Dear Luca,
I've updated my kernel 2.6.22.3 with PF_RING rev 3295 and now I have good
news: Work Fine! Take a look:
192.168.0.5 = My desktop
192.168.0.121 = Debian Etch - linux 2.6.22.3 pfring support.
# Desktop
desktop:/~ >/sbin/ifconfig eth0
eth0 Encapsulamento do Link: Ethernet Endereço de HW 00:0F:EA:B6:0F:9D
inet end.: 192.168.0.5 Bcast:192.168.0.255 Masc:255.255.255.0
UP BROADCASTRUNNING MULTICAST MTU:1500 Métrica:1
RX packets:36292903 errors:0 dropped:0 overruns:0 frame:0
TX packets:193132297 errors:0 dropped:0 overruns:0 carrier:0
colisões:0 txqueuelen:1000
RX bytes:4188355932 (3.9 GiB) TX bytes:2772711829 (2.5 GiB)
IRQ:185 Endereço de E/S:0xc400
desktop:/~ >ping 192.168.0.121 -c 1
PING 192.168.0.121 (192.168.0.121) 56(84) bytes of data.
64 bytes from 192.168.0.121: icmp_seq=1 ttl=64 time=0.127 ms
--- 192.168.0.121 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.127/0.127/0.127/0.000 ms
# Etch
etch:/usr/src/pf_ring/PF_RING/userland/pcount# ./pcount -i eth0 -f icmp -v
Capturing from eth0
12:21:54.667614 [00:0F:EA:B6:0F:9D -> 00:0C:29:97:21:06] [192.168.0.5 ->
192.168.0.121] [caplen=98][len=98]
12:21:54.667666 [00:0C:29:97:21:06 -> 00:0F:EA:B6:0F:9D] [192.168.0.121 ->
192.168.0.5] [caplen=98][len=98]
=========================
Absolute Stats: [2 pkts rcvd][0 pkts dropped]
Total Pkts=2/Dropped=0.0 %
2 pkts [0.9 pkt/sec] - 196 bytes [0.00 Mbit/sec]
=========================
Actual Stats: 2 pkts [1568381.8 ms][0.0 pkt/sec]
=========================
I have also tested PF_RING rev 3295 against the lastest kernel 2.6.22.6 and
work fine too.
What was the problem?
Cheers,
Pedro
Em Dom 16 Set 2007, Luca Deri escreveu:
> Pedro
> can you please update your kernel with the patched I have committed
> last night and let me know if it works?
>
> i have appreciated the help you provided us.
>
> Thanks, Luca
>
> On Sep 16, 2007, at 5:05 AM, Pedro Torres wrote:
> > Dear Luca and all,
> >
> >> Basically the packet duplication has been solved (at least on my
> >> side) but Pedro's email (unable to capture packets) triggered me an
> >> alert.
> >
> > I think that my problem is not related with this patch.
> >
> >> Pedro can you please check if removing the #if 0 ... #endif you can
> >> capture again? What card are you using?
> >>
> >> All of you can you please perform some tests on your PCs and let me
> >> know your results?
> >
> > I have created 2 linux-kernel in my Debian Etch, running in an old
> > PC PIII
> > with a network card (driver tulip):
> >
> > Ethernet controller: Digital Equipment Corporation DECchip 21142/43
> > (rev 41)
> >
> > The first use kernel-2.6.22.3 and PF_RING-3.6.1 unmodified.
> > The second use kernel-2.6.22.3 and PF_RING-3.6.1 modified (removing
> > the #if
> > 0 ... #endif in PATCH-2-to-dev.c)
> >
> > With both linux-kernel I have the exactly same behaviour: unable to
> > capture RX
> >
> > packets. I've checked this with:
> >> ./pfcount -i eth0 -v
> >
> > and tcpdump (with pfring support). I've perfomed too the tests in a
> > VM running
> > Debian Unstable but the results were identical.
> >
> > I appreciate any help!
> >
> > --
> > Pedro
> > _______________________________________________
> > Ntop-misc mailing list
> > [email protected]
> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
> _______________________________________________
> Ntop-misc mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________
Ntop-misc mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-misc