Thanks, the segfafult without DNA is also resolved. Bro 2.3.2 with PF_RING from SVN works in AWS and is stable.
On Thu, Feb 26, 2015 at 5:46 PM, Gary Faulkner <[email protected]> wrote: > Thank you. The segfault seems to be resolved, but I'm having a problem with > pfdnacluster_master in that I can't seem to open more than 10 app instances. > > I'm using the following syntax: > > pfdnacluster_master -i dna0,dna1 -d -n 22,1 -c 21 > > This seems to indicate that there are 22 queues for app0, but I can only > listen on queues 0-9. > > cat /proc/net/pf_ring/stats/12684-dna0.18 > ClusterId: 21 > TotQueues: 23 > Applications: 2 > App0Queues: 22 > App1Queues: 1 > Duration: 0:00:14:37:015 > Packets: 554745411 > Processed: 132954871 > > I also get the following error in /var/log/messages: > > kernel: [PF_RING] Unable to activate two or more DNA/ZC sockets on the same > interface dna0/link direction > kernel: [PF_RING] Unable to activate two or more DNA/ZC sockets on the same > interface dna1/link direction > > Here is an example with pcount: > > # pcount -i dnacluster:21@0 > Capturing from dnacluster:21@0 > ========================= > Absolute Stats: [46046 pkts rcvd][1 pkts dropped] > Total Pkts=46045/Dropped=0.0 % > 46046 pkts [46046.0 pkt/sec] - 44012585 bytes [352.10 Mbit/sec] > ========================= > ========================= > Absolute Stats: [97352 pkts rcvd][1 pkts dropped] > Total Pkts=97351/Dropped=0.0 % > 97352 pkts [48675.2 pkt/sec] - 90627388 bytes [362.50 Mbit/sec] > ========================= > Actual Stats: 97'352 pkts [1000.0 ms][97'348.58 pkt/sec] > ========================= > ========================= > Absolute Stats: [141461 pkts rcvd][1 pkts dropped] > Total Pkts=141460/Dropped=0.0 % > 141461 pkts [47152.8 pkt/sec] - 130562338 bytes [348.16 Mbit/sec] > ========================= > Actual Stats: 44'109 pkts [1000.0 ms][44'107.98 pkt/sec] > ========================= > ========================= > Absolute Stats: [149528 pkts rcvd][1 pkts dropped] > Total Pkts=149527/Dropped=0.0 % > 149528 pkts [46123.3 pkt/sec] - 137577938 bytes [339.50 Mbit/sec] > ========================= > Actual Stats: 8'067 pkts [241.9 ms][33'354.14 pkt/sec] > ========================= > > # pcount -i dnacluster:21@9 > Capturing from dnacluster:21@9 > ========================= > Absolute Stats: [22785 pkts rcvd][0 pkts dropped] > Total Pkts=22785/Dropped=0.0 % > 22785 pkts [22785.0 pkt/sec] - 17938561 bytes [143.51 Mbit/sec] > ========================= > ========================= > Absolute Stats: [42005 pkts rcvd][0 pkts dropped] > Total Pkts=42005/Dropped=0.0 % > 42005 pkts [21002.1 pkt/sec] - 33709008 bytes [134.83 Mbit/sec] > ========================= > Actual Stats: 42'005 pkts [1000.0 ms][42'003.44 pkt/sec] > ========================= > ========================= > Absolute Stats: [43667 pkts rcvd][0 pkts dropped] > Total Pkts=43667/Dropped=0.0 % > 43667 pkts [21107.9 pkt/sec] - 35110166 bytes [135.77 Mbit/sec] > ========================= > Actual Stats: 1'662 pkts [68.7 ms][24'187.21 pkt/sec] > ========================= > > # pcount -i dnacluster:21@10 > Capturing from dnacluster:21@10 > pcap_open_live: dnacluster:21@10: No such device exists (No such device > exists) > > # pcount -i dnacluster:21@21 > Capturing from dnacluster:21@21 > pcap_open_live: dnacluster:21@21: No such device exists (No such device > exists) > > Regards, > Gary > > On 2/26/2015 6:46 AM, Craig Pluchinsky wrote: >> >> Working good so far. >> >> thanks! >> >> >> ------------------------------- >> Craig Pluchinsky >> IT Services >> Indiana University of Pennsylvania >> 724-357-3327 >> >> >> On Thu, 26 Feb 2015, Alfredo Cardigliano wrote: >> >>> Hi guys >>> there is a fix in svn that should likely solve this bug, please check it >>> out and let us know. >>> >>> Best Regards >>> Alfredo > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
