summaryrefslogtreecommitdiff
path: root/masscan/README
diff options
context:
space:
mode:
authorAlexandr Savca <alexandr.savca89@gmail.com>2020-11-23 12:43:41 +0200
committerAlexandr Savca <alexandr.savca89@gmail.com>2020-11-23 15:26:23 +0200
commitfaca667716347f3566959d6f46807649aa28d280 (patch)
treeadca1da60173c34da640862a5dd8e346bbfd3109 /masscan/README
parent0115ffd720738690a2f4a94bb58276847e7c10a4 (diff)
downloadcontrib-faca667716347f3566959d6f46807649aa28d280.tar.gz
contrib-faca667716347f3566959d6f46807649aa28d280.tar.xz
masscan: initial commit, v1.0.5
Diffstat (limited to 'masscan/README')
-rw-r--r--masscan/README23
1 files changed, 23 insertions, 0 deletions
diff --git a/masscan/README b/masscan/README
new file mode 100644
index 000000000..c3491bf77
--- /dev/null
+++ b/masscan/README
@@ -0,0 +1,23 @@
+README for masscan
+
+NOTES
+
+ PF_RING
+
+ To get beyond 2 million packets/second, you need an Intel 10-gbps Ethernet
+ adapter and a special driver known as "PF_RING ZC" from ntop:
+
+ http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/
+
+ Masscan doesn't need to be rebuilt in order to use PF_RING.
+ To use PF_RING, you need to build the following components:
+
+ libpfring.so (installed in /usr/lib/libpfring.so)
+ pf_ring.ko (their kernel driver)
+ ixgbe.ko (their version of the Intel 10-gbps Ethernet driver)
+
+ You don't need to build their version of libpcap.so.
+
+ When Masscan detects that an adapter is named something like zc:enp1s0
+ instead of something like enp1s0, it'll automatically switch to PF_RING ZC
+ mode.

Generated by cgit