Iker the problem is not on DNA I believe. Transaprent mode is useless with DNA. How many queues do you have with igb? Try ethtool -S dnaX to see that
Luca On Oct 5, 2012, at 4:00 PM, Iker Vázquez <[email protected]> wrote: > Thanks for the reply. > > Unfortunatelly I not be able to download anything on the server until the > next week, because I only have ssh access and no Internet available on it. > Maybe I can do anyting else? I try too compiling the module igb-3.2.10-DNA > with the same result. > > Best regards, > Iker > > El 05/10/2012 15:43, Luca Deri escribió: >> Iker, >> 1. it loooks that you enabled something on the nprobe code (e.g. performance >> tracings). >> >> 2. nProbe has exported flows >> 05/Oct/2012 13:29:00 [nprobe.c:1497] Flow export stats: [17326831 >> bytes][70215 pkts][10182 flows] >> >> 3. this 42 does not look too nice >> 05/Oct/2012 13:29:00 [nprobe.c:1494] Processed packets: 351748 (max bucket >> search: 42) >> >> Can you please use a precompiled package at http://packages.ntop.org and see >> if they work? >> >> Regards Luca >> >> On 10/05/2012 03:22 PM, Iker Vázquez wrote: >>> Hi all! >>> >>> I'm having an issue capturing with Nprobe and the DNA driver IGB: >>> >>> 1- I have purchased one network card with 4 interfaces: >>> >>> 0d:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network >>> Connection (rev 01) >>> 0d:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network >>> Connection (rev 01) >>> 0e:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network >>> Connection (rev 01) >>> 0e:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network >>> Connection (rev 01) >>> >>> 2- I have compiled the igb-3.4.7-DNA module of the PF_RING-5.4.2 packet. >>> >>> 3- I start the pf_ring module with "transparent-mode=2" (1 and 0 too, but >>> none works) >>> >>> When I perform the packet capture with nprobe, I can't see anything on the >>> output side. If I compile the module of the PF_RING_aware directory I am >>> able to see the out packets. >>> >>> Here is the starting output: >>> >>> 05/Oct/2012 13:27:58 [nprobe.c:2877] WARNING: The output interfaceId is set >>> to 0: did you forget to use -Q perhaps ? >>> 05/Oct/2012 13:27:58 [nprobe.c:2880] WARNING: The input interfaceId is set >>> to 0: did you forget to use -u perhaps ? >>> 05/Oct/2012 13:27:58 [nprobe.c:2919] Welcome to nprobe v.6.9.5 ($Revision: >>> 2304 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration >>> 05/Oct/2012 13:27:58 [nprobe.c:2938] Tracing enabled >>> 05/Oct/2012 13:27:58 [nprobe.c:2976] WARNING: -n parameter is missing. >>> 127.0.0.1:2055 will be used. >>> 05/Oct/2012 13:27:58 [nprobe.c:1927] Exporting flows towards 127.0.0.1:2055 >>> using UDP >>> 05/Oct/2012 13:27:58 [plugin.c:129] Loading plugins... >>> 05/Oct/2012 13:27:58 [plugin.c:138] No plugins found in ./plugins >>> 05/Oct/2012 13:27:58 [plugin.c:144] Loading plugins [.so] from >>> /usr/local/lib/nprobe/plugins >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libdbPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libmysqlPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/librtpPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libdumpPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libsmtpPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libsipPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libhttpPlugin.so >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:478] Loaded >>> '/usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so' >>> 05/Oct/2012 13:27:58 [plugin.c:168] Plugin >>> /usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so also exists: skipping >>> /usr/local/lib/nprobe/plugins/libbgpPlugin.so >>> 05/Oct/2012 13:27:58 [dumpPlugin.c:50] Initialized dump plugin >>> 05/Oct/2012 13:27:58 [sipPlugin.c:94] Initialized SIP plugin >>> 05/Oct/2012 13:27:58 [dbPlugin.c:72] Initializing DB plugin >>> 05/Oct/2012 13:27:58 [dbPlugin.c:157] Attempting to connect to database as >>> [127.0.0.1][nprobe][dna3_][][] >>> 05/Oct/2012 13:27:58 [database.c:94] MySQL initialized >>> 05/Oct/2012 13:27:58 [database.c:101] Successfully connected to MySQL >>> [host:dbname:user:passwd]=[127.0.0.1:::] >>> 05/Oct/2012 13:27:58 [httpPlugin.c:271] Initialized HTTP plugin >>> 05/Oct/2012 13:27:58 [smtpPlugin.c:48] Initialized SMTP plugin >>> 05/Oct/2012 13:27:58 [bgpPlugin.c:377] BGP plugin is disabled (--bgp-port >>> has not been specified) >>> 05/Oct/2012 13:27:58 [rtpPlugin.c:106] Initialized RTP plugin >>> 05/Oct/2012 13:27:58 [mysqlPlugin.c:118] Initialized MySQL plugin >>> 05/Oct/2012 13:27:58 [plugin.c:195] 8 plugin(s) loaded [8 delete][8 packet]. >>> 05/Oct/2012 13:27:58 [nprobe.c:4343] Welcome to nprobe v.6.9.5 for >>> x86_64-unknown-linux-gnu >>> 05/Oct/2012 13:27:58 [nprobe.c:3766] Compiling flow templates... >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin dump >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SIP >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL DB >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin HTTP Protocol >>> 05/Oct/2012 13:27:58 [plugin.c:725] Enabling plugin HTTP Protocol >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SMTP Protocol Dissector >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin BGP Update Listener >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin RTP >>> 05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL Plugin >>> 05/Oct/2012 13:27:58 [plugin.c:738] 1 plugin(s) enabled >>> 05/Oct/2012 13:27:58 [database.c:206] Creating database schema... >>> 05/Oct/2012 13:27:58 [database.c:208] Scanning templates >>> 05/Oct/2012 13:27:58 [nprobe.c:4141] Each flow is 295 bytes long >>> 05/Oct/2012 13:27:58 [nprobe.c:4142] The # packets per flow has been set to >>> 3 >>> Error Opening file /usr/local/nprobe/GeoIPASNum.dat >>> 05/Oct/2012 13:27:58 [util.c:295] WARNING: Unable to load AS file >>> /usr/local/nprobe/GeoIPASNum.dat. AS support disabled >>> Error Opening file /usr/local/nprobe/GeoIPASNumv6.dat >>> 05/Oct/2012 13:27:58 [util.c:304] WARNING: Unable to load AS IPv6 file >>> /usr/local/nprobe/GeoIPASNumv6.dat. AS IPv6 support disabled >>> 05/Oct/2012 13:27:58 [nprobe.c:3259] Using packet capture length 1600 >>> ################################################### >>> # ERROR: You do not seem to have a valid DNA license for dna3 [Intel 1 Gbit >>> igb family]. >>> # ERROR: Please get one at http://shop.ntop.org/. >>> ################################################### >>> # We're now working in demo mode with packet capture >>> # and transmission limited to 5 minutes >>> ################################################### >>> 05/Oct/2012 13:27:58 [pro/pf_ring.c:221] Successfully open PF_RING v.5.4.2 >>> on device dna3 [snaplen=1600] >>> 05/Oct/2012 13:27:58 [pro/pf_ring.c:230] Using PF_RING in-kernel >>> accelerated packet parsing >>> 05/Oct/2012 13:27:58 [nprobe.c:4513] The flows hash has 32768 buckets >>> 05/Oct/2012 13:27:58 [nprobe.c:4515] Flows older than 120 seconds will be >>> exported >>> 05/Oct/2012 13:27:58 [nprobe.c:4518] Flows inactive for at least 30 seconds >>> will be exported >>> 05/Oct/2012 13:27:58 [nprobe.c:4521] Expired flows will be checked every 30 >>> seconds >>> 05/Oct/2012 13:27:58 [nprobe.c:4523] Expired flows will not be queued for >>> more than 30 seconds >>> 05/Oct/2012 13:27:58 [nprobe.c:4527] Exported flows with engineType 0 and >>> engineId 62 >>> 05/Oct/2012 13:27:58 [nprobe.c:4549] TCP TOS will be ignored and set to 0. >>> 05/Oct/2012 13:27:58 [nprobe.c:4554] Flows ASs will not be computed >>> 05/Oct/2012 13:27:58 [nprobe.c:4567] After 1 flow packets are sent, we'll >>> delay at least 1 ms >>> 05/Oct/2012 13:27:58 [nprobe.c:4587] Flows will be emitted in NetFlow 9 >>> format >>> 05/Oct/2012 13:27:58 [nprobe.c:4608] Flow input interface index is set to 0 >>> 05/Oct/2012 13:27:58 [nprobe.c:4614] Flow output interface index is set to 0 >>> 05/Oct/2012 13:27:58 [nprobe.c:4630] Capturing packets from interface dna3 >>> 05/Oct/2012 13:27:58 [util.c:2206] nProbe changed user to 'nobody' >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin dump (no template is >>> using it) >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SIP (no template is >>> using it) >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL DB (no template >>> is using it) >>> 05/Oct/2012 13:27:58 [plugin.c:622] Enabling plugin HTTP Protocol >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SMTP Protocol >>> Dissector (no template is using it) >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin BGP Update Listener >>> (no template is using it) >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin RTP (no template is >>> using it) >>> 05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL Plugin (no >>> template is using it) >>> 05/Oct/2012 13:27:58 [nprobe.c:4725] Starting 1 packet fetch thread(s) >>> 05/Oct/2012 13:27:58 [engine.c:2511] Starting bucket dequeue thread >>> 05/Oct/2012 13:28:30 [nprobe.c:1632] --------------------------------- >>> 05/Oct/2012 13:28:30 [nprobe.c:1633] Average traffic: [5.445 K pps][17 >>> Mb/sec] >>> 05/Oct/2012 13:28:30 [nprobe.c:1639] Current traffic: [5.445 K pps][17 >>> Mb/sec] >>> 05/Oct/2012 13:28:30 [nprobe.c:1644] Current flow export rate: [32.0 >>> flows/sec] >>> 05/Oct/2012 13:28:30 [nprobe.c:1647] Flow drops: [export queue too >>> long=0][too many flows=0] >>> 05/Oct/2012 13:28:30 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %] >>> 05/Oct/2012 13:28:30 [nprobe.c:1660] Flow Buckets: >>> [active=3788][allocated=3788][toBeExported=0][frags=0] >>> 05/Oct/2012 13:28:30 [nprobe.c:1494] Processed packets: 174257 (max bucket >>> search: 38) >>> 05/Oct/2012 13:28:30 [nprobe.c:1497] Flow export stats: [1249818 >>> bytes][8297 pkts][2048 flows] >>> 05/Oct/2012 13:28:30 [nprobe.c:1506] Flow drop stats: [0 bytes][0 pkts][0 >>> flows] >>> 05/Oct/2012 13:28:30 [nprobe.c:1511] Total flow stats: [1249818 >>> bytes][8297 pkts][2048 flows] >>> 05/Oct/2012 13:28:30 [pro/pf_ring.c:75] Packet stats (PF_RING): 174257/0 >>> pkts rcvd/dropped >>> 05/Oct/2012 13:29:00 [nprobe.c:1632] --------------------------------- >>> 05/Oct/2012 13:29:00 [nprobe.c:1633] Average traffic: [5.673 K pps][19 >>> Mb/sec] >>> 05/Oct/2012 13:29:00 [nprobe.c:1639] Current traffic: [5.916 K pps][21 >>> Mb/sec] >>> 05/Oct/2012 13:29:00 [nprobe.c:1644] Current flow export rate: [135.6 >>> flows/sec] >>> 05/Oct/2012 13:29:00 [nprobe.c:1647] Flow drops: [export queue too >>> long=0][too many flows=0] >>> 05/Oct/2012 13:29:00 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %] >>> 05/Oct/2012 13:29:00 [nprobe.c:1660] Flow Buckets: >>> [active=3813][allocated=3813][toBeExported=0][frags=0] >>> 05/Oct/2012 13:29:00 [nprobe.c:1494] Processed packets: 351748 (max bucket >>> search: 42) >>> 05/Oct/2012 13:29:00 [nprobe.c:1497] Flow export stats: [17326831 >>> bytes][70215 pkts][10182 flows] >>> 05/Oct/2012 13:29:00 [nprobe.c:1506] Flow drop stats: [0 bytes][0 pkts][0 >>> flows] >>> 05/Oct/2012 13:29:00 [nprobe.c:1511] Total flow stats: [17326831 >>> bytes][70215 pkts][10182 flows] >>> 05/Oct/2012 13:29:00 [nprobe.c:1535] --------------------------------- >>> 05/Oct/2012 13:29:00 [nprobe.c:1536] Decode ticks: 610.34 ticks/pkt >>> [1.88 %] >>> 05/Oct/2012 13:29:00 [nprobe.c:1541] Pkt Processing w/o Flow Creation: >>> 32431.03 ticks/pkt [96.61 %] >>> 05/Oct/2012 13:29:00 [nprobe.c:1546] Pkt Processing with Flow Creation: >>> 28394.09 ticks/pkt [1.50 %] >>> 05/Oct/2012 13:29:00 [nprobe.c:1551] Bucket Allocation: 7043.20 ticks/bkt >>> 05/Oct/2012 13:29:00 [nprobe.c:1555] Bucket Malloc: 4285.31 ticks/bkt >>> 05/Oct/2012 13:29:00 [nprobe.c:1559] Bucket Export: 1314003.38 ticks/bkt >>> 05/Oct/2012 13:29:00 [nprobe.c:1563] Bucket Purge: 2301.61 ticks/bkt >>> 05/Oct/2012 13:29:00 [nprobe.c:1566] Total ticks: 32417.86 ticks/pkt >>> 05/Oct/2012 13:29:00 [nprobe.c:1568] --------------------------------- >>> 05/Oct/2012 13:29:00 [pro/pf_ring.c:75] Packet stats (PF_RING): 351749/0 >>> pkts rcvd/dropped >>> 05/Oct/2012 13:29:30 [nprobe.c:1632] --------------------------------- >>> >>> >>> >>> Thanks in advance, >>> Iker >>> >>> _______________________________________________ >>> Ntop-dev mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev >> >> _______________________________________________ >> Ntop-dev mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
