Then everything is excellent, I just got confused by all these "missing" messages that have something with libpcap, so I thought that something is an issue while compiling.
Tnx for the fast response! On Wed, Mar 16, 2016 at 1:12 PM, Alfredo Cardigliano <[email protected]> wrote: > I do not see any error, they are compilation messages. > > Alfredo > > On 16 Mar 2016, at 13:06, m1234dm1234n1234 . <[email protected]> > wrote: > > Hi, > > Yes, sockets are creating for every new tcpdump instance, so that works > quite well. Any info on the first question? Should I even worry about it ? > > On Wed, Mar 16, 2016 at 12:29 PM, Alfredo Cardigliano < > [email protected]> wrote: > >> Please check under /proc/net/pf_ring/ that new socket files are created >> when starting tcpdump, to make sure tcpdump is using pf_ring. >> >> Alfredo >> >> > On 16 Mar 2016, at 12:15, m1234dm1234n1234 . <[email protected]> >> wrote: >> > >> > Downloaded PF_RING v6.3.0 and compiled module with no problems. >> > Then went to /userland/lib and /userland/libpcap and compiled those >> with prefix /usr/local/pfring, all went well. >> > After that, i configured tcpdump with same prefix, and when I started >> to compile, a bunch of messages started to appear : >> > >> > "gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./addrtoname.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./af.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./checksum.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./cpack.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./gmpls.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./oui.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./gmt2local.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./ipproto.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./nlpid.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./l2vpn.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./machdep.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./parsenfsfh.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./print-802_11.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./print-ap1394.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./print-ah.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./print-arcnet.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c >> ./print-aodv.c >> > gcc -O2 -DHAVE_CONFIG_H -I./missing -D_U_="__attribute__((unused))" >> -DHAVE_PF_RING -I. -I./../libpcap -I./missing -I../libpcap -c ./print-arp.c >> > " >> > >> > This is not the whole list, but you get the point. >> > >> > TCPDump does finish compiling without errors, and it does start, but >> how can I check that it uses PF_ring enabled libpcap? >> > >> > Is there some crucial step i missed? >> > _______________________________________________ >> > Ntop-misc mailing list >> > [email protected] >> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> >> >> _______________________________________________ >> Ntop-misc mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop-misc >> > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc >
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
