Zied Aouini

@mark12138 CicFlowMeter do not handle large files and have some memory issues. Did you try NFStream as an alternative processing tool?

88 features which include also nDPI based labels. Moreover, you can extend it easily with Plugins as described here: https://www.nfstream.org/docs/api#nfplugin

@jxb123 or you can use NFStream framework which integrates nDPI as source of a reliable label. Github repository: https://github.com/nfstream/nfstream

@msarhan95 you can process it with NFStream. Github Repository: https://github.com/nfstream/nfstream

@Cyan95 or you can use NFStream framework which supports pcapng format. Github repository: https://github.com/nfstream/nfstream

@tsnoam @mcr @guyharris I tried building libpcap from your branch. And I followed the doc. Everything compiles well and I test it using 3 parallel processes. So I changed my...

@xpahos Thanks for the feedback. I will replace PACKET_FANOUT_LB by 0 for FLOW_HASH mode, test, and get back to you.

@xpahos checked that each root_idx is unique but the same observations. ```c set = pcap_set_fanout_linux(pcap_handle, 1, 0, root_idx) ``` The only difference with your setup is the mode. You set...

@xpahos another detail that may help reproducing is that I'm using: ```c int rv_handle = pcap_next_ex(pcap_handle, &hdr, &data); ``` to poll the received packets. But this should not affect fanout...

@xpahos I found what was wrong. And it's clearly stated in the doc. * group_id, as the name indicates, is a group of processes/threads. * FANOUT will duplicate traffic across...