Luca; I will certainly take a close look. Odd though, the same exact procedures were executed on two identical servers.
I will update when i find something. Thanks. On Tue, Jul 28, 2015 at 3:19 PM, Luca Deri <[email protected]> wrote: > Mark > on the server that does not work, are you sure you have not mixed > different sw releases of ZC? > > Regards Luca > > > On 28 Jul 2015, at 22:18, Mark Stingley <[email protected]> wrote: > > Done. > > That worked for one, but not the other identical server. The same exact > commands were executed on both systems. The fact that one works fine with > Snort 2.9.7.3 with the ZC ixgbe drivers leads me to believe that the first > problem is solved. > > However, here's what happens on the 2nd system: > > [ Number of patterns truncated to 20 bytes: 450 ] > pfring_zc DAQ configured to passive. > ######################################################################### > # ERROR: You do not seem to have a valid PF_RING ZC license 6.1.1.150626 > for eth3 [Intel 1 Gbit e1000e family] > # ERROR: Please get one at http://shop.ntop.org/. > ######################################################################### > # We're now working in demo mode with packet capture and > # transmission limited to 5 minutes > ######################################################################### > Segmentation fault > > eth3 is not a 1G NIC. Output from dmesg confirms: [85376.019315] ixgbe > 0000:05:00.1 eth3: NIC Link is Up 10 Gbps, Flow Control: RX/TX > > Also, the two ZC licenses for the 10G MACs are both in /etc/pf_ring. > > Curious? > > Thanks much. > > On Tue, Jul 28, 2015 at 11:40 AM, Luca Deri <[email protected]> wrote: > >> Mark, >> can you please use the code in git as we have fixed a similar issue >> already? >> >> Regards Luca >> >> > On 28 Jul 2015, at 16:48, Mark Stingley <[email protected]> >> wrote: >> > >> > I'm at a loss. PFRING, Snort, and ixgbe configured and compiled per >> instructions, yet: >> > >> > /usr/local/src/snort-2.9.7.3# snort --daq-dir=/usr/local/lib/daq --daq >> pfring_zc --daq-mode passive -i zc:eth2 --daq-var clusterid=Z -v -e >> > Running in packet dump mode >> > >> > --== Initializing Snort ==-- >> > Initializing Output Plugins! >> > /usr/local/lib/daq/daq_pfring_zc.so: dlopen: >> /usr/local/lib/libpfring.so: undefined symbol: numa_node_of_cpu >> > ERROR: Can't find pfring_zc DAQ! >> > Fatal Error, Quitting.. >> > >> > Platform is Debian Jessie - 3.16.0-4-amd64 #1 SMP Debian >> 3.16.7-ckt11-1+deb8u2 (2015-07-17) x86_64 GNU/Linux >> > >> > libnuma-dev libnuma1 numactl are installed. >> > >> > Any suggestions? >> > >> > Thanks. >> > >> > Mark >> > _______________________________________________ >> > Ntop-misc mailing list >> > [email protected] >> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
