erspan hardware or software only?


erspan hardware or software only?
from config guide, it look like are a iptables entry, I wonder if there is hardware acceleration under the hood?

2 replies

Userlevel 4
The SPAN and ERSPAN are hardware accelerated by using the cl-acltool. It pushes all rules (by default) that are stored under /etc/cumulus/acl/policy.d/.rules. This will capture all traffic (both data plane and control plane) which differes from just tcpdumping a swp which will only show control plane (e.g. OSPF hello pkt)
Userlevel 3
Sean Cavanaugh wrote:

The SPAN and ERSPAN are hardware accelerated by using the cl-acltool. It pushes all rules (by def...

Think this is worth mentioning in the docs, Sean?

Reply