv3Xt31Uz7dnnLR4VD2roKAQfzmYbPnQghi0IxR l8TMVkmGRnziVShym2Ukjqq5RKqXP5UZ+uBtk73ytC9xVMhmMXLcPQl7DFvoS0D85mVk Q34Q== X-Gm-Message-State: AN3rC/6ivfijcJrYI6C8i/5pQKziJuejk4FcY+lddXgRIRdwiuKxsoZO PEC76cvDoHlvv0l4BQ93PTrLfdSH1A== X-Received: by 10.107.137.69 with SMTP id l66mr35698082iod.215.1493883870232; Thu, 04 May 2017 00:44:30 -0700 (PDT) MIME-Version: 1.0 Received: by 10.79.71.135 with HTTP; Thu, 4 May 2017 00:44:09 -0700 (PDT) In-Reply-To: References: From: Andriy Berestovskyy Date: Thu, 4 May 2017 09:44:09 +0200 Message-ID: To: "Wiles, Keith" Cc: ankit bhardwaj , "users@dpdk.org" Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: quoted-printable Subject: Re: [dpdk-users] How to generate IPSec-based traffic in pktgen ? X-BeenThere: users@dpdk.org X-Mailman-Version: 2.1.15 Precedence: list List-Id: DPDK usage discussions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 04 May 2017 07:44:31 -0000 Hey, We used pktgen to generate IPsec traffic using PCAP files. First configure kernel to encrypt packets with a mode of your choice and capture the packet with tcpdump. Then just pass the packet to pktgen with -s option. Sure it depends on your application, but it might suit the purpose... Andriy On Tue, May 2, 2017 at 10:26 PM, Wiles, Keith wrote= : > >> On May 2, 2017, at 3:24 AM, ankit bhardwaj wro= te: >> >> Hi, >> >> I want to test IPSec-based application in DPDK and pktgen is the right >> choice for the packet generation. I could figure out how to generate GRE >> packets, however, there is no proper documentation for generating >> IPSec-based packets. >> >> Is it possible to generate IPSec-based(ESP/AH) traffic in pktgen, if yes= , >> could you please tell me how to do that? > > At this time Pktgen does not support IPSec packets. The only way to use P= ktgen and test a IPSec unit is to have PKtgen generate clear text packets a= nd use two IPSec systems to receive clear text convert to IPSec Packets to = another machine the convert IPSec to clear text back to Pktgen. I hope that= is clear. > >> >> Thanks, >> Ankit Bhardwaj > > Regards, > Keith > --=20 Andriy Berestovskyy