LOL; lost in the sauce! I am indeed. Great phrase. Luca sent me the following excellent clue: I either need to not use pfring at all, or install PF_RING/userland/lib . Since I don't at this point want to open additional cans of worms, I am opting to install without pfring; I 'yum erase'-ed it. See the PF_RING user's guide for some compilation instructions (untested by me.)
I also ended up installing new-ish copies of zeromq and zeromq-devel to get nProbe to autogen and work properly. I didn't test to see if I just needed one and not the other zeromq package. The instructions I followed are at: http://zeromq.org/distro:centos And then I was able to autogen, make, install, and run nProbe I re-did a yum install of ntopng and ntopng-data, and those appear to work too; so it doesn't look like I broke anything. So, this is all preliminary; I suppose nProbe may yet error out, and those who know more certainly can and should correct this, but so far, in summary, this is what I think one needs to do to compile nProbe, I assume there are better/more complete instructions somewhere, but I haven't found them yet. Set up the files to use the repositories, as described here: http://www.nmon.net/centos/ and a file to use the newer zeromq repository, as described here: http://zeromq.org/distro:centos install compilaton prerequisites: yum install libpcap libpcap-devel yum install tcp-wrappers tcp_wrappers-devel yum install zeromq zeromq-devel if you're going to use ntopng and don't already have redis, install and start that service. make appropriate changes to your host-based firewall, as necessary. Thanks for the suggestions, Jeff and Luca! jana On Thu, Mar 27, 2014 at 12:12 PM, Reynolds, Jeffrey <[email protected]>wrote: > Jana, > > Bear in mind that I could be just as lost in the sauce here as any other > pf_ring/nprobe newbie, but this might give you a direction to look in. I > believe that installing pf_ring via yum as opposed to compiling from source > leads to two different setups. The rpm package will install the kernel > module to /usr/local/pfring/kernel/pf_ring.ko, but when running make > install to compile from source, I believe the kernel modules will be dumped > into /lib/modules/`uname -r`. If it's looking for the pf_ring kernel > modules, it may not be finding them. Of course, it could be some other > libraries/headers that are placed somewhere by pf_ring that it can't find. > Basically, I'm wondering if when compiling nProbe from source, you'll also > need to compile some of the other nTop software from source. > > I'd be careful about moving things however. The initialization scripts > that load pf_ring into the kernel expect that module to be either in > /lib/modules or /usr/local. If you end up moving it without moving it > back, then pf_ring won't get loaded and you will cause some other problems > down the line. I'd try copying files over like that to make sure the > original stays in place. > > Also, I'm not sure of the results of compiling the source while the RPM is > installed, I might remove just the nProbe RPM before trying to compile. > > Hope you get an answer. > > Jeff > > From: Jana Dunn <[email protected]<mailto: > [email protected]>> > > [....] > And then as a normal user I unpacked the nProbe tarball Luca sent, and then > ./autogen.sh > make > [....] > > And the end of the make: > /bin/sh ./libtool --tag=CC --mode=link gcc -O2 -I/usr/local/include > -I/opt/local/include -L/usr/local/lib -L/opt/local/lib -L/lib -pthread -lm > -L/usr/local/lib -L/opt/local/lib -L/lib -o nprobe nprobe-nprobe.o > libnprobe.la<http://libnprobe.la> -lrt -lresolv -lrt -ldl -lpthread > -rdynamic -L/usr/lib64/mysql -lmysqlclient -lz -lcrypt -lnsl -lm -lssl > -lcrypto -lwrap -lpcap -lsqlite3 > /home/jdunn/Src/Nprobe/nprobe_6.16.140310_svn4044/nDPI/src/lib/.libs/libndpi.a > libtool: link: gcc -O2 -I/usr/local/include -I/opt/local/include -pthread > -o .libs/nprobe nprobe-nprobe.o -rdynamic -L/usr/local/lib > -L/opt/local/lib -L/lib ./.libs/libnprobe.so -L/usr/lib64/mysql -lresolv > -lrt -ldl -lpthread -lmysqlclient -lz -lcrypt -lnsl -lm -lssl -lcrypto > -lwrap -lpcap -lsqlite3 > /home/jdunn/Src/Nprobe/nprobe_6.16.140310_svn4044/nDPI/src/lib/.libs/libndpi.a > -pthread > ./.libs/libnprobe.so: undefined reference to `pfring_set_application_name' > ./.libs/libnprobe.so: undefined reference to `pfring_stats' > ./.libs/libnprobe.so: undefined reference to `pfring_get_ring_id' > ./.libs/libnprobe.so: undefined reference to `pfring_enable_rss_rehash' > ./.libs/libnprobe.so: undefined reference to `pfring_get_selectable_fd' > ./.libs/libnprobe.so: undefined reference to `pfring_enable_ring' > ./.libs/libnprobe.so: undefined reference to `pfring_set_direction' > ./.libs/libnprobe.so: undefined reference to `pfring_close' > ./.libs/libnprobe.so: undefined reference to `pfring_set_master' > ./.libs/libnprobe.so: undefined reference to `pfring_breakloop' > ./.libs/libnprobe.so: undefined reference to `pfring_set_cluster' > ./.libs/libnprobe.so: undefined reference to `pfring_set_master_id' > ./.libs/libnprobe.so: undefined reference to `pfring_recv' > ./.libs/libnprobe.so: undefined reference to `pfring_set_poll_watermark' > ./.libs/libnprobe.so: undefined reference to `pfring_send' > ./.libs/libnprobe.so: undefined reference to `pfring_open' > collect2: ld returned 1 exit status > > -- Jana Dunn, CISSP Senior Security Analyst Nevada System of Higher Education [email protected]
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
