Sure!
I've created another VM and installed pf_ring from svn, this one seems
to work better - after loading it with just "modprobe pf_ring" and
configuring and starting Bro, the connectivity is maintained.
[ 1232.920391] [PF_RING] Welcome to PF_RING 6.0.3 ($Revision: 9017$)
[ 1232.920391] (C) 2004-14 ntop.org
[ 1232.920410] [PF_RING] registered /proc/net/pf_ring/
[ 1232.920412] NET: Registered protocol family 27
[ 1232.920417] [PF_RING] Min # ring slots 4096
[ 1232.920418] [PF_RING] Slot version 16
[ 1232.920420] [PF_RING] Capture TX Yes [RX+TX]
[ 1232.920421] [PF_RING] IP Defragment No
[ 1232.920422] [PF_RING] Initialized correctly
Unfortunately Bro workers crash very fast (usually in less than one
minute). The problem seems to be in the pf_ring's version of libpcap -
that's where the crash happens.
Stack trace below.
#0 0x00007f86b86ba6b5 in pcap_read_packet (handle=0x33fe610,
callback=0x7f86b86c2240 <pcap_oneshot>,
userdata=0x7ffff4ea9c80 "`\342?\003") at ./pcap-linux.c:1807
1807 for (cmsg = CMSG_FIRSTHDR(&msg); cmsg; cmsg = CMSG_NXTHDR(&msg, cmsg)) {
(gdb) bt
#0 0x00007f86b86ba6b5 in pcap_read_packet (handle=0x33fe610,
callback=0x7f86b86c2240 <pcap_oneshot>,
userdata=0x7ffff4ea9c80 "`\342?\003") at ./pcap-linux.c:1807
#1 0x00007f86b86c28ae in pcap_next (p=<optimized out>, h=<optimized
out>) at ./pcap.c:218
#2 0x0000000000770b00 in PktSrc::ExtractNextPacket (this=0x33fe220)
at /home/mpurzynski/bro-2.3.2/src/PktSrc.cc:78
#3 0x0000000000770d40 in PktSrc::NextTimestamp (this=0x33fe220,
local_network_time=0x7ffff4ea9d60)
at /home/mpurzynski/bro-2.3.2/src/PktSrc.cc:121
#4 0x0000000000758d15 in IOSourceRegistry::FindSoonest (this=0xe396e0
<io_sources>, ts=0x7ffff4ea9f68)
at /home/mpurzynski/bro-2.3.2/src/IOSource.cc:151
#5 0x0000000000762475 in net_run () at
/home/mpurzynski/bro-2.3.2/src/Net.cc:370
#6 0x00000000006ba680 in main (argc=18, argv=0x7ffff4eaa568) at
/home/mpurzynski/bro-2.3.2/src/main.cc:1168
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
