Yes we should probably add some warning in this case :-) Alfredo
> On 27 May 2016, at 10:43, Miika Räisänen <[email protected]> wrote: > > I thought it will work because I did not get any scary warnings etc. :) I > also have 82599 cards so this should not to be a problem. > > Thanks. > >> -----Original Message----- >> From: [email protected] [mailto:ntop-misc- >> [email protected]] On Behalf Of Alfredo Cardigliano >> Sent: 27. toukokuuta 2016 11:09 >> To: [email protected] >> Subject: Re: [Ntop-misc] PF_RING ZC with 82598EB -> "pfring_open error [No >> such device]" >> >> Hi Miika >> 82598 is not supported as it has several limitations and we decided not to >> support it in ZC (as you can see it is not listed in >> http://www.ntop.org/products/packet-capture/pf_ring/pf_ring-zc-zero- >> copy/), sorry. >> >> Best Regards >> Alfredo >> >>> On 27 May 2016, at 09:39, Miika Räisänen <[email protected]> wrote: >>> >>> Hi, >>> >>> I've trying to get Intel 82598EB (05:00.0 Ethernet controller: Intel >> Corporation 82598EB 10-Gigabit AF Network Connection (rev 01)) running >> with PF_RING ZC (to use with suricata). >>> >>> When I test "pfcount -i zc:enp5s0" I just get error message " pfring_open >> error [No such device] (pf_ring not loaded or interface zc:enp5s0 is down ?)" >> Some info about my setup: >>> >>> CentOS Linux release 7.2.1511 >>> 3.10.0-327.18.2.el7.x86_64 #1 SMP Thu May 12 11:03:55 UTC 2016 x86_64 >> x86_64 x86_64 GNU/Linux >>> pfring-dkms-6.3.0-596.noarch (I also tried stable packages...) >>> pfring-6.3.0-596.x86_64 >>> ixgbe-zc-4.1.5.596-1dkms.noarch >>> >>> [root@suricata ~]# cat /proc/net/pf_ring/info >>> PF_RING Version : 6.3.0 >> (dev:9a327df3fab3b769c7494b898cf165bb24a9f6eb) >>> Total rings : 0 >>> >>> Standard (non DNA/ZC) Options >>> Ring slots : 4096 >>> Slot version : 16 >>> Capture TX : Yes [RX+TX] >>> IP Defragment : No >>> Socket Mode : Standard >>> Total plugins : 0 >>> Cluster Fragment Queue : 0 >>> Cluster Fragment Discard : 0 >>> >>> [root@suricata ~]# cat /proc/net/pf_ring/dev/enp5s0/info >>> Name: enp5s0 >>> Index: 6 >>> Address: 00:1B:21:39:A9:60 >>> Polling Mode: NAPI/ZC >>> Type: Ethernet >>> Family: Intel ixgbe 82598 >>> Max # TX Queues: 2 >>> # Used RX Queues: 2 >>> Num RX Slots: 32768 >>> Num TX Slots: 32768 >>> >>> [root@suricata ~]# ifconfig enp5s0 >>> enp5s0: flags=4163<UP,BROADCAST,RUNNING,MULTICAST> mtu 1500 >>> ether 00:1b:21:39:a9:60 txqueuelen 1000 (Ethernet) >>> RX packets 46315 bytes 39432447 (37.6 MiB) >>> RX errors 0 dropped 0 overruns 0 frame 0 >>> TX packets 0 bytes 0 (0.0 B) >>> TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 >>> device memory 0xdf2a0000-df2c0000 >>> >>> And heres how I'm loading modules etc. http://pastebin.com/rRSUHDug >>> >>> Command "pfcount -i enp5s0" works and also normal tcpdump is OK. >>> >>> Any suggestions or ideas how to get ZC working? Or should I use >> something else with suricata? >>> >>> _______________________________________________ >>> Ntop-misc mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc > > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
signature.asc
Description: Message signed with OpenPGP using GPGMail
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
