Hi Luca,
This the output:
root@probe-metro:/software/nprobe# ethtool -S dna3
NIC statistics:
rx_packets: 185827528
tx_packets: 0
rx_bytes: 167963082879
tx_bytes: 0
rx_broadcast: 1426570
tx_broadcast: 0
rx_multicast: 1421041
tx_multicast: 0
multicast: 1421041
collisions: 0
rx_crc_errors: 0
rx_no_buffer_count: 0
rx_missed_errors: 0
tx_aborted_errors: 0
tx_carrier_errors: 0
tx_window_errors: 0
tx_abort_late_coll: 0
tx_deferred_ok: 0
tx_single_coll_ok: 0
tx_multi_coll_ok: 0
tx_timeout_count: 0
rx_long_length_errors: 0
rx_short_length_errors: 0
rx_align_errors: 0
tx_tcp_seg_good: 0
tx_tcp_seg_failed: 0
rx_flow_control_xon: 0
rx_flow_control_xoff: 0
tx_flow_control_xon: 0
tx_flow_control_xoff: 0
rx_long_byte_count: 167963082879
tx_dma_out_of_sync: 0
lro_aggregated: 0
lro_flushed: 0
lro_recycled: 0
tx_smbus: 0
rx_smbus: 0
dropped_smbus: 0
os2bmc_rx_by_bmc: 0
os2bmc_tx_by_bmc: 0
os2bmc_tx_by_host: 0
os2bmc_rx_by_host: 0
rx_errors: 0
tx_errors: 0
tx_dropped: 0
rx_length_errors: 0
rx_over_errors: 0
rx_frame_errors: 0
rx_fifo_errors: 3709091
tx_fifo_errors: 0
tx_heartbeat_errors: 0
tx_queue_0_packets: 0
tx_queue_0_bytes: 0
tx_queue_0_restart: 0
rx_queue_0_packets: 0
rx_queue_0_bytes: 0
rx_queue_0_drops: 3709091
rx_queue_0_csum_err: 0
rx_queue_0_alloc_failed: 0
rx_queue_0_csum_good: 0
rx_queue_0_hdr_split: 0
rx_queue_0_lli_int: 0
rx_queue_0_pif_count: 0
Thanks in advance,
Iker
El 05/10/2012 17:16, Luca Deri escribió:
Iker
the problem is not on DNA I believe. Transaprent mode is useless with DNA. How
many queues do you have with igb? Try ethtool -S dnaX to see that
Luca
On Oct 5, 2012, at 4:00 PM, Iker Vázquez <[email protected]> wrote:
Thanks for the reply.
Unfortunatelly I not be able to download anything on the server until the next
week, because I only have ssh access and no Internet available on it. Maybe I
can do anyting else? I try too compiling the module igb-3.2.10-DNA with the
same result.
Best regards,
Iker
El 05/10/2012 15:43, Luca Deri escribió:
Iker,
1. it loooks that you enabled something on the nprobe code (e.g. performance
tracings).
2. nProbe has exported flows
05/Oct/2012 13:29:00 [nprobe.c:1497] Flow export stats: [17326831 bytes][70215
pkts][10182 flows]
3. this 42 does not look too nice
05/Oct/2012 13:29:00 [nprobe.c:1494] Processed packets: 351748 (max bucket
search: 42)
Can you please use a precompiled package at http://packages.ntop.org and see if
they work?
Regards Luca
On 10/05/2012 03:22 PM, Iker Vázquez wrote:
Hi all!
I'm having an issue capturing with Nprobe and the DNA driver IGB:
1- I have purchased one network card with 4 interfaces:
0d:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection
(rev 01)
0d:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection
(rev 01)
0e:00.0 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection
(rev 01)
0e:00.1 Ethernet controller: Intel Corporation 82576 Gigabit Network Connection
(rev 01)
2- I have compiled the igb-3.4.7-DNA module of the PF_RING-5.4.2 packet.
3- I start the pf_ring module with "transparent-mode=2" (1 and 0 too, but none
works)
When I perform the packet capture with nprobe, I can't see anything on the
output side. If I compile the module of the PF_RING_aware directory I am able
to see the out packets.
Here is the starting output:
05/Oct/2012 13:27:58 [nprobe.c:2877] WARNING: The output interfaceId is set to
0: did you forget to use -Q perhaps ?
05/Oct/2012 13:27:58 [nprobe.c:2880] WARNING: The input interfaceId is set to
0: did you forget to use -u perhaps ?
05/Oct/2012 13:27:58 [nprobe.c:2919] Welcome to nprobe v.6.9.5 ($Revision: 2304
$) for x86_64-unknown-linux-gnu with native PF_RING acceleration
05/Oct/2012 13:27:58 [nprobe.c:2938] Tracing enabled
05/Oct/2012 13:27:58 [nprobe.c:2976] WARNING: -n parameter is missing.
127.0.0.1:2055 will be used.
05/Oct/2012 13:27:58 [nprobe.c:1927] Exporting flows towards 127.0.0.1:2055
using UDP
05/Oct/2012 13:27:58 [plugin.c:129] Loading plugins...
05/Oct/2012 13:27:58 [plugin.c:138] No plugins found in ./plugins
05/Oct/2012 13:27:58 [plugin.c:144] Loading plugins [.so] from
/usr/local/lib/nprobe/plugins
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libdbPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libmysqlPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/librtpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libdbPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libdumpPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libdumpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libsmtpPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libsmtpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libsipPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libsipPlugin.so
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libhttpPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libhttpPlugin.so
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/librtpPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:478] Loaded
'/usr/local/lib/nprobe/plugins/libmysqlPlugin-6.9.5.so'
05/Oct/2012 13:27:58 [plugin.c:168] Plugin
/usr/local/lib/nprobe/plugins/libbgpPlugin-6.9.5.so also exists: skipping
/usr/local/lib/nprobe/plugins/libbgpPlugin.so
05/Oct/2012 13:27:58 [dumpPlugin.c:50] Initialized dump plugin
05/Oct/2012 13:27:58 [sipPlugin.c:94] Initialized SIP plugin
05/Oct/2012 13:27:58 [dbPlugin.c:72] Initializing DB plugin
05/Oct/2012 13:27:58 [dbPlugin.c:157] Attempting to connect to database as
[127.0.0.1][nprobe][dna3_][][]
05/Oct/2012 13:27:58 [database.c:94] MySQL initialized
05/Oct/2012 13:27:58 [database.c:101] Successfully connected to MySQL
[host:dbname:user:passwd]=[127.0.0.1:::]
05/Oct/2012 13:27:58 [httpPlugin.c:271] Initialized HTTP plugin
05/Oct/2012 13:27:58 [smtpPlugin.c:48] Initialized SMTP plugin
05/Oct/2012 13:27:58 [bgpPlugin.c:377] BGP plugin is disabled (--bgp-port has
not been specified)
05/Oct/2012 13:27:58 [rtpPlugin.c:106] Initialized RTP plugin
05/Oct/2012 13:27:58 [mysqlPlugin.c:118] Initialized MySQL plugin
05/Oct/2012 13:27:58 [plugin.c:195] 8 plugin(s) loaded [8 delete][8 packet].
05/Oct/2012 13:27:58 [nprobe.c:4343] Welcome to nprobe v.6.9.5 for
x86_64-unknown-linux-gnu
05/Oct/2012 13:27:58 [nprobe.c:3766] Compiling flow templates...
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin dump
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SIP
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL DB
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:725] Enabling plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin SMTP Protocol Dissector
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin BGP Update Listener
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin RTP
05/Oct/2012 13:27:58 [plugin.c:654] Scanning plugin MySQL Plugin
05/Oct/2012 13:27:58 [plugin.c:738] 1 plugin(s) enabled
05/Oct/2012 13:27:58 [database.c:206] Creating database schema...
05/Oct/2012 13:27:58 [database.c:208] Scanning templates
05/Oct/2012 13:27:58 [nprobe.c:4141] Each flow is 295 bytes long
05/Oct/2012 13:27:58 [nprobe.c:4142] The # packets per flow has been set to 3
Error Opening file /usr/local/nprobe/GeoIPASNum.dat
05/Oct/2012 13:27:58 [util.c:295] WARNING: Unable to load AS file
/usr/local/nprobe/GeoIPASNum.dat. AS support disabled
Error Opening file /usr/local/nprobe/GeoIPASNumv6.dat
05/Oct/2012 13:27:58 [util.c:304] WARNING: Unable to load AS IPv6 file
/usr/local/nprobe/GeoIPASNumv6.dat. AS IPv6 support disabled
05/Oct/2012 13:27:58 [nprobe.c:3259] Using packet capture length 1600
###################################################
# ERROR: You do not seem to have a valid DNA license for dna3 [Intel 1 Gbit igb
family].
# ERROR: Please get one at http://shop.ntop.org/.
###################################################
# We're now working in demo mode with packet capture
# and transmission limited to 5 minutes
###################################################
05/Oct/2012 13:27:58 [pro/pf_ring.c:221] Successfully open PF_RING v.5.4.2 on
device dna3 [snaplen=1600]
05/Oct/2012 13:27:58 [pro/pf_ring.c:230] Using PF_RING in-kernel accelerated
packet parsing
05/Oct/2012 13:27:58 [nprobe.c:4513] The flows hash has 32768 buckets
05/Oct/2012 13:27:58 [nprobe.c:4515] Flows older than 120 seconds will be
exported
05/Oct/2012 13:27:58 [nprobe.c:4518] Flows inactive for at least 30 seconds
will be exported
05/Oct/2012 13:27:58 [nprobe.c:4521] Expired flows will be checked every 30
seconds
05/Oct/2012 13:27:58 [nprobe.c:4523] Expired flows will not be queued for more
than 30 seconds
05/Oct/2012 13:27:58 [nprobe.c:4527] Exported flows with engineType 0 and
engineId 62
05/Oct/2012 13:27:58 [nprobe.c:4549] TCP TOS will be ignored and set to 0.
05/Oct/2012 13:27:58 [nprobe.c:4554] Flows ASs will not be computed
05/Oct/2012 13:27:58 [nprobe.c:4567] After 1 flow packets are sent, we'll delay
at least 1 ms
05/Oct/2012 13:27:58 [nprobe.c:4587] Flows will be emitted in NetFlow 9 format
05/Oct/2012 13:27:58 [nprobe.c:4608] Flow input interface index is set to 0
05/Oct/2012 13:27:58 [nprobe.c:4614] Flow output interface index is set to 0
05/Oct/2012 13:27:58 [nprobe.c:4630] Capturing packets from interface dna3
05/Oct/2012 13:27:58 [util.c:2206] nProbe changed user to 'nobody'
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin dump (no template is using
it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SIP (no template is using
it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL DB (no template is
using it)
05/Oct/2012 13:27:58 [plugin.c:622] Enabling plugin HTTP Protocol
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin SMTP Protocol Dissector
(no template is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin BGP Update Listener (no
template is using it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin RTP (no template is using
it)
05/Oct/2012 13:27:58 [plugin.c:618] Disabling plugin MySQL Plugin (no template
is using it)
05/Oct/2012 13:27:58 [nprobe.c:4725] Starting 1 packet fetch thread(s)
05/Oct/2012 13:27:58 [engine.c:2511] Starting bucket dequeue thread
05/Oct/2012 13:28:30 [nprobe.c:1632] ---------------------------------
05/Oct/2012 13:28:30 [nprobe.c:1633] Average traffic: [5.445 K pps][17 Mb/sec]
05/Oct/2012 13:28:30 [nprobe.c:1639] Current traffic: [5.445 K pps][17 Mb/sec]
05/Oct/2012 13:28:30 [nprobe.c:1644] Current flow export rate: [32.0 flows/sec]
05/Oct/2012 13:28:30 [nprobe.c:1647] Flow drops: [export queue too long=0][too
many flows=0]
05/Oct/2012 13:28:30 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %]
05/Oct/2012 13:28:30 [nprobe.c:1660] Flow Buckets:
[active=3788][allocated=3788][toBeExported=0][frags=0]
05/Oct/2012 13:28:30 [nprobe.c:1494] Processed packets: 174257 (max bucket
search: 38)
05/Oct/2012 13:28:30 [nprobe.c:1497] Flow export stats: [1249818 bytes][8297
pkts][2048 flows]
05/Oct/2012 13:28:30 [nprobe.c:1506] Flow drop stats: [0 bytes][0 pkts][0
flows]
05/Oct/2012 13:28:30 [nprobe.c:1511] Total flow stats: [1249818 bytes][8297
pkts][2048 flows]
05/Oct/2012 13:28:30 [pro/pf_ring.c:75] Packet stats (PF_RING): 174257/0 pkts
rcvd/dropped
05/Oct/2012 13:29:00 [nprobe.c:1632] ---------------------------------
05/Oct/2012 13:29:00 [nprobe.c:1633] Average traffic: [5.673 K pps][19 Mb/sec]
05/Oct/2012 13:29:00 [nprobe.c:1639] Current traffic: [5.916 K pps][21 Mb/sec]
05/Oct/2012 13:29:00 [nprobe.c:1644] Current flow export rate: [135.6 flows/sec]
05/Oct/2012 13:29:00 [nprobe.c:1647] Flow drops: [export queue too long=0][too
many flows=0]
05/Oct/2012 13:29:00 [nprobe.c:1651] Export Queue: 0/512000 [0.0 %]
05/Oct/2012 13:29:00 [nprobe.c:1660] Flow Buckets:
[active=3813][allocated=3813][toBeExported=0][frags=0]
05/Oct/2012 13:29:00 [nprobe.c:1494] Processed packets: 351748 (max bucket
search: 42)
05/Oct/2012 13:29:00 [nprobe.c:1497] Flow export stats: [17326831 bytes][70215
pkts][10182 flows]
05/Oct/2012 13:29:00 [nprobe.c:1506] Flow drop stats: [0 bytes][0 pkts][0
flows]
05/Oct/2012 13:29:00 [nprobe.c:1511] Total flow stats: [17326831 bytes][70215
pkts][10182 flows]
05/Oct/2012 13:29:00 [nprobe.c:1535] ---------------------------------
05/Oct/2012 13:29:00 [nprobe.c:1536] Decode ticks: 610.34 ticks/pkt [1.88 %]
05/Oct/2012 13:29:00 [nprobe.c:1541] Pkt Processing w/o Flow Creation: 32431.03
ticks/pkt [96.61 %]
05/Oct/2012 13:29:00 [nprobe.c:1546] Pkt Processing with Flow Creation:
28394.09 ticks/pkt [1.50 %]
05/Oct/2012 13:29:00 [nprobe.c:1551] Bucket Allocation: 7043.20 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1555] Bucket Malloc: 4285.31 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1559] Bucket Export: 1314003.38 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1563] Bucket Purge: 2301.61 ticks/bkt
05/Oct/2012 13:29:00 [nprobe.c:1566] Total ticks: 32417.86 ticks/pkt
05/Oct/2012 13:29:00 [nprobe.c:1568] ---------------------------------
05/Oct/2012 13:29:00 [pro/pf_ring.c:75] Packet stats (PF_RING): 351749/0 pkts
rcvd/dropped
05/Oct/2012 13:29:30 [nprobe.c:1632] ---------------------------------
Thanks in advance,
Iker
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
