Hi all!
I'm having an issue capturing with Nprobe and the DNA driver IGB:
1- I have purchased one network card with 4 interfaces:
0d:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network
Connection (rev 01)
0d:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network
Connection (rev 01)
0e:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network
Connection (rev 01)
0e:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network
Connection (rev 01)
2- I have compiled the igb-3.4.7-DNA module of the PF_RING-5.4.2 packet.
3- I start the pf_ring module with "transparent-mode=2" (1 and 0 too,
but none works)
When I perform the packet capture with nprobe, I can't see anything
on the output side. If I compile the module of the PF_RING_aware
directory I am able to see the out packets.
Here is the starting output:
05/Oct/2012 13:27:58 [nprobe.c:2877] WARNING: The output interfaceId
is set to 0: did you forget to use -Q perhaps ?
05/Oct/2012 13:27:58 [nprobe.c:2880] WARNING: The input interfaceId
is set to 0: did you forget to use -u perhaps ?
05/Oct/2012 13:27:58 [nprobe.c:2919] Welcome to nprobe v.6.9.5
($Revision: 2304 $) for x86_64-unknown-linux-gnu with native PF_RING
acceleration
05/Oct/2012 13:27:58 [nprobe.c:2938] Tracing enabled
05/Oct/2012 13:27:58 [nprobe.c:2976] WARNING: -n parameter is
missing. 127.0.0.1:2055 will be used.
05/Oct/2012 13:27:58 [nprobe.c:1927] Exporting flows towards
127.0.0.1:2055 using UDP
05/Oct/2012 13:27:58 [plugin.c:129] Loading plugins...
05/Oct/2012 13:27:58 [plugin.c:138] No plugins found in ./plugins
05/Oct/2012 13:27:58 [plugin.c:144] Loading plugins [.so] from
/usr/local/lib/nprobe/plugins
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libdbPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libmysqlPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/librtpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libdumpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libsmtpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libsipPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libhttpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so also exists:
skipping /usr/local/lib/nprobe/plugins/libbgpPlugin.so
05/Oct/2012 13:27:58 [dumpPlugin.c:50] Initialized dump plugin
05/Oct/2012 13:27:58 [sipPlugin.c:94] Initialized SIP plugin
05/Oct/2012 13:27:58 [dbPlugin.c:72] Initializing DB plugin
05/Oct/2012 13:27:58 [dbPlugin.c:157] Attempting to connect to
database as [127.0.0.1][nprobe][dna3_][][]
05/Oct/2012 13:27:58 [database.c:94] MySQL initialized
05/Oct/2012 13:27:58 [database.c:101] Successfully connected to MySQL
[host:dbname:user:passwd]=[127.0.0.1:::]
05/Oct/2012 13:27:58 [httpPlugin.c:271] Initialized HTTP plugin
05/Oct/2012 13:27:58 [smtpPlugin.c:48] Initialized SMTP plugin
05/Oct/2012 13:27:58 [bgpPlugin.c:377] BGP plugin is disabled
(--bgp-port has not been specified)
05/Oct/2012 13:27:58 [rtpPlugin.c:106] Initialized RTP plugin
05/Oct/2012 13:27:58 [mysqlPlugin.c:118] Initialized MySQL plugin
05/Oct/2012 13:27:58 [plugin.c:195] 8 plugin(s) loaded [8 delete][8
packet].
05/Oct/2012 13:27:58 [nprobe.c:4343] Welcome to nprobe v.6.9.5 for
x86_64-unknown-linux-gnu
05/Oct/2012 13:27:58 [nprobe.c:3766] Compiling flow templates...
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin dump
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SIP
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL DB
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:725] Enabling plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SMTP Protocol
Dissector
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin BGP Update Listener
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin RTP
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL Plugin
05/Oct/2012 13:27:58 [plugin.c:738] 1 plugin(s) enabled
05/Oct/2012 13:27:58 [database.c:206] Creating database schema...
05/Oct/2012 13:27:58 [database.c:208] Scanning templates
05/Oct/2012 13:27:58 [nprobe.c:4141] Each flow is 295 bytes long
05/Oct/2012 13:27:58 [nprobe.c:4142] The # packets per flow has been
set to 3
Error Opening file /usr/local/nprobe/GeoIPASNum.dat
05/Oct/2012 13:27:58 [util.c:295] WARNING: Unable to load AS file
/usr/local/nprobe/GeoIPASNum.dat. AS support disabled
Error Opening file /usr/local/nprobe/GeoIPASNumv6.dat
05/Oct/2012 13:27:58 [util.c:304] WARNING: Unable to load AS IPv6
file /usr/local/nprobe/GeoIPASNumv6.dat. AS IPv6 support disabled
05/Oct/2012 13:27:58 [nprobe.c:3259] Using packet capture length 1600
###################################################
# ERROR: You do not seem to have a valid DNA license for dna3 [Intel
1 Gbit igb family].
# ERROR: Please get one at http://shop.ntop.org/.
###################################################
# We're now working in demo mode with packet capture
# and transmission limited to 5 minutes
###################################################
05/Oct/2012 13:27:58 [pro/pf_ring.c:221] Successfully open PF_RING
v.5.4.2 on device dna3 [snaplen=1600]
05/Oct/2012 13:27:58 [pro/pf_ring.c:230] Using PF_RING in-kernel
accelerated packet parsing
05/Oct/2012 13:27:58 [nprobe.c:4513] The flows hash has 32768 buckets
05/Oct/2012 13:27:58 [nprobe.c:4515] Flows older than 120 seconds
will be exported
05/Oct/2012 13:27:58 [nprobe.c:4518] Flows inactive for at least 30
seconds will be exported
05/Oct/2012 13:27:58 [nprobe.c:4521] Expired flows will be checked
every 30 seconds
05/Oct/2012 13:27:58 [nprobe.c:4523] Expired flows will not be queued
for more than 30 seconds
05/Oct/2012 13:27:58 [nprobe.c:4527] Exported flows with engineType 0
and engineId 62
05/Oct/2012 13:27:58 [nprobe.c:4549] TCP TOS will be ignored and set
to 0.
05/Oct/2012 13:27:58 [nprobe.c:4554] Flows ASs will not be computed
05/Oct/2012 13:27:58 [nprobe.c:4567] After 1 flow packets are sent,
we'll delay at least 1 ms
05/Oct/2012 13:27:58 [nprobe.c:4587] Flows will be emitted in NetFlow
9 format
05/Oct/2012 13:27:58 [nprobe.c:4608] Flow input interface index is
set to 0
05/Oct/2012 13:27:58 [nprobe.c:4614] Flow output interface index is
set to 0
05/Oct/2012 13:27:58 [nprobe.c:4630] Capturing packets from interface
dna3
05/Oct/2012 13:27:58 [util.c:2206] nProbe changed user to 'nobody'
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin dump (no
template is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SIP (no template
is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL DB (no
template is using it)
05/Oct/2012 13:27:58 [plugin.c:622] Enabling plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SMTP Protocol
Dissector (no template is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin BGP Update
Listener (no template is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin RTP (no template
is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL Plugin (no
template is using it)
05/Oct/2012 13:27:58 [nprobe.c:4725] Starting 1 packet fetch thread(s)
05/Oct/2012 13:27:58 [engine.c:2511] Starting bucket dequeue thread
05/Oct/2012 13:28:30 [nprobe.c:1632] ---------------------------------
05/Oct/2012 13:28:30 [nprobe.c:1633] Average traffic: [5.445 K
pps][17 Mb/sec]
05/Oct/2012 13:28:30 [nprobe.c:1639] Current traffic: [5.445 K
pps][17 Mb/sec]
05/Oct/2012 13:28:30 [nprobe.c:1644] Current flow export rate: [32.0
flows/sec]
05/Oct/2012 13:28:30 [nprobe.c:1647] Flow drops: [export queue too
long=0][too many flows=0]
05/Oct/2012 13:28:30 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %]
05/Oct/2012 13:28:30 [nprobe.c:1660] Flow Buckets:
[active=3788][allocated=3788][toBeExported=0][frags=0]
05/Oct/2012 13:28:30 [nprobe.c:1494] Processed packets: 174257 (max
bucket search: 38)
05/Oct/2012 13:28:30 [nprobe.c:1497] Flow export stats: [1249818
bytes][8297 pkts][2048 flows]
05/Oct/2012 13:28:30 [nprobe.c:1506] Flow drop stats: [0 bytes][0
pkts][0 flows]
05/Oct/2012 13:28:30 [nprobe.c:1511] Total flow stats: [1249818
bytes][8297 pkts][2048 flows]
05/Oct/2012 13:28:30 [pro/pf_ring.c:75] Packet stats (PF_RING):
174257/0 pkts rcvd/dropped
05/Oct/2012 13:29:00 [nprobe.c:1632] ---------------------------------
05/Oct/2012 13:29:00 [nprobe.c:1633] Average traffic: [5.673 K
pps][19 Mb/sec]
05/Oct/2012 13:29:00 [nprobe.c:1639] Current traffic: [5.916 K
pps][21 Mb/sec]
05/Oct/2012 13:29:00 [nprobe.c:1644] Current flow export rate: [135.6
flows/sec]
05/Oct/2012 13:29:00 [nprobe.c:1647] Flow drops: [export queue too
long=0][too many flows=0]
05/Oct/2012 13:29:00 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %]
05/Oct/2012 13:29:00 [nprobe.c:1660] Flow Buckets:
[active=3813][allocated=3813][toBeExported=0][frags=0]
05/Oct/2012 13:29:00 [nprobe.c:1494] Processed packets: 351748 (max
bucket search: 42)
05/Oct/2012 13:29:00 [nprobe.c:1497] Flow export stats: [17326831
bytes][70215 pkts][10182 flows]
05/Oct/2012 13:29:00 [nprobe.c:1506] Flow drop stats: [0 bytes][0
pkts][0 flows]
05/Oct/2012 13:29:00 [nprobe.c:1511] Total flow stats: [17326831
bytes][70215 pkts][10182 flows]
05/Oct/2012 13:29:00 [nprobe.c:1535] ---------------------------------
05/Oct/2012 13:29:00 [nprobe.c:1536] Decode ticks: 610.34
ticks/pkt [1.88 %]
05/Oct/2012 13:29:00 [nprobe.c:1541] Pkt Processing w/o Flow
Creation: 32431.03 ticks/pkt [96.61 %]
05/Oct/2012 13:29:00 [nprobe.c:1546] Pkt Processing with Flow
Creation: 28394.09 ticks/pkt [1.50 %]
05/Oct/2012 13:29:00 [nprobe.c:1551] Bucket Allocation: 7043.20
ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1555] Bucket Malloc: 4285.31 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1559] Bucket Export: 1314003.38 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1563] Bucket Purge: 2301.61 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1566] Total ticks: 32417.86
ticks/pkt
05/Oct/2012 13:29:00 [nprobe.c:1568] ---------------------------------
05/Oct/2012 13:29:00 [pro/pf_ring.c:75] Packet stats (PF_RING):
351749/0 pkts rcvd/dropped
05/Oct/2012 13:29:30 [nprobe.c:1632] ---------------------------------
Thanks in advance,
Iker
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
