connect to the system console and run # lsmod | grep pf_ring
If there is no output, this means that the the pf_ring module is not loaded, hence you have to run (at least) # /etc/init.d/pf_ring start Once loaded the module (re-run the lsmod as above), retry the n2disk program. Yuri ############################################### Yuri Francalacci - [email protected] - http://www.ntop.org "Simplicity is the ultimate sophistication" - Leonardo da Vinci ############################################### > On 08 Nov 2015, at 16:55, Ohad Kleinman <[email protected]> wrote: > > We have an Ubuntu machine with Nbox software that includes nprobe, Ntopng, > n2disk stc. > > The n2disk used to work for us, but now when starting the n2disk after few > seconds the status is changed to off. When looking in the log file I can see > the following lines: > > 08/Nov/2015 17:39:49 > WARNING: Invalid license found for A2F3EC4D9206AAF2 > 08/Nov/2015 17:39:49 > WARNING: (See /etc/n2disk10g.license) [Missing license file] > 08/Nov/2015 17:39:49 > WARNING: *************************************************** > 08/Nov/2015 17:39:49 > WARNING: ** ** > 08/Nov/2015 17:39:49 > WARNING: ** Switching to DEMO MODE due to license error ** > 08/Nov/2015 17:39:49 > WARNING: ** ** > 08/Nov/2015 17:39:49 > WARNING: *************************************************** > 08/Nov/2015 17:39:49 > WARNING: ** Dumping will stop after 5 min ** > 08/Nov/2015 17:39:49 > WARNING: *************************************************** > 08/Nov/2015 17:39:49 > Welcome to n2disk10g v.2.3.151021 (r4451) > 08/Nov/2015 17:39:49 > Running on 1 node(s) system with 4 core(s). NUMA affinity set to node 0. > 08/Nov/2015 17:39:49 > Using PF_RING for packet capture > 08/Nov/2015 17:39:49 > Multithread support enabled > 08/Nov/2015 17:39:49 > Dump files max size is set to 16 MB > 08/Nov/2015 17:39:49 > Max number of packets per file set to 10000 > 08/Nov/2015 17:39:49 > Buffer memory is set to 128 MB (8 pcap files buffer) > 08/Nov/2015 17:39:49 > Using directory /storage/n2disk/eth1 for dump files > 08/Nov/2015 17:39:49 > Up to 5 sub-directories will be created > 08/Nov/2015 17:39:49 > Up to 50 files will be written before overwriting > 08/Nov/2015 17:39:49 > Dump files max duration is set to 60 sec > 08/Nov/2015 17:39:49 > Dumping data in 4.0 MB chunks > 08/Nov/2015 17:39:49 > Memory allocated successfully > 08/Nov/2015 17:39:49 > Using kernel packet timestamps > 08/Nov/2015 17:39:49 > ERROR: Unable to open PF_RING device eth1 [globals.ro.snaplen=1518] > 08/Nov/2015 17:39:49 > ERROR: Unable to initialize packet reader > 08/Nov/2015 17:39:49 > ERROR: Has the pf_ring kernel module been loaded ? > > The nProbe is working well without any problems. > > > Any ideas what has happened? > > > Thanks > Ohad > > > _______________________________________________ > Ntop-misc mailing list > [email protected] <mailto:[email protected]> > http://listgateway.unipi.it/mailman/listinfo/ntop-misc > <http://listgateway.unipi.it/mailman/listinfo/ntop-misc>
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
