I messed with it a bunch yesterday afternoon and it looks like I got it working without any errors finally, I just checked this morning. I really appreciate all the help, thanks again!
On 12/4/12 3:52 AM, "Luca Deri" <[email protected]> wrote: >Josh, >can you please remove the PF_RING module from your system (via rmmod) >and start nprobe to see if the problem is really pf_ring? > >Please start nprobe with "-b 2" to see if flows are computed as well >packets received > >Luca > >On 12/03/2012 10:33 PM, Josh Abel wrote: >> I have updated PF_RING from svn, however now my collector (scrutinizer) >> doesn't seem to be getting anything from my nprobe installationŠ I >>haven't >> changed anything except for updating PF_RING, I did try to re autogen, >> make, make install, etc nprobe but same thing, no data. Any ideas? I am >> using nprobe_6.9.9_103012_svn2772_pro. Thanks in advance. >> >> >> >> >> On 12/3/12 12:24 PM, "Luca Deri" <[email protected]> wrote: >> >>> Hi all, >>> please update PF_RING from SVN:: this problem should be fixed there >>> >>> Regards Luca >>> >>> On Nov 30, 2012, at 3:12 PM, Josh Abel <[email protected]> wrote: >>> >>>> Ok, I got pfring installed (I think) and I get it running but now it >>>> bombs >>>> out after a couple minutes, any ideas? Again, thanks so much in >>>>advance! >>>> >>>> 29/Nov/2012 16:58:27 [nprobe.c:2998] WARNING: The input interfaceId is >>>> set >>>> to 0: did you forget to use -u perhaps ? >>>> 29/Nov/2012 16:58:27 [nprobe.c:3043] Welcome to nprobe v.6.9.9 >>>> ($Revision: >>>> 2773 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration >>>> 29/Nov/2012 16:58:27 [plugin.c:150] No plugins found in ./plugins >>>> 29/Nov/2012 16:58:27 [plugin.c:156] Loading plugins [.so] from >>>> /usr/local/lib/nprobe/plugins >>>> 29/Nov/2012 16:58:27 [nprobe.c:4722] Welcome to nprobe v.6.9.9 for >>>> x86_64-unknown-linux-gnu >>>> 29/Nov/2012 16:58:27 [plugin.c:800] 0 plugin(s) enabled >>>> 29/Nov/2012 16:58:27 [nprobe.c:3510] Using packet capture length 128 >>>> 29/Nov/2012 16:58:27 [pro/pf_ring.c:226] Using PF_RING in-kernel >>>> accelerated packet parsing >>>> 29/Nov/2012 16:58:27 [nprobe.c:4891] IPv6 traffic will NOT be >>>> exported/accounted by this probe >>>> 29/Nov/2012 16:58:27 [nprobe.c:4892] due to configuration options >>>>(e.g. >>>> use NetFlow v9) >>>> 29/Nov/2012 16:58:27 [nprobe.c:4937] Flows ASs will not be computed >>>> (missing GeoIP support) >>>> 29/Nov/2012 16:58:27 [nprobe.c:5013] Capturing packets from interface >>>> eth1 >>>> 29/Nov/2012 16:58:27 [nprobe.c:2995] WARNING: The output interfaceId >>>>is >>>> set to 0: did you forget to use -Q perhaps ? >>>> 29/Nov/2012 16:58:27 [nprobe.c:2998] WARNING: The input interfaceId is >>>> set >>>> to 0: did you forget to use -u perhaps ? >>>> 29/Nov/2012 16:58:27 [nprobe.c:3043] Welcome to nprobe v.6.9.9 >>>> ($Revision: >>>> 2773 $) for x86_64-unknown-linux-gnu with native PF_RING acceleration >>>> 29/Nov/2012 16:58:27 [plugin.c:150] No plugins found in ./plugins >>>> 29/Nov/2012 16:58:27 [plugin.c:156] Loading plugins [.so] from >>>> /usr/local/lib/nprobe/plugins >>>> 29/Nov/2012 16:58:27 [nprobe.c:4722] Welcome to nprobe v.6.9.9 for >>>> x86_64-unknown-linux-gnu >>>> 29/Nov/2012 16:58:27 [plugin.c:800] 0 plugin(s) enabled >>>> 29/Nov/2012 16:58:27 [nprobe.c:3510] Using packet capture length 128 >>>> 29/Nov/2012 16:58:27 [pro/pf_ring.c:226] Using PF_RING in-kernel >>>> accelerated packet parsing >>>> 29/Nov/2012 16:58:27 [nprobe.c:4891] IPv6 traffic will NOT be >>>> exported/accounted by this probe >>>> 29/Nov/2012 16:58:27 [nprobe.c:4892] due to configuration options >>>>(e.g. >>>> use NetFlow v9) >>>> 29/Nov/2012 16:58:27 [nprobe.c:4937] Flows ASs will not be computed >>>> (missing GeoIP support) >>>> 29/Nov/2012 16:58:27 [nprobe.c:5013] Capturing packets from interface >>>> eth2 >>>> [root@server ~]# *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> *** corrupted ring buffer indexes (recovered) *** >>>> >>>> >>>> >>>> >>>> >>>> On 11/29/12 3:46 PM, "Francalacci Yuri" <[email protected]> wrote: >>>> >>>>> Pfring library is probably missing. >>>>> Yuri >>>>> >>>>> Sent from my iPhone >>>>> >>>>> Il giorno 29/nov/2012, alle ore 22:00, Josh Abel >>>>><[email protected]> >>>>> ha scritto: >>>>> >>>>>> Thanks! Well I got farther, now I get this; >>>>>> >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/nprobe.c:3162: undefined >>>>>> reference to `pfring_breakloop' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/nprobe.c:3174: undefined >>>>>> reference to `pfring_close' >>>>>> nprobe-nprobe.o: In function `printPfRingStats': >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:47: >>>>>>undefined >>>>>> reference to `pfring_stats' >>>>>> nprobe-nprobe.o: In function `open_ring': >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:201: >>>>>>undefined >>>>>> reference to `pfring_open' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:205: >>>>>>undefined >>>>>> reference to `pfring_version' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:223: >>>>>>undefined >>>>>> reference to `pfring_set_application_name' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:257: >>>>>>undefined >>>>>> reference to `pfring_set_bpf_filter' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:270: >>>>>>undefined >>>>>> reference to `pfring_set_cluster' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:279: >>>>>>undefined >>>>>> reference to `pfring_set_poll_watermark' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:280: >>>>>>undefined >>>>>> reference to `pfring_set_direction' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:285: >>>>>>undefined >>>>>> reference to `pfring_enable_ring' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:223: >>>>>>undefined >>>>>> reference to `pfring_set_application_name' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:232: >>>>>>undefined >>>>>> reference to `pfring_toggle_filtering_policy' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:243: >>>>>>undefined >>>>>> reference to `pfring_add_filtering_rule' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:252: >>>>>>undefined >>>>>> reference to `pfring_set_direction' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:282: >>>>>>undefined >>>>>> reference to `pfring_set_poll_watermark' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:213: >>>>>>undefined >>>>>> reference to `pfring_close' >>>>>> nprobe-nprobe.o: In function `fetchPfRingPackets': >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:111: >>>>>>undefined >>>>>> reference to `pfring_set_sampling_rate' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:122: >>>>>>undefined >>>>>> reference to `pfring_poll' >>>>>> /home/ops/nprobe_6.9.9_103012_svn2772_pro/pro/pf_ring.c:136: >>>>>>undefined >>>>>> reference to `pfring_recv' >>>>>> ./.libs/libnprobe.so: undefined reference to `pfring_send' >>>>>> collect2: ld returned 1 exit status >>>>>> make[2]: *** [nprobe] Error 1 >>>>>> make[2]: Leaving directory >>>>>>`/home/ops/nprobe_6.9.9_103012_svn2772_pro' >>>>>> make[1]: *** [all-recursive] Error 1 >>>>>> make[1]: Leaving directory >>>>>>`/home/ops/nprobe_6.9.9_103012_svn2772_pro' >>>>>> make: *** [all] Error 2 >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> >>>>>> On 11/29/12 2:55 PM, "[email protected]" <[email protected]> >>>>>> wrote: >>>>>> >>>>>>> On 11/29/2012 07:16 PM, Josh Abel wrote: >>>>>>>> Can anyone please help me with this? I can't seem to get nProbe to >>>>>>>> compile. Thanks in advance. >>>>>>>> >>>>>>>> System: >>>>>>>> CentOS release 6.3 (Final) >>>>>>>> x86_64 >>>>>>>> >>>>>>>> 2_svn2772_pro/nDPI/src/lib/.libs/libndpi.a >>>>>>>> -Wl,-soname -Wl,libnprobe-6.9.9.so -o .libs/libnprobe-6.9.9.so >>>>>>>> /usr/bin/ld: cannot find -lwrap >>>>>>> >>>>>>> >>>>>>> i think you need the tcp_wrappers-devel package to be installed >>>>>>> >>>>>>> regards >>>>>>> vito >>>>>>> >>>>>>>> collect2: ld returned 1 exit status >>>>>>>> make[2]: *** [libnprobe.la] Error 1 >>>>>>>> make[2]: Leaving directory >>>>>>>> `/home/ops/nprobe_6.9.9_103012_svn2772_pro' >>>>>>>> make[1]: *** [all-recursive] Error 1 >>>>>>>> make[1]: Leaving directory >>>>>>>> `/home/ops/nprobe_6.9.9_103012_svn2772_pro' >>>>>>>> make: *** [all] Error 2 >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> _______________________________________________ >>>>>>>> Ntop-misc mailing list >>>>>>>> [email protected] >>>>>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>>>>>> _______________________________________________ >>>>>>> Ntop-misc mailing list >>>>>>> [email protected] >>>>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>>>>> _______________________________________________ >>>>>> Ntop-misc mailing list >>>>>> [email protected] >>>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>>>> _______________________________________________ >>>>> Ntop-misc mailing list >>>>> [email protected] >>>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>>> _______________________________________________ >>>> Ntop-misc mailing list >>>> [email protected] >>>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > >_______________________________________________ >Ntop-misc mailing list >[email protected] >http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
