Hi Miika 82598 is not supported as it has several limitations and we decided not to support it in ZC (as you can see it is not listed in http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero-copy/), sorry.
Best Regards Alfredo > On 27 May 2016, at 09:39, Miika Räisänen <[email protected]> wrote: > > Hi, > > I've trying to get Intel 82598EB (05:00.0 Ethernet controller: Intel > Corporation 82598EB 10-Gigabit AF Network Connection (rev 01)) running with > PF_RING ZC (to use with suricata). > > When I test "pfcount -i zc:enp5s0" I just get error message " pfring_open > error [No such device] (pf_ring not loaded or interface zc:enp5s0 is down ?)" > Some info about my setup: > > CentOS Linux release 7.2.1511 > 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 11:03:55 UTC 2016 x86_64 x86_64 > x86_64 GNU/Linux > pfring-dkms-6.3.0-596.noarch (I also tried stable packages...) > pfring-6.3.0-596.x86_64 > ixgbe-zc-4.1.5.596-1dkms.noarch > > [root@suricata ~]# cat /proc/net/pf_ring/info > PF_RING Version : 6.3.0 > (dev:9a327df3fab3b769c7494b898cf165bb24a9f6eb) > Total rings : 0 > > Standard (non DNA/ZC) Options > Ring slots : 4096 > Slot version : 16 > Capture TX : Yes [RX+TX] > IP Defragment : No > Socket Mode : Standard > Total plugins : 0 > Cluster Fragment Queue : 0 > Cluster Fragment Discard : 0 > > [root@suricata ~]# cat /proc/net/pf_ring/dev/enp5s0/info > Name: enp5s0 > Index: 6 > Address: 00:1B:21:39:A9:60 > Polling Mode: NAPI/ZC > Type: Ethernet > Family: Intel ixgbe 82598 > Max # TX Queues: 2 > # Used RX Queues: 2 > Num RX Slots: 32768 > Num TX Slots: 32768 > > [root@suricata ~]# ifconfig enp5s0 > enp5s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 > ether 00:1b:21:39:a9:60 txqueuelen 1000 (Ethernet) > RX packets 46315 bytes 39432447 (37.6 MiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 0 bytes 0 (0.0 B) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device memory 0xdf2a0000-df2c0000 > > And heres how I'm loading modules etc. http://pastebin.com/rRSUHDug > > Command "pfcount -i enp5s0" works and also normal tcpdump is OK. > > Any suggestions or ideas how to get ZC working? Or should I use something > else with suricata? > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
