Re: [Ntop] Adding new services / protocols

Thanks, That is now added. I've only done the changes for OnSatMail, as I'm still working on the facebook video code Stuart From: ntop-boun...@listgateway.unipi.it [ntop-boun...@listgateway.unipi.it] on behalf of Simone Mainardi [maina...@ntop.org] Sent: 14

Re: [Ntop] Adding new services / protocols

Thanks for your reply Luca, I've tried pushing my changes in a new branch, but permission is denied - how do I get permission? Thanks, Stuart From: ntop-boun...@listgateway.unipi.it [ntop-boun...@listgateway.unipi.it] on behalf of Luca Deri [d...@ntop.org]

Re: [Ntop] Trouble installing pro ntopng license

Correct On Fri, Oct 14, 2016 at 1:23 AM, Luca Deri wrote: > John, > I assume you have restarted ntopng after you have put the license in > place, right? > > Luca > > On 14 Oct 2016, at 03:10, John Harris wrote: > > > Hello, > > I seem to be getting conflicting

Re: [Ntop] Help with setting up

I agree with Thomas Leathley. No config IP config of at least no gateway is needed. Here’s my config: (as you can see I have no IP set in the config of eth3 and my /etc/intefaces is set to auto dhcp – it’ll never pick up an address on the mirror port ) eth2 Link encap:Ethernet HWaddr

Re: [Ntop] Trouble installing pro ntopng license

All set now, it was a dumb mistake. In my conf I still had --community. Thanks On Fri, Oct 14, 2016 at 1:23 AM, Luca Deri wrote: > John, > I assume you have restarted ntopng after you have put the license in > place, right? > > Luca > > On 14 Oct 2016, at 03:10, John Harris

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Logs attached. Jim On 10/14/2016 03:44 PM, Alfredo Cardigliano wrote: > Uhm, hard to say, could you provide also dmesg? > > Alfredo > >> On 14 Oct 2016, at 18:07, Jim Hranicky wrote: >> >> And one more, sorry. I tried to stop zbalance_ipc to move to >> 32 queues and am getting

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Another question. It seems that suricata can go into ZC mode without using zbalance_ipc, however, the card I have (82599) only supports RSS values of upto 16. Would I be able to take advantage of all the cores I have with suri in this instance if I moved to a card that can support more RSS entries

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

How difficult would it be to add a hashing algorithm based on the 5-tuple that can support more cores? Is that even feasible? Jim On 10/14/2016 03:53 AM, Alfredo Cardigliano wrote: > Hi Jim > please note that when using distribution to multiple applications (using a > comma-separated list in

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Hi Jim, I faced a similar problem with the same NIC some time ago. I found the same upper bound in a 32 physical-core (64 cores with HT) server. The point is that this server had two different CPUs (with 16 physical cores (32 cores with HT) each one) and, maybe I'm wrong, but I seem to remember

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

I have 2 CPUS, 18 cores each, HT gives 36 cores per CPU for a total of 72 "cpus" as per /proc/cpuinfo . I only have a 10g feed currently, but it appears the fm10k can take 10g SFPs and supports RSS values upto 128 according to fm10k_type.h: #define FM10K_MAX_RSS_INDICES 128 Jim On

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

And one more, sorry. I tried to stop zbalance_ipc to move to 32 queues and am getting this error: Message from syslogd@host at Oct 14 12:05:23 ... kernel:BUG: soft lockup - CPU#17 stuck for 22s! [migration/17:237] Message from syslogd@host at Oct 14 12:05:23 ... kernel:BUG: soft lockup

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Yes, RSS in 82599 supports up to 16 queues, if you need more moving to fm10k could be an option. Alfredo > On 14 Oct 2016, at 18:04, Jim Hranicky wrote: > > Another question. It seems that suricata can go into ZC mode > without using zbalance_ipc, however, the card I have

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Uhm, hard to say, could you provide also dmesg? Alfredo > On 14 Oct 2016, at 18:07, Jim Hranicky wrote: > > And one more, sorry. I tried to stop zbalance_ipc to move to > 32 queues and am getting this error: > > Message from syslogd@host at Oct 14 12:05:23 ... > kernel:BUG:

Re: [Ntop-misc] zbalance_ipc Hash Mode 4 Sending Packets to Multiple Apps

Hi Jim please note the hashing algorithm and the distribution function themselves handle more than 32 queues, the limit is in the fan-out support (multi applications) which uses a 32bit mask: in essence if you use -n 72 in place of -n 72,1 you are able to handle 72 instances. Changing the