Hi there Our company purchase some products and I try use nprobe with ZC driver but I got this error.
# nprobe -i zc:ens192f0 -t 60 -d 15 -P /milad -V 10 -T "%IPV4_SRC_ADDR > %IPV4_DST_ADDR %IN_PKTS %L4_DST_PORT %L4_SRC_PORT %IN_BYTES > %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS %PROTOCOL %L7_PROTO_NAME > %IPV4_SRC_MASK %IPV4_DST_MASK %IN_SRC_MAC %OUT_DST_MAC %TCP_FLAGS" > --max-log-lines 100000 --cpu-affinity 0 > 01/May/2018 00:13:56 [plugin.c:177] No plugins found in ./plugins > 01/May/2018 00:13:56 [plugin.c:185] Loading 23 plugins [.so] from > /usr/local/lib/nprobe/plugins > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin DHCP Protocol > [/etc/nprobe.license.dhcp]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin DNS/LLMNR > Protocol [/etc/nprobe.license.dns]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Export Plugin > [/etc/nprobe.license.export]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin FTP Protocol > [/etc/nprobe.license.ftp]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv0 > Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv1 > Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv2 > Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin HTTP Protocol > [/etc/nprobe.license.http]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin IMAP Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Netflow-Lite > Plugin [/etc/nprobe.license.nflite]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Oracle > Protocol [/etc/nprobe.license.oracle]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin POP3 Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin RTP Plugin > [/etc/nprobe.license.voip]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin S1AP Protocol > [/etc/nprobe.license.S1AP]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin SIP Plugin > [/etc/nprobe.license.voip]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin SMTP Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [nprobe.c:3908] Valid nProbe Pro license found > 01/May/2018 00:13:56 [nprobe.c:5530] WARNING: The output interfaceId is > set to 0: did you forget to use -Q perhaps ? > 01/May/2018 00:13:56 [nprobe.c:5533] WARNING: The input interfaceId is set > to 0: did you forget to use -u perhaps ? > 01/May/2018 00:13:56 [nprobe.c:5620] Welcome to nProbe Pro v.8.5.180430 > ($Revision: 6145 $) for x86_64-unknown-linux-gnu with native PF_RING > acceleration > 01/May/2018 00:13:56 [nprobe.c:5630] Running on CentOS Linux release > 7.4.1708 (Core) > 01/May/2018 00:13:56 [nprobe.c:5641] [LICENSE] nProbe SystemId: > 1C6A1C5E82062206 > 01/May/2018 00:13:56 [nprobe.c:5678] Dumping flow files every 60 sec into > directory /milad > 01/May/2018 00:13:56 [nprobe.c:5683] WARNING: -n parameter is missing. > 127.0.0.1:2055 will be used. > 01/May/2018 00:13:56 [nprobe.c:3562] Exporting flows towards > 127.0.0.1:2055 using UDP > 01/May/2018 00:13:56 [util.c:3471] CPU affinity successfully set to 0 > 01/May/2018 00:13:56 [nprobe.c:5708] Sample rate [packet: 1][flow > collection/export: 1/1] > 01/May/2018 00:13:56 [nprobe.c:8318] Welcome to nProbe v.8.5.180430 for > x86_64-unknown-linux-gnu > 01/May/2018 00:13:56 [nprobe.c:7326] Using NetFlow Packet Payload Len: 1472 > 01/May/2018 00:13:56 [plugin.c:1214] 0 plugin(s) enabled > 01/May/2018 00:13:56 [nprobe.c:7765] Each flow is 96 bytes long > 01/May/2018 00:13:56 [nprobe.c:7766] The # flows per packet has been set > to 14 > 01/May/2018 00:13:56 [nprobe.c:7769] IP TOS is accounted > 01/May/2018 00:13:56 [util.c:465] GeoIP: loaded AS config file > /usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat > 01/May/2018 00:13:56 [util.c:476] GeoIP: loaded AS IPv6 config file > /usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat > 01/May/2018 00:13:56 [pro/pf_ring.c:356] Initializing PF_RING socket on > device zc:ens192f0.. > 01/May/2018 00:13:56 [nprobe.c:6383] Initializing pcap socket on device > zc:ens192f0.. > > *01/May/2018 00:13:56 [nprobe.c:6394] ERROR: Unable to open interface > zc:ens192f0.* > *01/May/2018 00:13:56 [nprobe.c:8427] ERROR: Unable to open interface > zc:ens192f0 (zc:ens192f0: No such device exists (SIOCGIFHWADDR: No such > device))*01/May/2018 00:13:56 [nprobe.c:8429] ERROR: Try using -i none if > you do not want capture from a NIC #pfcount -i zc:ens192f0 > pfring_open error [No such device] (pf_ring not loaded or interface > zc:ens192f0 is down ?) # lsmod | grep 'pf_ring\|ixgbe' > ixgbe_zc 330574 0 > ptp 19231 1 ixgbe_zc > pf_ring 1242512 514 lspci | grep -i 'ethernet' > 0b:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ > Network Connection (rev 01) > 0b:00.1 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ > Network Connection (rev 01) > 1b:00.0 Ethernet controller: VMware VMXNET3 Ethernet Controller (rev 01) # cat /proc/net/pf_ring/dev/ens192f0/info > Name: ens192f0 > Index: 9 > Address: 00:11:0A:67:16:5C > Polling Mode: NAPI/ZC > Type: Ethernet > Family: Intel ixgbe 82599 > TX Queues: 1 > RX Queues: 1 > Num RX Slots: 32768 > Num TX Slots: 32768 # ethtool -i ens192f0 | grep driver > driver: ixgbe > # systemctl status pf_ring > ● pf_ring.service - Start/stop pfring service > Loaded: loaded (/usr/lib/systemd/system/pf_ring.service; enabled; > vendor preset: disabled) > Active: active (exited) since Mon 2018-04-30 23:22:06 +0430; 1h 1min ago > Process: 2408 ExecStop=/usr/local/bin/pf_ringctl stop (code=exited, > status=0/SUCCESS) > Process: 2532 ExecStart=/usr/local/bin/pf_ringctl start (code=exited, > status=0/SUCCESS) > Main PID: 2532 (code=exited, status=0/SUCCESS) > CGroup: /system.slice/pf_ring.service > Apr 30 23:22:01 ipdr2 systemd[1]: Starting Start/stop pfring service... > Apr 30 23:22:01 ipdr2 pf_ringctl[2532]: Starting PF_RING module: PF_RING > already loaded.[ OK ] > Apr 30 23:22:06 ipdr2 pf_ringctl[2532]: [ OK ] > Apr 30 23:22:06 ipdr2 systemd[1]: Started Start/stop pfring service. any suggestion would be appreciate.
_______________________________________________ Ntop mailing list Ntop@listgateway.unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
