Josh,
can you please remove the PF_RING module from your system (via rmmod)
and start nprobe to see if the problem is really pf_ring?
Please start nprobe with "-b 2" to see if flows are computed as well
packets received
Luca
On 12/03/2012 10:33 PM, Josh Abel wrote:
I have updated PF_RING from svn, however now my collector (scrutinizer)
doesn't seem to be getting anything from my nprobe installationŠ I haven't
changed anything except for updating PF_RING, I did try to re autogen,
make, make install, etc nprobe but same thing, no data. Any ideas? I am
using nprobe_6.9.9_103012_svn2772_pro. Thanks in advance.
On 12/3/12 12:24 PM, "Luca Deri" <[email protected]> wrote:
Hi all,
please update PF_RING from SVN:: this problem should be fixed there
Regards Luca
On Nov 30, 2012, at 3:12 PM, Josh Abel <[email protected]> wrote:
Ok, I got pfring installed (I think) and I get it running but now it
bombs
out after a couple minutes, any ideas? Again, thanks so much in advance!
29/Nov/2012 16:58:27 [nprobe.c:2998] WARNING: The input interfaceId is
set
to 0: did you forget to use -u perhaps ?
29/Nov/2012 16:58:27 [nprobe.c:3043] Welcome to nprobe v.6.9.9
($Revision:
2773 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration
29/Nov/2012 16:58:27 [plugin.c:150] No plugins found in ./plugins
29/Nov/2012 16:58:27 [plugin.c:156] Loading plugins [.so] from
/usr/local/lib/nprobe/plugins
29/Nov/2012 16:58:27 [nprobe.c:4722] Welcome to nprobe v.6.9.9 for
x86_64-unknown-linux-gnu
29/Nov/2012 16:58:27 [plugin.c:800] 0 plugin(s) enabled
29/Nov/2012 16:58:27 [nprobe.c:3510] Using packet capture length 128
29/Nov/2012 16:58:27 [pro/pf_ring.c:226] Using PF_RING in-kernel
accelerated packet parsing
29/Nov/2012 16:58:27 [nprobe.c:4891] IPv6 traffic will NOT be
exported/accounted by this probe
29/Nov/2012 16:58:27 [nprobe.c:4892] due to configuration options (e.g.
use NetFlow v9)
29/Nov/2012 16:58:27 [nprobe.c:4937] Flows ASs will not be computed
(missing GeoIP support)
29/Nov/2012 16:58:27 [nprobe.c:5013] Capturing packets from interface
eth1
29/Nov/2012 16:58:27 [nprobe.c:2995] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
29/Nov/2012 16:58:27 [nprobe.c:2998] WARNING: The input interfaceId is
set
to 0: did you forget to use -u perhaps ?
29/Nov/2012 16:58:27 [nprobe.c:3043] Welcome to nprobe v.6.9.9
($Revision:
2773 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration
29/Nov/2012 16:58:27 [plugin.c:150] No plugins found in ./plugins
29/Nov/2012 16:58:27 [plugin.c:156] Loading plugins [.so] from
/usr/local/lib/nprobe/plugins
29/Nov/2012 16:58:27 [nprobe.c:4722] Welcome to nprobe v.6.9.9 for
x86_64-unknown-linux-gnu
29/Nov/2012 16:58:27 [plugin.c:800] 0 plugin(s) enabled
29/Nov/2012 16:58:27 [nprobe.c:3510] Using packet capture length 128
29/Nov/2012 16:58:27 [pro/pf_ring.c:226] Using PF_RING in-kernel
accelerated packet parsing
29/Nov/2012 16:58:27 [nprobe.c:4891] IPv6 traffic will NOT be
exported/accounted by this probe
29/Nov/2012 16:58:27 [nprobe.c:4892] due to configuration options (e.g.
use NetFlow v9)
29/Nov/2012 16:58:27 [nprobe.c:4937] Flows ASs will not be computed
(missing GeoIP support)
29/Nov/2012 16:58:27 [nprobe.c:5013] Capturing packets from interface
eth2
[root@server ~]# *** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
*** corrupted ring buffer indexes (recovered) ***
On 11/29/12 3:46 PM, "Francalacci Yuri" <[email protected]> wrote:
Pfring library is probably missing.
Yuri
Sent from my iPhone
Il giorno 29/nov/2012, alle ore 22:00, Josh Abel <[email protected]>
ha scritto:
Thanks! Well I got farther, now I get this;
/home/ops/nprobe_6.9.9_103012_svn2772_pro/nprobe.c:3162: undefined
reference to `pfring_breakloop'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/nprobe.c:3174: undefined
reference to `pfring_close'
nprobe-nprobe.o: In function `printPfRingStats':
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:47: undefined
reference to `pfring_stats'
nprobe-nprobe.o: In function `open_ring':
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:201: undefined
reference to `pfring_open'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:205: undefined
reference to `pfring_version'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:223: undefined
reference to `pfring_set_application_name'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:257: undefined
reference to `pfring_set_bpf_filter'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:270: undefined
reference to `pfring_set_cluster'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:279: undefined
reference to `pfring_set_poll_watermark'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:280: undefined
reference to `pfring_set_direction'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:285: undefined
reference to `pfring_enable_ring'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:223: undefined
reference to `pfring_set_application_name'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:232: undefined
reference to `pfring_toggle_filtering_policy'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:243: undefined
reference to `pfring_add_filtering_rule'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:252: undefined
reference to `pfring_set_direction'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:282: undefined
reference to `pfring_set_poll_watermark'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:213: undefined
reference to `pfring_close'
nprobe-nprobe.o: In function `fetchPfRingPackets':
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:111: undefined
reference to `pfring_set_sampling_rate'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:122: undefined
reference to `pfring_poll'
/home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:136: undefined
reference to `pfring_recv'
./.libs/libnprobe.so: undefined reference to `pfring_send'
collect2: ld returned 1 exit status
make[2]: *** [nprobe] Error 1
make[2]: Leaving directory `/home/ops/nprobe_6.9.9_103012_svn2772_pro'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory `/home/ops/nprobe_6.9.9_103012_svn2772_pro'
make: *** [all] Error 2
On 11/29/12 2:55 PM, "[email protected]" <[email protected]>
wrote:
On 11/29/2012 07:16 PM, Josh Abel wrote:
Can anyone please help me with this? I can't seem to get nProbe to
compile. Thanks in advance.
System:
CentOS release 6.3 (Final)
x86_64
2_svn2772_pro/nDPI/src/lib/.libs/libndpi.a
-Wl,-soname -Wl,libnprobe-6.9.9.so -o .libs/libnprobe-6.9.9.so
/usr/bin/ld: cannot find -lwrap
i think you need the tcp_wrappers-devel package to be installed
regards
vito
collect2: ld returned 1 exit status
make[2]: *** [libnprobe.la] Error 1
make[2]: Leaving directory
`/home/ops/nprobe_6.9.9_103012_svn2772_pro'
make[1]: *** [all-recursive] Error 1
make[1]: Leaving directory
`/home/ops/nprobe_6.9.9_103012_svn2772_pro'
make: *** [all] Error 2
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
