Lines Matching +full:system +full:- +full:on +full:- +full:module
25 .\" HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT
39 as a module at run-time, run the following command as root:
40 .Bd -literal -offset indent
46 as a module at boot time, add the following line into the
49 .Bd -literal -offset indent
62 kernel module logs a range of statistics on active TCP connections to
65 state, aimed at system administrators, developers and researchers.
66 .Ss Compile-time Configuration
72 .Bd -literal -offset indent
73 CFLAGS+=-DSIFTR_IPV6
80 In the IPv4-only (default) mode, standard dotted decimal notation (e.g.
83 and standard colon-separated hex notation (see RFC 4291) is used to format IPv6
85 .Ss Run-time Configuration
89 interface to export its configuration variables to user-space.
91 .Bl -tag -offset indent -width Va
93 controls whether the module performs its
95 By default, the value is set to 0, which means the module
97 Having the module loaded with
99 set to 0 will have no impact on the performance of the network stack, as the
104 .Bl -tag -offset indent -width Va
108 By default, the value is set to 1, which means the module will log a message for
111 any time, even while the module is enabled.
113 .Bl -tag -offset indent -width Va
115 controls the path to the file that the module writes its log messages to.
117 The path can be changed at any time, even while the module is enabled.
119 .Bl -tag -offset indent -width Va
121 controls on which source or destination port
139 The first type of log message is written to the file when the module is
141 The text below shows an example module enable log.
142 The fields are tab delimited key-value
143 pairs which describe some basic information about the system.
144 .Bd -literal -offset indent
150 .Bl -tag -offset indent -width Va
152 time at which the module was enabled, in seconds since the UNIX epoch.
154 .Bl -tag -offset indent -width Va
156 time at which the module was enabled, in microseconds since enable_time_secs.
158 .Bl -tag -offset indent -width Va
163 .Bl -tag -offset indent -width Va
165 operating system name.
167 .Bl -tag -offset indent -width Va
169 operating system version.
171 .Bl -tag -offset indent -width Va
178 .Qq Compile-time Configuration
187 .Bd -literal -offset indent
194 .Bl -tag -offset indent -width Va
203 .Bl -tag -offset indent -width Va
210 .Bl -tag -offset indent -width Va
213 or colon-separated hex (IPv6 packet) notation.
215 .Bl -tag -offset indent -width Va
219 .Bl -tag -offset indent -width Va
222 or colon-separated hex (IPv6 packet) notation.
224 .Bl -tag -offset indent -width Va
228 .Bl -tag -offset indent -width Va
232 .Bl -tag -offset indent -width Va
236 .Bl -tag -offset indent -width Va
240 .Bl -tag -offset indent -width Va
245 .Bl -tag -offset indent -width Va
250 .Bl -tag -offset indent -width Va
254 .Bl -tag -offset indent -width Va
258 .Bl -tag -offset indent -width Va
264 .Bl -tag -offset indent -width Va
268 .Bl -tag -offset indent -width Va
272 .Bl -tag -offset indent -width Va
276 .Bl -tag -offset indent -width Va
283 .Bl -tag -offset indent -width Va
287 .Bl -tag -offset indent -width Va
291 .Bl -tag -offset indent -width Va
295 .Bl -tag -offset indent -width Va
299 .Bl -tag -offset indent -width Va
303 .Bl -tag -offset indent -width Va
305 The current number of unacknowledged bytes in-flight.
308 .Bl -tag -offset indent -width Va
312 .Bl -tag -offset indent -width Va
320 .Bl -tag -offset indent -width Va
330 The third type of log message is written to the file when the module is disabled
332 The text below shows an example module disable log.
333 The fields are tab delimited key-value pairs which provide statistics about
334 operations since the module was most recently enabled.
335 .Bd -literal -offset indent
342 flow_list=10.1.1.2;32291-10.1.1.3;5001,10.1.1.2;58544-10.1.1.3;5001,
346 .Bl -tag -offset indent -width Va
348 Time at which the module was disabled, in seconds since the UNIX epoch.
350 .Bl -tag -offset indent -width Va
352 Time at which the module was disabled, in microseconds since disable_time_secs.
354 .Bl -tag -offset indent -width Va
361 .Bl -tag -offset indent -width Va
368 .Bl -tag -offset indent -width Va
372 .Bl -tag -offset indent -width Va
378 .Bl -tag -offset indent -width Va
384 .Bl -tag -offset indent -width Va
389 .Bl -tag -offset indent -width Va
394 .Bl -tag -offset indent -width Va
399 .Bl -tag -offset indent -width Va
404 .Bl -tag -offset indent -width Va
408 .Bl -tag -offset indent -width Va
411 the module was loaded.
414 .Qq local_ip;local_port-foreign_ip;foreign_port .
421 The total number of data log messages found in the log file for a module
422 enable/disable cycle should equate to total_tcp_pkts - total_skipped_tcp_pkts.
440 .Bd -literal -offset indent
441 ----------------------------------
443 ----------------------------------
449 ----------------------------------
454 ---------
456 ---------
462 ----------------------------------
467 ----------------------------------
469 ----------------------------------
484 the system to trigger a dump of the state of the TCP control block for that
487 state as frequently as flow packets enter/leave the system.
497 allows you to correlate and observe the cause-and-affect relationship between
498 what you see on the wire (captured using a tool like
506 Use of either tool on its own will not be able to provide all of the necessary
550 The behaviour of a log file path change whilst the module is enabled is as
552 .Bl -enum
559 .Bl -dash
577 To enable the module's operations, run the following command as root:
606 was first released in 2007 by Lawrence Stewart and James Healy whilst working on
615 Work on
620 project 2008-2009.
627 .An -nosplit
638 .Bl -dash
644 to cope with bursty network traffic, but sustained high packet-per-second
677 The module does not detect deletion of the log file path.
680 is deleted whilst the module is set to use the file.
691 However, we suspect (based on analogies with other hash table performance data)
692 that the hash table look up performance (and therefore the module's packet
694 unique flows handled in a module enable/disable cycle approaches and surpasses
697 There is no garbage collection performed on the flow hash table.
718 and processing overhead on the system for non-TCP packets as well.
723 cannot observe the cause-and-affect relationship between inbound events and the
734 tend to trigger outbound events, allowing the cause-and-effect to be observed
735 indirectly by capturing the state on outbound events as well.