Maurizio as follow-up you can enable RSS and spawn one snort instance per queue
Luca On 27 May 2014, at 18:34, Alfredo Cardigliano <[email protected]> wrote: > Hi Maurizio > —daq-var clusterid is not supported by the pfring_dna daq, please also make > sure pf_ring is loaded and the dna0 interface is up. Please let us know. > > Best Regards > Alfredo > > On 27 May 2014, at 17:54, Maurizio Di Pietro (Esterna) <[email protected]> > wrote: > >> Hello, >> I'm working with snort and DAQ PRING 6.01 less DNA. >> I ran more istance of snort with this command and it works well >> >> /usr/local/bin/snort -c >> /usr/src/PF_RING-6.0.1/userland/snort/snort-2.9.6.0/etc/snort.conf >> --pid-path=/tmp/snort0 -i eth10 -l /tmp/snort0 --perfmon-file >> /tmp/snort0/snort.stats --daq-dir /usr/local/lib/daq --daq pfring --daq-var >> bindcpu=0 --daq-var clusterid=16 >> >> Now I'm trying to use the feature z-copy (DNA). So i compiled the ixgbe DNA >> driver, i loaded it and tryed to run snort with this command >> >> /usr/local/bin/snort -c >> /usr/src/PF_RING-6.0.1/userland/snort/snort-2.9.6.0/etc/snort.conf >> --pid-path=/tmp/snort0 -i dna0 -l /tmp/snort0 --perfmon-file >> /tmp/snort0/snort.stats --daq-dir /usr/local/lib/daq --daq pfring_dna >> --daq-var bindcpu=0 --daq-var clusterid=16 >> >> But I have this output >> >> pfring DAQ configured to passive. >> ERROR: Can't initialize DAQ pfring (-1) - >> Fatal Error, Quitting.. >> >> >> Why? >> 1- Do i have a license for work with DNA DAQ? >> 2- must I use PF_RING_aware? >> 3- Do I make some mistakes? >> >> pfcount and pfsend work well! >> Thanks >> Bye >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
