Running Zeek with Napatech SmartNICs

Running Open-Source Libraries and Applications with Napatech SmartNICs

Platform
Napatech SmartNIC
Content Type
Application Note
Capture Software Version
Link™ Capture Software 12.11

Use the load distribution feature of Napatech SmartNICs to improve performance of Zeek.

About this task

This describes a configuration example to use the load distribution feature of Napatech SmartNICs which improves performance of Zeek.

Procedure

  1. Follow Napatech SmartNIC Configuration to configure Napatech SmartNICs.
  2. Edit the /opt/napatech3/etc/node.cfg file. Add Napatech interfaces between nt3g0 and nt3g15. Each of your worker nodes must be pinned to a target CPU core using the pin_cpus parameter. This is what worker nodes should look like using Napatech interfaces and CPU pinning.
    ...
    #
    [worker-1]
    type=worker
    host=localhost
    interface=nt3g0
    pin_cpus=0
    #
    [worker-2]
    type=worker
    host=localhost
    interface=nt3g1
    pin_cpus=1
    ...
    #
    [worker-15]
    type=worker
    host=localhost
    interface=nt3g14
    pin_cpus=14
    #
    [worker-16]
    type=worker
    host=localhost
    interface=nt3g15
    pin_cpus=15
    
  3. Run deploy in the ZeekControl shell, after the Zeek configuration file is modified.
    [ZeekControl] > deploy
  4. Start the monitoring and profiling tools for performance monitoring. See SmartNIC Performance Monitoring.