Yuri, Indeed when running at system console # lsmod | grep pf_ring no output.
I tried starting the pf_ring but got the following error: /etc/init.d# pf_ring start pf_ring: command not found looking in the ntop services web GUI I see that pf_ring is running. https://dl.dropboxusercontent.com/u/27973370/pf_ring.jpg What am I missing? Thanks. Ohad *From:* [email protected] [mailto: [email protected]] *On Behalf Of *Yuri Francalacci *Sent:* Sunday, November 08, 2015 6:26 PM *To:* [email protected] *Subject:* Re: [Ntop-misc] N2DISK Error connect to the system console and run # lsmod | grep pf_ring If there is no output, this means that the the pf_ring module is not loaded, hence you have to run (at least) # /etc/init.d/pf_ring start Once loaded the module (re-run the lsmod as above), retry the n2disk program. Yuri ############################################### Yuri Francalacci - [email protected] - http://www.ntop.org "Simplicity is the ultimate sophistication" - Leonardo da Vinci ############################################### On 08 Nov 2015, at 16:55, Ohad Kleinman <[email protected]> wrote: We have an Ubuntu machine with Nbox software that includes nprobe, Ntopng, n2disk stc. The n2disk used to work for us, but now when starting the n2disk after few seconds the status is changed to off. When looking in the log file I can see the following lines: 08/Nov/2015 17:39:49 WARNING: Invalid license found for A2F3EC4D9206AAF2 08/Nov/2015 17:39:49 WARNING: (See /etc/n2disk10g.license) [Missing license file] 08/Nov/2015 17:39:49 WARNING: *************************************************** 08/Nov/2015 17:39:49 WARNING: ** ** 08/Nov/2015 17:39:49 WARNING: ** Switching to DEMO MODE due to license error ** 08/Nov/2015 17:39:49 WARNING: ** ** 08/Nov/2015 17:39:49 WARNING: *************************************************** 08/Nov/2015 17:39:49 WARNING: ** Dumping will stop after 5 min ** 08/Nov/2015 17:39:49 WARNING: *************************************************** 08/Nov/2015 17:39:49 Welcome to n2disk10g v.2.3.151021 (r4451) 08/Nov/2015 17:39:49 Running on 1 node(s) system with 4 core(s). NUMA affinity set to node 0. 08/Nov/2015 17:39:49 Using PF_RING for packet capture 08/Nov/2015 17:39:49 Multithread support enabled 08/Nov/2015 17:39:49 Dump files max size is set to 16 MB 08/Nov/2015 17:39:49 Max number of packets per file set to 10000 08/Nov/2015 17:39:49 Buffer memory is set to 128 MB (8 pcap files buffer) 08/Nov/2015 17:39:49 Using directory /storage/n2disk/eth1 for dump files 08/Nov/2015 17:39:49 Up to 5 sub-directories will be created 08/Nov/2015 17:39:49 Up to 50 files will be written before overwriting 08/Nov/2015 17:39:49 Dump files max duration is set to 60 sec 08/Nov/2015 17:39:49 Dumping data in 4.0 MB chunks 08/Nov/2015 17:39:49 Memory allocated successfully 08/Nov/2015 17:39:49 Using kernel packet timestamps 08/Nov/2015 17:39:49 ERROR: Unable to open PF_RING device eth1 [globals.ro.snaplen=1518] 08/Nov/2015 17:39:49 ERROR: Unable to initialize packet reader 08/Nov/2015 17:39:49 ERROR: Has the pf_ring kernel module been loaded ? The nProbe is working well without any problems. Any ideas what has happened? Thanks Ohad _______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
