Skip to contentSkip to conversation

RFC: Multi-packet read/write for packet sockets?

DISCUSSION Ben Greear 2 participants 4 messages Jan 14, 2002

lore
Share & tools
lore

Ben Greear

author
#0 lore raw

I have a performance critical application that reads packets, both UDP and Ethernet, from the kernel into user space. When there are lots of small packets, the program performs relatively poorly.... Recently, while recovering from a really abusive day of snowboarding, I started thinking about this problem, and I would like to see what you all think of a potential solution...

Basically, I want a new read method that is something like this:

int mread(int fd, char* buffer, int buffer_size, int* offsets, int offsets_size);

offsets will be an array of integers that the kernel will fill out, and offsets_size is the length of the array of offsets...

The basic idea is that under heavy load, I expect there to be multiple packets to be read by the time I get to servicing that file-descriptor. The mread call could grab multiple packets at once, packing them into the buffer. User-space code can delineate packets by looking at the offsets. Determining how many packets were read could be done by looking at the return of mread (the number of bytes read) and the offsets array. It could also be returned in another variable if desired....

The kernel knows the max number of packets that can be read based on offsets_size, as well as buffer limitations due to the size of buffer.

The mread method could be used on UDP and RAW packets at least. It would be completely worthless for stream-based sockets like TCP...

Comments welcome...

Thanks,
Ben

Signature · 3 lines
Ben Greear <[email protected]>       <Ben_Greear AT excite.com>
President of Candela Technologies Inc      http://www.candelatech.com
ScryMUD:  http://scry.wanfear.com     http://scry.wanfear.com/~greear
#1 lore raw

Use mmap() on packet sockets... it is even faster than the thing which you propose.

author
#2 lore raw
In reply to Ben Greear

Excellent... Does anyone have a snippet of code that shows how this works?

Quoted 4 lines · David S. Miller

Use mmap() on packet sockets... it is even faster than the thing which you propose.

Signature · 3 lines
Ben Greear <[email protected]>       <Ben_Greear AT excite.com>
President of Candela Technologies Inc      http://www.candelatech.com
ScryMUD:  http://scry.wanfear.com     http://scry.wanfear.com/~greear
#3 lore raw

From: Ben Greear <[email protected]>
Date: Mon, 14 Jan 2002 09:40:12 -0700

Excellent... Does anyone have a snippet of code that shows how this works?

Check the tcpdump/pcap patches on Alexey's site.