Re: [Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Alfredo Cardigliano
digliano > Gesendet: Freitag, 13. Dezember 2019 15:01 > An: ntop-misc@listgateway.unipi.it > Betreff: Re: [Ntop-misc] n2disk: 100Gbps? > > Hi Marcel > there are a few options, for n2disk we recommend Napatech or Fiberblaze as > they support native bulk PCAP mode. > As of the st

Re: [Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Lüthi Marcel FUB
ntop-misc@listgateway.unipi.it Betreff: Re: [Ntop-misc] n2disk: 100Gbps? Hi Marcel there are a few options, for n2disk we recommend Napatech or Fiberblaze as they support native bulk PCAP mode. As of the storage, you can use n2disk to write to multiple NVMe disks in parallel (I do not have a specifi

Re: [Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Alfredo Cardigliano
> > -Ursprüngliche Nachricht- > Von: ntop-misc-boun...@listgateway.unipi.it > Im Auftrag von Alfredo Cardigliano > Gesendet: Freitag, 13. Dezember 2019 14:40 > An: ntop-misc@listgateway.unipi.it > Betreff: Re: [Ntop-misc] n2disk: 100Gbps? > > Hi Marcel > fm10k

Re: [Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Lüthi Marcel FUB
@listgateway.unipi.it Betreff: Re: [Ntop-misc] n2disk: 100Gbps? Hi Marcel fm10k-based adapters support 100G connectivity, however they are not optimized to handle full 100Gbps. Please consider using FPGA adapters if you want to record 100Gbps to disk (and a good NVMe disks array). Regards Alfredo > On 13

Re: [Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Alfredo Cardigliano
Hi Marcel fm10k-based adapters support 100G connectivity, however they are not optimized to handle full 100Gbps. Please consider using FPGA adapters if you want to record 100Gbps to disk (and a good NVMe disks array). Regards Alfredo > On 13 Dec 2019, at 14:22, Lüthi Marcel FUB wrote: > > Hi.

[Ntop-misc] n2disk: 100Gbps?

2019-12-13 Thread Lüthi Marcel FUB
Hi. We acquired a "Silicom PE3100G2DQIR-QX4 V:1.4" which is based on Intel FM10420. As described in the PF_RING guide (https://www.ntop.org/guides/pf_ring/zc.html#supported-cards), FM10420 is supported. Therefore, can we assume that 100Gbps can be recorded with n2disk? (a corresponding hardware

Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-18 Thread Lüthi Marcel FUB
95'033.90 pps/9.54 Gbps][average 14'003'836.88 pps/9.41 Gbps][total 112'033'972.00 pkts] TX rate: [current 14'182'567.94 pps/9.53 Gbps][average 14'017'274.59 pps/9.42 Gbps][total 121'258'144.00 pkts] Sent 121258144 packets [root@myhost]# Von:

Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-18 Thread Alfredo Cardigliano
; Family: Standard NIC > # Bound Sockets: 1 > TX Queues:32 > RX Queues:32 > > > Regards, > Marcel > > > > Von: ntop-misc-boun...@listgateway.unipi.it > [mailto:ntop-misc-boun...@listgateway.unipi.it] Im Auftrag von Alfredo > Cardigliano &g

Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-18 Thread Lüthi Marcel FUB
...@listgateway.unipi.it] Im Auftrag von Alfredo Cardigliano Gesendet: Donnerstag, 18. Mai 2017 10:01 An: ntop-misc@listgateway.unipi.it Betreff: Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC Hi Marcel please provide “cat /proc/net/pf_ring/dev/eno1/info” Alfredo

Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-18 Thread Alfredo Cardigliano
Hi Marcel please provide “cat /proc/net/pf_ring/dev/eno1/info” Alfredo > On 17 May 2017, at 16:17, Lüthi Marcel FUB wrote: > > Hello. > > I want to maximize the performance for n2disk/disk2n and use PF_RING ZC. > PF_RING only is working as expected, but this doesn't: > > [root@myhost]# pfcoun

Re: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-17 Thread Lüthi Marcel FUB
...@listgateway.unipi.it] Gesendet: Mittwoch, 17. Mai 2017 16:18 An: ntop-misc@listgateway.unipi.it Betreff: [Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC Hello. I want to maximize the performance for n2disk/disk2n and use PF_RING ZC. PF_RING only is working as expected, but this doesn't:

[Ntop-misc] n2disk/disk2n: Problem with PF_RING ZC

2017-05-17 Thread Lüthi Marcel FUB
Hello. I want to maximize the performance for n2disk/disk2n and use PF_RING ZC. PF_RING only is working as expected, but this doesn't: [root@myhost]# pfcount -i zc:eno1 pfring_open error [No such device] (pf_ring not loaded or interface zc:eno1 is down ?) [root@myhost]# pfsend -i zc:eno1 Sendin

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-18 Thread Spransy, Derek
Thanks Alfredo, all is working as expected now! From: ntop-misc-boun...@listgateway.unipi.it on behalf of Alfredo Cardigliano Sent: Thursday, November 17, 2016 5:49 AM To: ntop-misc@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-17 Thread Alfredo Cardigliano
Thanks, > Derek > From: ntop-misc-boun...@listgateway.unipi.it > on behalf of Alfredo Cardigliano > > Sent: Tuesday, November 15, 2016 9:01 AM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel > 2.6.32-642.4.2.el6.x86_64 >

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-16 Thread Spransy, Derek
this needs to be added for node 1 as well? Thanks, Derek From: ntop-misc-boun...@listgateway.unipi.it on behalf of Alfredo Cardigliano Sent: Tuesday, November 15, 2016 9:01 AM To: ntop-misc@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 K

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-15 Thread Alfredo Cardigliano
Hi Derek this seems to be related to hugepages, could you provide more info about memory in your system including: cat /sys/devices/system/node/node*/meminfo | grep Huge Alfredo > On 14 Nov 2016, at 15:13, Spransy, Derek wrote: > > Hi Alfredo, > > Yes the behavior is the same as before: > >

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-14 Thread Spransy, Derek
pfring_zc_0", O_RDWR|O_CREAT, 0755) = 7 flock(7, LOCK_SH) = 0 mmap(NULL, 134217728, PROT_READ|PROT_WRITE, MAP_SHARED|MAP_LOCKED, 7, 0) = 0x7fb03320 --- SIGBUS {si_signo=SIGBUS, si_code=BUS_ADRERR, si_addr=0x7fb033200018} --- +++ killed by SIGBUS (core dumped) +++

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-13 Thread Alfredo Cardigliano
ardigliano > > Sent: Friday, November 11, 2016 11:19 AM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel > 2.6.32-642.4.2.el6.x86_64 > > Hi Derek > if you check my output, I am installing latest stable version, which I

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-11 Thread Spransy, Derek
i.it<mailto:ntop-misc-boun...@listgateway.unipi.it> mailto:ntop-misc-boun...@listgateway.unipi.it>> on behalf of Alfredo Cardigliano mailto:cardigli...@ntop.org>> Sent: Friday, November 11, 2016 10:34 AM To: ntop-misc@listgateway.unipi.it<mailto:ntop-misc@listgateway.unipi.i

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-11 Thread Alfredo Cardigliano
> Sent: Friday, November 11, 2016 10:34 AM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel > 2.6.32-642.4.2.el6.x86_64 > > Hi Derek > I just installed a Centos6 system and it is working for me: > > [root@CentOS_Dev ~]#

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-11 Thread Spransy, Derek
ubject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Hi Derek I just installed a Centos6 system and it is working for me: [root@CentOS_Dev ~]# cat /etc/centos-release CentOS release 6.8 (Final) [root@CentOS_Dev ~]# uname -a Linux CentOS_Dev 2.6.32-642.6.2.el6.x86_64 #1 S

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-11 Thread Alfredo Cardigliano
Hi Derek I just installed a Centos6 system and it is working for me: [root@CentOS_Dev ~]# cat /etc/centos-release CentOS release 6.8 (Final) [root@CentOS_Dev ~]# uname -a Linux CentOS_Dev 2.6.32-642.6.2.el6.x86_64 #1 SMP Wed Oct 26 06:52:09 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux [root@CentOS_De

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-11 Thread Spransy, Derek
ng before reinstalling > everything from RPMs (via yum). > > Thanks, > Derek > > > From: ntop-misc-boun...@listgateway.unipi.it > on behalf of Luca Deri > > Sent: Thursday, November 10, 2016 3:33 PM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-mi

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-10 Thread Luca Deri
(via yum). > > Thanks, > Derek > > > From: ntop-misc-boun...@listgateway.unipi.it > on behalf of Luca Deri > > Sent: Thursday, November 10, 2016 3:33 PM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel > 2.6

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-10 Thread Spransy, Derek
@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Derek how did you update? Via yum? Luca On 10 Nov 2016, at 20:11, Spransy, Derek mailto:dspr...@emory.edu>> wrote: Hi Alfredo, I updated, but now I've run into a different problem. It

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-10 Thread Luca Deri
m: ntop-misc-boun...@listgateway.unipi.it > on behalf of Alfredo Cardigliano > > Sent: Thursday, November 10, 2016 1:07 PM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel > 2.6.32-642.4.2.el6.x86_64 > > Hi Derek > I tought

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-10 Thread Spransy, Derek
nipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Hi Derek I tought I updated you on this, but it seems it is not the case, could you try using -R with latest release? Best Regards Alfredo On 3 Nov 2016, at 18:53, Alfredo Cardigliano mailto:cardi

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-10 Thread Alfredo Cardigliano
redo >> Cardigliano mailto:cardigli...@ntop.org>> >> Sent: Thursday, November 3, 2016 1:48 PM >> To: ntop-misc@listgateway.unipi.it <mailto:ntop-misc@listgateway.unipi.it> >> Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel >> 2.6.32-642.4.2

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Alfredo Cardigliano
; an issue with my config issue or a bug? > > Thanks, > Derek > > From: ntop-misc-boun...@listgateway.unipi.it > on behalf of Alfredo Cardigliano > > Sent: Thursday, November 3, 2016 1:48 PM > To: ntop-misc@listgateway.unipi.it > Subject: Re: [Ntop-misc] n2disk dumpin

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Spransy, Derek
1:48 PM To: ntop-misc@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Derek please try running n2disk without "-R 8,9,10" Alfredo On 3 Nov 2016, at 18:27, Spransy, Derek mailto:dspr...@emory.edu>> wrote: Sure, here&#x

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Alfredo Cardigliano
Derek please try running n2disk without "-R 8,9,10” Alfredo > On 3 Nov 2016, at 18:27, Spransy, Derek wrote: > > Sure, here's the config: > > -i zc:eth5 > -o /data1/captures > -b 3072 > -p 1024 > -q 1 > -S 0 > -c 6 > -R 8,9,10 > -w 7 > -z 12 > -I > -A /data1/index > --max-num-files 43000 > -P=

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Spransy, Derek
ntop-misc-boun...@listgateway.unipi.it on behalf of Alfredo Cardigliano Sent: Thursday, November 3, 2016 12:07 PM To: ntop-misc@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Please provide the n2disk configuration and the output of n

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Alfredo Cardigliano
% dropped] > [2'608'527 pkts rcvd][2'406'777'320 bytes rcvd][869'438.57 pkt/sec][6'417.55 > Mbit/sec] > ===== > Actual Stats: [680'842 pkts rcvd][1'000.06 ms][680'796.38 pps][5.02 Gbps] > = > >

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Spransy, Derek
[2'406'777'320 bytes rcvd][869'438.57 pkt/sec][6'417.55 Mbit/sec] = Actual Stats: [680'842 pkts rcvd][1'000.06 ms][680'796.38 pps][5.02 Gbps] = ________ From: ntop-misc-boun...@listgateway.un

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-03 Thread Alfredo Cardigliano
0C:34 > Polling Mode: NAPI/ZC > Type: Ethernet > Family:Intel ixgbe 82599 > Max # TX Queues: 1 > # Used RX Queues: 1 > Num RX Slots: 32768 > Num TX Slots: 32768 > > Thanks, > Derek > > > > From: ntop-misc-boun...@

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-02 Thread Spransy, Derek
, Derek From: ntop-misc-boun...@listgateway.unipi.it on behalf of Alfredo Cardigliano Sent: Wednesday, November 2, 2016 6:40 PM To: ntop-misc@listgateway.unipi.it Subject: Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64 Hi Derek could

Re: [Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-02 Thread Alfredo Cardigliano
Hi Derek could you double check that all the .ko modules (drivers and pf_ring kernel module) have been reinstalled by DKMS and reloaded? Alternatively, any chance to get ssh access to the machine? Alfredo > On 2 Nov 2016, at 21:18, Spransy, Derek wrote: > > Hello, > > Today we upgraded our RH

[Ntop-misc] n2disk dumping with RHEL6 Kernel 2.6.32-642.4.2.el6.x86_64

2016-11-02 Thread Spransy, Derek
Hello, Today we upgraded our RHEL6 n2disk box to kernel 2.6.32-642.4.2.el6.x86_64 (addresses the dirty cow vulnerability). After the upgrade n2disk is dumping. I went ahead and upgraded n2disk (2.6.161102) and pfring (6.4.1-960) to their latest available stable versions and ran into the same i

Re: [Ntop-misc] n2disk pcap output structure

2016-04-08 Thread Jeremy Ashton
Yes, that is correct. On Fri, Apr 8, 2016 at 6:31 AM, Alfredo Cardigliano wrote: > Hi Jeremy > in essence at the moment it creates the structure below, but you want the > file numeration to continue on the next dir instead of restarting from 1, > did I understand correctly? > > /pcaps/1/1.pcap >

Re: [Ntop-misc] n2disk pcap output structure

2016-04-08 Thread Alfredo Cardigliano
Hi Jeremy in essence at the moment it creates the structure below, but you want the file numeration to continue on the next dir instead of restarting from 1, did I understand correctly? /pcaps/1/1.pcap /pcaps/1/2.pcap … /pcaps/1/1000.pcap /pcaps/2/1.pcap /pcaps/2/2.pcap … /pcaps/2/1000.pcap … A

Re: [Ntop-misc] n2disk pcap output structure

2016-04-07 Thread Jeremy Ashton
To clarify, I am looking for: /pcaps/1/file-1.pcap /pcaps/1/file-2.pcap … /pcaps/1/file-1000.pcap /pcaps/2/file-1001.pcap /pcaps/2/file-1002.pcap … /pcaps/2/file-2000.pcap … Sorry for the double message. On Thu, Apr 7, 2016 at 3:10 PM, Jeremy Ashton wrote: > This does not appear to work. I no

Re: [Ntop-misc] n2disk pcap output structure

2016-04-07 Thread Jeremy Ashton
This does not appear to work. I now have an unlimited number of directories with 1000 files in each. But, the file number is incremented after each 1000. aka same problem. On Thu, Apr 7, 2016 at 3:53 AM, Alfredo Cardigliano wrote: > Hi Jeremy > please update to latest version from the dev rep

Re: [Ntop-misc] n2disk pcap output structure

2016-04-07 Thread Alfredo Cardigliano
Hi Jeremy please update to latest version from the dev repo, you can specify -n -1 to create unlimited directories, please test it and let as know if it behaves as expected. Alfredo > On 06 Apr 2016, at 15:55, Jeremy Ashton wrote: > > Yes, I am currently dealing with the long term retention i

Re: [Ntop-misc] n2disk help output

2016-04-06 Thread Alfredo Cardigliano
This is something we are working on and will be available soon, stay tuned. Alfredo > On 06 Apr 2016, at 16:06, Jeremy Ashton wrote: > > I would assume there is no way to enable conditional packet slicing. i.e. > For example, during large encrypted data transfers, capture the summary > infor

Re: [Ntop-misc] n2disk help output

2016-04-06 Thread Jeremy Ashton
I would assume there is no way to enable conditional packet slicing. i.e. For example, during large encrypted data transfers, capture the summary information but drop the payload itself (scp, https). On Wed, Apr 6, 2016 at 9:35 AM, Alfredo Cardigliano wrote: > Hi Jeremy > > > On 05 Apr 2016, at

Re: [Ntop-misc] n2disk pcap output structure

2016-04-06 Thread Jeremy Ashton
Yes, I am currently dealing with the long term retention issues by cleaning up the disk space. On Wed, Apr 6, 2016 at 9:37 AM, Alfredo Cardigliano wrote: > Hi Jeremy > if I understand correctly you do not want to restart file numaration, this > means that you have to move old files using an exte

Re: [Ntop-misc] n2disk pcap output structure

2016-04-06 Thread Alfredo Cardigliano
Hi Jeremy if I understand correctly you do not want to restart file numaration, this means that you have to move old files using an external script, otherwise the storage will be full at some point and n2disk will not be able to write new files anymore. Correct? Alfredo > On 05 Apr 2016, at 20

Re: [Ntop-misc] n2disk help output

2016-04-06 Thread Alfredo Cardigliano
Hi Jeremy > On 05 Apr 2016, at 19:43, Jeremy Ashton wrote: > > I noticed the following arguments for n2disk but could not find documentation > on them: > > [—packet-slicing|-0] | Slice packet after the > specified header. This can be used to save only a portion of the captured pack

[Ntop-misc] n2disk pcap output structure

2016-04-05 Thread Jeremy Ashton
I am trying to create a directory structure like the following: /pcap/0/ /pcap/1/ … /pcap/n/ Where each sub-directory contains 1,000 files. I would like to do this without having to restart the file numbering. That way I can have a -.pcap which will always increment. Any thoughts as to how I c

[Ntop-misc] n2disk help output

2016-04-05 Thread Jeremy Ashton
I noticed the following arguments for n2disk but could not find documentation on them: [—packet-slicing|-0] | Slice packet after the specified header. [—fast-filter|-F]| Faster replacement for BPF ingress packet filter. [--archive-directory|-O] | Directory w

Re: [Ntop-misc] n2disk

2016-01-01 Thread Mark Stingley
That did the trick. n2disk Version 2.3.160101 (r4474) installed perfectly via apt-get and is functional now. Thanks again. On Thu, Dec 31, 2015 at 2:15 AM, Luca Deri wrote: > Hi Mark, > we have fixed the dependency and a new package is currently being build (it > will be available within 20 m

Re: [Ntop-misc] n2disk

2016-01-01 Thread Mark Stingley
Excellent. You and your team are awesome (as usual). Have a very happy, safe, and prosperous New Year. Thanks. On Thu, Dec 31, 2015 at 2:15 AM, Luca Deri wrote: > Hi Mark, > we have fixed the dependency and a new package is currently being build (it > will be available within 20 mins) > > Rega

Re: [Ntop-misc] n2disk

2015-12-31 Thread Luca Deri
Hi Mark, we have fixed the dependency and a new package is currently being build (it will be available within 20 mins) Regards Luca > On 31 Dec 2015, at 04:03, Mark Stingley wrote: > > I attempted to install n2disk on an AMD64 Debian Jessie system via: > > n2disk_2.3.151230-4473_amd64.deb >

[Ntop-misc] n2disk

2015-12-30 Thread Mark Stingley
I attempted to install n2disk on an AMD64 Debian Jessie system via: n2disk_2.3.151230-4473_amd64.deb Installation failed with the following error: n2disk depends on libnl1; however: Package libnl1 is not installed. Please note that libnl1 is no longer in distribution. The only packages list

Re: [Ntop-misc] N2DISK Error

2015-11-10 Thread Ohad Kleinman
ad PF_RING. Exiting Thanks. Ohad *From:* ntop-misc-boun...@listgateway.unipi.it [mailto: ntop-misc-boun...@listgateway.unipi.it] *On Behalf Of *Yuri Francalacci *Sent:* Tuesday, November 10, 2015 5:13 PM *To:* ntop-misc@listgateway.unipi.it *Subject:* Re: [Ntop-misc] N2DISK Error

Re: [Ntop-misc] N2DISK Error

2015-11-10 Thread Yuri Francalacci
o:ntop-misc-boun...@listgateway.unipi.it>] On Behalf Of Yuri Francalacci > Sent: Monday, November 09, 2015 7:54 PM > To: ntop-misc@listgateway.unipi.it <mailto:ntop-misc@listgateway.unipi.it> > Subject: Re: [Ntop-misc] N2DISK Error > > If there is no output the module is not

Re: [Ntop-misc] N2DISK Error

2015-11-10 Thread Ohad Kleinman
-boun...@listgateway.unipi.it] *On Behalf Of *Yuri Francalacci *Sent:* Monday, November 09, 2015 7:54 PM *To:* ntop-misc@listgateway.unipi.it *Subject:* Re: [Ntop-misc] N2DISK Error If there is no output the module is not loaded. The command you have to run if in the init.d directory is

Re: [Ntop-misc] N2DISK Error

2015-11-09 Thread Yuri Francalacci
If there is no output the module is not loaded. The command you have to run if in the init.d directory is ./pf_ring start Or even better use the full path as said in the previous mail. Yuri ### Yuri Francalacci - y...@ntop.org - http://www.ntop

Re: [Ntop-misc] N2DISK Error

2015-11-09 Thread Ohad Kleinman
: [Ntop-misc] N2DISK Error connect to the system console and run # lsmod | grep pf_ring If there is no output, this means that the the pf_ring module is not loaded, hence you have to run (at least) # /etc/init.d/pf_ring start Once loaded the module (re-run the lsmod as above), retry the

Re: [Ntop-misc] N2DISK Error

2015-11-08 Thread Yuri Francalacci
connect to the system console and run # lsmod | grep pf_ring If there is no output, this means that the the pf_ring module is not loaded, hence you have to run (at least) # /etc/init.d/pf_ring start Once loaded the module (re-run the lsmod as above), retry the n2disk program. Yuri

[Ntop-misc] N2DISK Error

2015-11-08 Thread Ohad Kleinman
We have an Ubuntu machine with Nbox software that includes nprobe, Ntopng, n2disk stc. The n2disk used to work for us, but now when starting the n2disk after few seconds the status is changed to off. When looking in the log file I can see the following lines: 08/Nov/2015 17:39:49 WARNING: In

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Mikhail Sokolov
Of course, forgot about -i key Thanks one more time. Mikhail Четверг, 8 октября 2015, 11:12 +02:00 от Alfredo Cardigliano : > >pfcount -i veth1 > >>On 08 Oct 2015, at 11:11, Mikhail Sokolov < ins...@mail.ru > wrote: >>I see. >>Many thanks. >> >>Failed to run pfcount >>root@parallels-Parallels-

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Alfredo Cardigliano
pfcount -i veth1 > On 08 Oct 2015, at 11:11, Mikhail Sokolov wrote: > > I see. > Many thanks. > > Failed to run pfcount > root@parallels-Parallels-Virtual-Platform:~# ip netns exec GEN pfcount veth1 > pfring_open error [No such device] (pf_ring not loaded or interface eth0 is > down ?) > > S

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Mikhail Sokolov
I see. Many thanks. Failed to run pfcount root@parallels-Parallels-Virtual-Platform:~# ip netns exec GEN pfcount veth1 pfring_open error [No such device] (pf_ring not loaded or interface eth0 is down ?) Should I do something prior to run it? Mikhail >Четверг, 8 октября 2015, 11:03 +02:00 от A

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Alfredo Cardigliano
Hi Mikhail ok I understand, the reason is that n2disk is configured to capture rx direction only (it is usually *not* used to capture traffic generated by the host it runs on). If you are using n2disk just as sample application to verify packet capture, please use pfcount instead. Alfredo > O

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Mikhail Sokolov
Here is a listing of staring n2disk root@parallels-Parallels-Virtual-Platform:~# ip netns exec NET n2disk -i veth2 -o /tmp/ 08/Oct/2015 11:38:10 [n2disk_zc.c:4203] WARNING: Invalid license found for 7114BE24760661D8 08/Oct/2015 11:38:10 [n2disk_zc.c:4204] WARNING: (See /etc/n2disk.license) [Mi

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Mikhail Sokolov
Hi, Alfredo, my setup - Ubuntu 12.04 in VM using Parallels Desktop. I want to simulate point to point link inside one VM with some delay and loss. Delay and loss are simulated using netem kernel module (tc utility is used to config it). There are 3 namespaces in my config GEN, NET and REC. GEN i

Re: [Ntop-misc] n2disk and network namespace

2015-10-08 Thread Alfredo Cardigliano
Hi Mikhail please provide more details about your setup, including topology, pf_ring configuration, n2disk command. Thank you Alfredo > On 08 Oct 2015, at 10:01, Mikhail Sokolov wrote: > > Hi. > I have some issue with using n2disk in the network namespace environment. > Here is a config I have

[Ntop-misc] n2disk and network namespace

2015-10-08 Thread Mikhail Sokolov
Hi. I have some issue with using n2disk in the network namespace environment. Here is a config I have: #!/bin/bash # add the namespaces ip netns add GEN ip netns add NET ip netns add REC # create the veth pair ip link add veth1 type veth peer name veth2 ip link add veth3 type veth peer name veth4

Re: [Ntop-misc] n2Disk and PF_RING

2014-10-03 Thread Francalacci Yuri
Check ntop web site for pfring source code. N2disk is not available in source format. Regards, Yuri Sent from my iPhone > Il giorno 03/ott/2014, alle ore 13:10, "Farah Braiteh (Student)" > ha scritto: > > Hello everyone, > > > I have the latest version of ntopng and nprobe, and I've been t

[Ntop-misc] n2Disk and PF_RING

2014-10-03 Thread Farah Braiteh (Student)
Hello everyone, I have the latest version of ntopng and nprobe, and I've been trying to download n2Disk and pfring as rpm packages from the following link: http://www.nmon.net/packages/Packages/ ; however, I am not able to activate such files. I wonder if someone can send me the source code

Re: [Ntop-misc] n2disk findPacketsWithIndex BPF question

2013-09-20 Thread Alfredo Cardigliano
Hi Jeffrey could you provide us .pcap and .idx in order to reproduce the issue? Alfredo On Sep 20, 2013, at 7:39 PM, Jeffrey Savoy wrote: > Hello All > > I seem to be having issues returning any results with n2disk > findPacketsWithIndex searches. The issue appears when I use -f option to >

[Ntop-misc] n2disk findPacketsWithIndex BPF question

2013-09-20 Thread Jeffrey Savoy
Hello All I seem to be having issues returning any results with n2disk findPacketsWithIndex searches. The issue appears when I use -f option to match only certain packets, e.g. -f "port 80". When I run the command with known port 80 traffic, over a valid time range and verified by manually re

[Ntop-misc] N2Disk inquiry

2012-07-09 Thread Keith Fryklund
Hello, I'm a fairly new user to ntop and so far I think it's a great product. I have a question regarding the N2Disk feature included with the ntop appliances (nbox, nrecorder, etc.). Is N2Disk available for download, or does it only come with the purchase of an ntop appliance? I'd like t