Discussion:
[Ntop] ntop on raspberry pi 2 on a mirror port?
dan
9 years ago
Permalink
I'm interested in ntop and I want to try it with some light weight
hardware...

I see that there is an inexpensive license for ntopng-pro for embedded.

I basically want to mirror a switch port and plug the Raspberry Pi2 into
the mirror port and analyze that w/ DPI.

Is this a pretty straight forward setup?

Also, what kind of packet handling can I expect the Pi2 to handle? It's a
gigabit port, but the peak throughput right now is about 130Mbps aggregate.

Thanks.
dan
9 years ago
Permalink
Is ndpi multi threaded? The pi2 is a quad core. Alternatively, a
beaglebone black.
...
dan
9 years ago
Permalink
yes, but a single thread is spawn for each interface. So you won't be able
to exploit all the 4 cores for 1 mirrored interface. Same for the
beaglebone.
ah, ok. Any idea what the 900Mhz Pi CPU can handle then? What might I
need to hit ~130Mbps, or 200Mbps?
Thomas Leathley
9 years ago
Permalink
Here’s some information on Raspberry Pi NIC throughput and alternative
devices:

http://www.jeffgeerling.com/blogs/jeff-geerling/getting-gigabit-networking

Everything shares the USB 2.0 bus which has a theoretical throughput of 480
mbit/sec. So even with a gig USB NIC you’re not going to get gig
throughput.
...
dan
9 years ago
Permalink
There are similar devices like the BananaPi with Gigabit and upgraded CPU.

I'm just looking for a cheap test that gives me the 'pro' features. If I'm
limited at 100Mbps, that's ok, though less than ideal.
...
Thomas Leathley
9 years ago
Permalink
I bought an Odroid C1+ to test, and it has a gig NIC:

http://www.hardkernel.com/main/products/prdt_info.php?g_code=G143703355573

I have not thrown any network throughput tests at it yet but my first
impression is that it looks solid and runs well.
...
dan
9 years ago
Permalink
Thomas, i'd love to see some throughput results...
...
dan
9 years ago
Permalink
Luca, I have about a dozen of the Edgerouter Lite units. Can I get ntopng
pro on there?

Their built in DPI isn't very good....and it requires the router be the
source or destination to process because DPI is part of the hardware packet
processor.
...
dan
9 years ago
Permalink
...or, what other options are there for the embedded ?
...
Loading...