Setting up the monitored NIC for the Cloud Probe in a Linux system

You must configure the direct memory access (DMA) of the monitored network interface card (NIC) if you are installing the Real User Cloud Probe:

  • In a Linux system
  • With a dedicated server that receives the traffic feed

Typically, you will have to increase the receive (RX) and transfer (TX) ring buffer sizes on the NIC to accommodate a high traffic volume. You will also need to set the card to send all traffic to the CPU.

  1. Run the ifconfig  or the ip link commands to see a list of the NICs on the system.

  2. Increase the buffer settings on the ethernet card byrunning the ethtool commands:

    >ethtool -G eth<X> rx 4096
    >ethtool -G eth<X> tx 4096

    Replace eth<X> with the network interface card that is configured for the Cloud Probe, such as eth0 or eth1.

  3. Send all NIC traffic to the CPU by setting the promisc mode on the configured network interface: 
    ifconfig command

    >ifconfig eth<X> promisc

      ip link command

    >ip link set eth<X> promisc on

    Replace eth<X> with the network interface card that is configured for the Cloud Probe, such as eth0 or eth1.

Note

The Promiscuous mode is not mandatory when using Cloud Probe. For example, the promiscuous mode is not needed if the traffic you need to capture is being sent to the same system where the Cloud Probe is installed. For more information on the Cloud Probe deployment, see Cloud-Probe-deployment-use-cases.

Related topics

System-requirements-for-Cloud-Probe

Installing the Cloud Probe

 

 

Tip: For faster searching, add an asterisk to the end of your partial query. Example: cert*