Lines Matching +full:layer +full:- +full:depth
39 as a module at run-time, run the following command as root:
40 .Bd -literal -offset indent
49 .Bd -literal -offset indent
66 .Ss Compile-time Configuration
72 .Bd -literal -offset indent
73 CFLAGS+=-DSIFTR_IPV6
80 In the IPv4-only (default) mode, standard dotted decimal notation (e.g.
83 and standard colon-separated hex notation (see RFC 4291) is used to format IPv6
85 .Ss Run-time Configuration
89 interface to export its configuration variables to user-space.
91 .Bl -tag -offset indent -width Va
104 .Bl -tag -offset indent -width Va
113 .Bl -tag -offset indent -width Va
119 .Bl -tag -offset indent -width Va
142 The fields are tab delimited key-value
144 .Bd -literal -offset indent
150 .Bl -tag -offset indent -width Va
154 .Bl -tag -offset indent -width Va
158 .Bl -tag -offset indent -width Va
163 .Bl -tag -offset indent -width Va
167 .Bl -tag -offset indent -width Va
171 .Bl -tag -offset indent -width Va
178 .Qq Compile-time Configuration
187 .Bd -literal -offset indent
194 .Bl -tag -offset indent -width Va
203 .Bl -tag -offset indent -width Va
210 .Bl -tag -offset indent -width Va
213 or colon-separated hex (IPv6 packet) notation.
215 .Bl -tag -offset indent -width Va
219 .Bl -tag -offset indent -width Va
222 or colon-separated hex (IPv6 packet) notation.
224 .Bl -tag -offset indent -width Va
228 .Bl -tag -offset indent -width Va
232 .Bl -tag -offset indent -width Va
236 .Bl -tag -offset indent -width Va
240 .Bl -tag -offset indent -width Va
245 .Bl -tag -offset indent -width Va
250 .Bl -tag -offset indent -width Va
254 .Bl -tag -offset indent -width Va
258 .Bl -tag -offset indent -width Va
264 .Bl -tag -offset indent -width Va
268 .Bl -tag -offset indent -width Va
272 .Bl -tag -offset indent -width Va
276 .Bl -tag -offset indent -width Va
283 .Bl -tag -offset indent -width Va
287 .Bl -tag -offset indent -width Va
291 .Bl -tag -offset indent -width Va
295 .Bl -tag -offset indent -width Va
299 .Bl -tag -offset indent -width Va
303 .Bl -tag -offset indent -width Va
305 The current number of unacknowledged bytes in-flight.
308 .Bl -tag -offset indent -width Va
312 .Bl -tag -offset indent -width Va
320 .Bl -tag -offset indent -width Va
333 The fields are tab delimited key-value pairs which provide statistics about
335 .Bd -literal -offset indent
342 flow_list=10.1.1.2;32291-10.1.1.3;5001,10.1.1.2;58544-10.1.1.3;5001,
346 .Bl -tag -offset indent -width Va
350 .Bl -tag -offset indent -width Va
354 .Bl -tag -offset indent -width Va
361 .Bl -tag -offset indent -width Va
368 .Bl -tag -offset indent -width Va
372 .Bl -tag -offset indent -width Va
378 .Bl -tag -offset indent -width Va
384 .Bl -tag -offset indent -width Va
389 .Bl -tag -offset indent -width Va
394 .Bl -tag -offset indent -width Va
399 .Bl -tag -offset indent -width Va
404 .Bl -tag -offset indent -width Va
408 .Bl -tag -offset indent -width Va
414 .Qq local_ip;local_port-foreign_ip;foreign_port .
422 enable/disable cycle should equate to total_tcp_pkts - total_skipped_tcp_pkts.
430 filtering points, which means it sees packets at the IP layer of the network
433 they have been processed by the TCP layer.
435 by the TCP layer.
440 .Bd -literal -offset indent
441 ----------------------------------
443 ----------------------------------
449 ----------------------------------
454 ---------
456 ---------
462 ----------------------------------
466 Layer 2 in Layer 2 out
467 ----------------------------------
468 Physical Layer
469 ----------------------------------
497 allows you to correlate and observe the cause-and-affect relationship between
552 .Bl -enum
559 .Bl -dash
620 project 2008-2009.
627 .An -nosplit
638 .Bl -dash
644 to cope with bursty network traffic, but sustained high packet-per-second
708 This is discussed in greater depth in CAIA technical report 070824A.
710 At the time of writing, there was no simple way to hook into the TCP layer
713 use of IP layer hook points means all IP
718 and processing overhead on the system for non-TCP packets as well.
719 Hooking in at the IP layer is also not ideal from the data gathering point of
722 generation BEFORE they have been processed by the TCP layer, which means we
723 cannot observe the cause-and-affect relationship between inbound events and the
727 should intercept packets after they have been processed by the TCP layer i.e.
734 tend to trigger outbound events, allowing the cause-and-effect to be observed