Ack, spoke too soon... kernel: [89088.694285] traps: ntopng[26383] general protection ip:7f545462ae0c sp:7f54417f96e8 error:0 in libc-2.19.so[7f54545a8000+1bb000]
12 minutes 31 seconds of runtime Jerome ----- Original Message ----- From: "Jerome Backmeyer" <[email protected]> To: [email protected] Sent: Thursday, March 3, 2016 4:38:56 PM Subject: Re: [Ntop] (no subject) Not really but a bit of google goes a long way. I've removed and rebuilt the .ko for the current kernel modinfo /var/lib/dkms/pfring/6.3.0/3.13.0-79-generic/x86_64/module/pf_ring.ko filename: /var/lib/dkms/pfring/6.3.0/3.13.0-79-generic/x86_64/module/pf_ring.ko alias: net-pf-27 description: Packet capture acceleration and analysis author: ntop.org license: GPL srcversion: 5E66F2A01976FA528D3EA38 depends: vermagic: 3.13.0-79-generic SMP mod_unload modversions parm: min_num_slots:Min number of ring slots (uint) parm: perfect_rules_hash_size:Perfect rules hash size (uint) parm: transparent_mode:(deprecated) (uint) parm: enable_debug:Set to 1 to enable PF_RING debug tracing into the syslog (uint) parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint) parm: enable_frag_coherence:Set to 1 to handle fragments (flow coherence) in clusters (uint) parm: enable_ip_defrag:Set to 1 to enable IP defragmentation(only rx traffic is defragmentead) (uint) parm: quick_mode:Set to 1 to run at full speed but with upto one socket per interface (uint) The module error is gone. I restart ntopng, currently at 12 minutes of runtime and counting without a general protection error. That looks very hopeful... Thanks! ----- Original Message ----- From: "Alfredo Cardigliano" <[email protected]> To: [email protected] Sent: Thursday, March 3, 2016 4:09:32 PM Subject: Re: [Ntop] (no subject) Are you familiar with dkms? Could you try rebuilding it? Is seems to be tied to another kernel version. Alfredo > On 04 Mar 2016, at 00:04, Jerome Backmeyer <[email protected]> wrote: > > Well that's interesting > > modinfo /lib/modules/3.13.0-79-generic/updates/dkms/pf_ring.ko > filename: /lib/modules/3.13.0-79-generic/updates/dkms/pf_ring.ko > alias: net-pf-27 > description: Packet capture acceleration and analysis > author: ntop.org > license: GPL > srcversion: 5E66F2A01976FA528D3EA38 > depends: > vermagic: 3.13.0-77-generic SMP mod_unload modversions > parm: min_num_slots:Min number of ring slots (uint) > parm: perfect_rules_hash_size:Perfect rules hash size (uint) > parm: transparent_mode:(deprecated) (uint) > parm: enable_debug:Set to 1 to enable PF_RING debug tracing into > the syslog (uint) > parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint) > parm: enable_frag_coherence:Set to 1 to handle fragments (flow > coherence) in clusters (uint) > parm: enable_ip_defrag:Set to 1 to enable IP defragmentation(only > rx traffic is defragmentead) (uint) > parm: quick_mode:Set to 1 to run at full speed but with upto one > socket per interface (uint) > > > ----- Original Message ----- > From: "Alfredo Cardigliano" <[email protected]> > To: [email protected] > Sent: Thursday, March 3, 2016 3:48:55 PM > Subject: Re: [Ntop] (no subject) > > Please locate the module you have installed with: > > $ updatedb && locate pf_ring.ko > > and provide us the output of: > > $ modinfo <path>/pf_ring.ko > > It should be: > > $ modinfo /lib/modules/$(uname -r)/kernel/net/pf_ring/pf_ring.ko > > Alfredo > >> On 03 Mar 2016, at 23:38, Jerome Backmeyer <[email protected]> wrote: >> >> Hi Alfredo >> >> I installed using the apt repo packages from >> http://packages.ntop.org/apt/14.04/ x64/ >> paravirtualized ubuntu server version 14.04, running on citrix Xen Server 6.5 >> >> >> Package: pfring >> Versions: >> 6.3.0-476 (/var/lib/apt/lists/packages.ntop.org_apt_14.04_x64_Packages) >> Description Language: >> File: >> /var/lib/apt/lists/packages.ntop.org_apt_14.04_x64_Packages >> MD5: f892cc42e50eb07786ecb03073b119f4 >> >> 6.3.0-473 (/var/lib/dpkg/status) >> Description Language: >> File: /var/lib/dpkg/status >> MD5: a532d67553054702ed5d4bd58bd675f6 >> >> >> Reverse Depends: >> ntopng,pfring 6.3.0-473 >> n2disk,pfring 6.3.0-476 >> ntopng,pfring 6.3.0-476 >> nprobe,pfring 6.3.0-476 >> Dependencies: >> 6.3.0-476 - pfring-dkms (5 6.3.0) >> 6.3.0-473 - pfring-dkms (5 6.3.0) >> >> >> Any guidance would be very appreciated. >> >> Thanks >> >> >> ----- Original Message ----- >> From: "Alfredo Cardigliano" <[email protected]> >> To: [email protected] >> Sent: Thursday, March 3, 2016 3:22:54 PM >> Subject: Re: [Ntop] (no subject) >> >> Hi Jerome >> how did you install pf_ring on this machine? Please provide more info about >> OS, installation method, version, etc. >> >> Alfredo >> >>> On 29 Feb 2016, at 19:16, Jerome Backmeyer <[email protected]> wrote: >>> >>> Yeah, I suspect there is something off with my setup, but I can't figure >>> what. >>> >>> It is running on a Xen Server virtual machine, not usre if that would have >>> any impact. If I setup a nProbe and start ntopng with -i zmq then it runs >>> fine, but if it's directly capturing it crashes with the kernel general >>> protection fault. >>> >>> I also get this error: kernel: [86211.917173] pf_ring: disagrees about >>> version of symbol module_layout >>> >>> >>> >>> ----- Original Message ----- >>> From: "Thomas Leathley" <[email protected]> >>> To: [email protected] >>> Sent: Friday, February 26, 2016 5:26:53 PM >>> Subject: Re: [Ntop] (no subject) >>> >>> I have no issues with a fresh install on 14.04.03 and all the latest >>> apt-get updates on the whole stack. >>> >>> On Fri, Feb 26, 2016 at 3:35 PM, Jerome Backmeyer < [email protected] > >>> wrote: >>> >>> >>> Hi, >>> >>> I just got ntopng running, but I can't seem to keep it up for more than a >>> few minutes. It'll start I can log into the web interface, then then it >>> dies with this error: >>> kernel: [86400.616165] traps: ntopng[23260] general protection >>> ip:7f7d53cf2e0c sp:7f7d417f96e8 error:0 in libc-2.19.so >>> >>> I've installed it from packages on ubuntu 14.04. >>> >>> Has anyone run into this before or have a guess as to where I've gone wrong? >>> >>> Jerome >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >>> >>> >>> >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >>> >>> _______________________________________________ >>> Ntop mailing list >>> [email protected] >>> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
