Matthew, with such a large snaplen the memory probably is notu enough and the system complains. Why do you need such snaplen?
2.6.32 is suggested but it should also work on older kernels Luca On 06 Dec 2013, at 13:58, Matthew Prowse <[email protected]> wrote: > My first question is whether PF_RING-5.6.1 is expected to work with 2.6.18 > (CentOS 5), or whether it is necessary to upgrade to 2.6.32 (CentOS 6), as > the kernel module source and webpage appear to conflict. > > Quote http://www.ntop.org/products/pf_ring/: > "Available for Linux kernels 2.6.32 and newer." > > Quote PF_RING-5.6.1/kernel/pf_ring.c: > "PF_RING works on kernel 2.6.18 or newer." > > > > My test program is: > > const int N = ...; > pfring_open("eth0", N, 0); > > For larger values of N, I observe a kernel panic in vmalloc_user (via > allocate_shared_memory, via ring_mmap). > > On the kernel version in the subject line, the value of N which causes the > kernel panic is somewhere between 65000 and 65500. On 32bit kernel version > 2.6.18-92.el5, it is somewhere between 10000 and 20000. > > > Can anyone help to explain this? > > Regards, > Matt. > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
