Please check under /proc/net/pf_ring/ that new socket files are created when starting tcpdump, to make sure tcpdump is using pf_ring.
Alfredo > On 16 Mar 2016, at 12:15, m1234dm1234n1234 . <[email protected]> wrote: > > Downloaded PF_RING v6.3.0 and compiled module with no problems. > Then went to /userland/lib and /userland/libpcap and compiled those with > prefix /usr/local/pfring, all went well. > After that, i configured tcpdump with same prefix, and when I started to > compile, a bunch of messages started to appear : > > "gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./addrtoname.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./af.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./checksum.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./cpack.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./gmpls.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./oui.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./gmt2local.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./ipproto.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./nlpid.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./l2vpn.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./machdep.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./parsenfsfh.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c > ./print-802_11.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c > ./print-ap1394.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./print-ah.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c > ./print-arcnet.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./print-aodv.c > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" > -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./print-arp.c > " > > This is not the whole list, but you get the point. > > TCPDump does finish compiling without errors, and it does start, but how can > I check that it uses PF_ring enabled libpcap? > > Is there some crucial step i missed? > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
