Hi Luca
I try this:

tcpdump -w radius.pcap -i ens192f0 port radius or port radius-acct or port
> radius-dynauth


and radius.pcap file is healthy and readable in wireshark.(except a few
packets )
I think this issue related to new updates.


On Wed, May 16, 2018 at 1:25 AM, Luca Deri <d...@ntop.org> wrote:

> Hi Milad
> the error you have is related to fragments. Please check (with wireshark)
> if the packets you are receiving are correct or there are fragment issues
>
> Regards Luca
>
> On 15 May 2018, at 22:43, Milad Arabi <milad.ar...@gmail.com> wrote:
>
> Hi there
> I hope I'm not wrong,I have libradiusPlugin-8.5.180504.so
> <http://libradiusplugin-8.5.180504.so/> and it almost works.
> but after update to new version they are broke and they are not create any
> new log file.
>
> Welcome to nProbe v.8.5.180515 (r6155) for x86_64-unknown-linux-gnu
>> Build OS:      CentOS Linux release 7.4.1708 (Core)
>
> PF_RING Version          : 7.1.0 (dev:8b9dc8a258dea71e2af471174f99b3
>> 0014277783)
>
>
>
> I use nprobe.conf with this config:
>
> -i=zc:ens192f0
>> -t=60
>> -d=15
>> -P=/ipdr/connection
>> -V=10
>> --max-log-lines=10000000
>> --cpu-affinity=0
>> --radius-dump-dir=/ipdr/radius
>> --diameter-dump-dir=/ipdr/diameter
>> -T="%IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_DST_PORT %L4_SRC_PORT %IN_BYTES
>> %OUT_BYTES %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS %L7_PROTO_NAME
>> %IN_SRC_MAC %OUT_DST_MAC %SRC_AS %DST_AS"
>
>
> May 16 01:10:57 ipdr2 nprobe[2630]: 16/May/2018 01:10:57 [util.c:465]
>> GeoIP: loaded AS config file /usr/share/ntopng/httpdocs/
>> geoip/GeoIPASNum.dat
>> May 16 01:10:57 ipdr2 nprobe[2630]: 16/May/2018 01:10:57 [util.c:476]
>> GeoIP: loaded AS IPv6 config file /usr/share/ntopng/httpdocs/
>> geoip/GeoIPASNumv6.dat
>> May 16 01:10:57 ipdr2 nprobe[2630]: 16/May/2018 01:10:57
>> [pro/pf_ring.c:356] Initializing PF_RING socket on device zc:ens192f0..
>> May 16 01:10:58 ipdr2 nprobe[2630]: 16/May/2018 01:10:58
>> [pro/pf_ring.c:398] Dumping traffic statistics on
>> /proc/net/pf_ring/stats/2630-ens192f0.7
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59
>> [pro/pf_ring.c:469] PF_RING enabled on zc:ens192f0
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59 [util.c:3629]
>> nProbe changed user to 'nobody'
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59 [plugin.c:924]
>> Enabling plugin Diameter Protocol
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59 [plugin.c:924]
>> Enabling plugin Radius Protocol
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59 [nprobe.c:8926]
>> nProbe started successfully
>> May 16 01:10:59 ipdr2 nprobe[2630]: 16/May/2018 01:10:59
>> [pro/pf_ring.c:214] Packet copy enabled
>
>
> both command line and .conf usage are not work.
>
> and some errors are in service status:
>
> May 16 00:44:35 ipdr2 nprobe[2483]: 16/May/2018 00:44:35 [nprobe.c:1737]
>> ERROR: [FRAGMENT][FIRST] Received invalid initial fragment
>> 21792[fragmentId: 29441]
>> May 16 00:44:47 ipdr2 nprobe[2483]: 16/May/2018 00:44:47 [nprobe.c:1737]
>> ERROR: [FRAGMENT][FIRST] Received invalid initial fragment
>> 16430[fragmentId: 6742]
>> May 16 00:44:47 ipdr2 nprobe[2483]: 16/May/2018 00:44:47 [nprobe.c:1737]
>> ERROR: [FRAGMENT][FIRST] Received invalid initial fragment
>> 16430[fragmentId: 6742]
>> May 16 00:44:48 ipdr2 nprobe[2483]: 16/May/2018 00:44:48 [nprobe.c:1737]
>> ERROR: [FRAGMENT][FIRST] Received invalid initial fragment
>> 16430[fragmentId: 6743]
>
>
>
> Does anybody have this issue?
>
> any comment would be appreciate
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to