Re: [Ntop-misc] suricata with PF_RING Zero Copy/Pinned CPUs

2016-08-15 Thread Jim Hranicky
Interestingly enough, using workers mode seems to enable ZC without zbalance_ipc : % /opt/suricata/bin/suricata -i enp4s0 -c /opt/suricata/etc/suricata/suricata.yaml --pfring -vv 15/8/2016 -- 14:21:13 - - Using flow cluster mode for PF_RING (iface enp4s0) 15/8/2016 -- 14:21:13 -

Re: [Ntop-misc] ring_id is declared with 32 bit, but returned with 16 bit

2016-08-15 Thread Amir Kaduri
Small correction about the example ring filename. It should be: /proc/net/pf_ring/2851-eth8.251768 Amir On Mon, Aug 15, 2016 at 2:20 PM, Amir Kaduri wrote: > I found a bug in my code, that reveals a potential bug in pf_ring code: > > In user-mode, I’m reading ring statistics by parsing files u

[Ntop-misc] ring_id is declared with 32 bit, but returned with 16 bit

2016-08-15 Thread Amir Kaduri
I found a bug in my code, that reveals a potential bug in pf_ring code: In user-mode, I’m reading ring statistics by parsing files under /proc/net/pf_ring/ in the format -.. For example, /proc/5998/net/pf_ring/2851-eth8.251768 The problem is that the ring_id in these files is generated in 32 bit

Re: [Ntop-misc] Cento Demo mode with Valid License

2016-08-15 Thread Alfredo Cardigliano
No problem :-) Alfredo > On 15 Aug 2016, at 05:54, GH wrote: > > That embarrassing, I didn't know that vmxnet3 was a 10gb interface > which explains why I was getting the license error. Thanks. > > root@nbox:/etc/cento# ethtool -i ens192 > driver: vmxnet3 > version: 1.4.5.0-k-NAPI > firmware-v