Done. That worked for one, but not the other identical server. The same exact commands were executed on both systems. The fact that one works fine with Snort 2.9.7.3 with the ZC ixgbe drivers leads me to believe that the first problem is solved.
However, here's what happens on the 2nd system: [ Number of patterns truncated to 20 bytes: 450 ] pfring_zc DAQ configured to passive. ######################################################################### # ERROR: You do not seem to have a valid PF_RING ZC license 6.1.1.150626 for eth3 [Intel 1 Gbit e1000e family] # ERROR: Please get one at http://shop.ntop.org/. ######################################################################### # We're now working in demo mode with packet capture and # transmission limited to 5 minutes ######################################################################### Segmentation fault eth3 is not a 1G NIC. Output from dmesg confirms: [85376.019315] ixgbe 0000:05:00.1 eth3: NIC Link is Up 10 Gbps, Flow Control: RX/TX Also, the two ZC licenses for the 10G MACs are both in /etc/pf_ring. Curious? Thanks much. On Tue, Jul 28, 2015 at 11:40 AM, Luca Deri <[email protected]> wrote: > Mark, > can you please use the code in git as we have fixed a similar issue > already? > > Regards Luca > > > On 28 Jul 2015, at 16:48, Mark Stingley <[email protected]> wrote: > > > > I'm at a loss. PFRING, Snort, and ixgbe configured and compiled per > instructions, yet: > > > > /usr/local/src/snort-2.9.7.3# snort --daq-dir=/usr/local/lib/daq --daq > pfring_zc --daq-mode passive -i zc:eth2 --daq-var clusterid=Z -v -e > > Running in packet dump mode > > > > --== Initializing Snort ==-- > > Initializing Output Plugins! > > /usr/local/lib/daq/daq_pfring_zc.so: dlopen: > /usr/local/lib/libpfring.so: undefined symbol: numa_node_of_cpu > > ERROR: Can't find pfring_zc DAQ! > > Fatal Error, Quitting.. > > > > Platform is Debian Jessie - 3.16.0-4-amd64 #1 SMP Debian > 3.16.7-ckt11-1+deb8u2 (2015-07-17) x86_64 GNU/Linux > > > > libnuma-dev libnuma1 numactl are installed. > > > > Any suggestions? > > > > Thanks. > > > > Mark > > _______________________________________________ > > Ntop-misc mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
