Hi all,
I have an updated ntopng/pfring-zc installation and when I start ntopng
the following messages are produced:
Aug 30 18:05:06 server logger: ntopng start
Aug 30 18:05:08 server ntopng: [ViewInterface.cpp:50] ERROR: Internal
Error: NULL interface
[view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3][2]
Aug 30 18:05:08 server ntopng: [ViewInterface.cpp:50] ERROR: Internal
Error: NULL interface
[view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3][2]
Aug 30 18:05:08 server ntopng: [ViewInterface.cpp:50] ERROR: Internal
Error: NULL interface
[view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3][2]
Aug 30 18:05:08 server ntopng: [ViewInterface.cpp:50] ERROR: Internal
Error: NULL interface
[view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3][2]
Aug 30 18:05:08 server kernel: device ens160 entered promiscuous mode
Aug 30 18:05:09 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:05:11 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:05:11 server ntopng: Starting ntopng: Unable to start
ntopng[FAILED]
Aug 30 18:05:11 server systemd: Started Start/stop ntopng program.
Aug 30 18:05:12 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:05:14 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:05:14 server kernel: traps: ntopng[2575] general protection
ip:42df01 sp:7ff418f69b60 error:0 in ntopng[400000+264000]
Aug 30 18:05:15 server kernel: device ens160 left promiscuous mode
Aug 30 18:05:15 server systemd: ntopng.service: main process exited,
code=killed, status=11/SEGV
Why the view of all queues does not work? How should i write this line?
When I delete from ntopng.conf, the
"view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3" line, the I get
another bunch of warnings:
Aug 30 18:06:50 server systemd: Starting Start/stop ntopng program...
Aug 30 18:06:50 server logger: ntopng start
Aug 30 18:06:51 server kernel: device ens160 entered promiscuous mode
Aug 30 18:06:52 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:06:53 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:06:55 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:06:55 server ntopng: Starting ntopng: Unable to start
ntopng[FAILED]
Aug 30 18:06:55 server systemd: Started Start/stop ntopng program.
Aug 30 18:06:56 server ntopng: [PF_RINGInterface.cpp:72] WARNING: Unable
to set packet capture direction
Aug 30 18:06:57 server ZC[2647]: error opening
/dev/hugepages/ens160@1-txrx: Permission denied
Aug 30 18:06:57 server ZC[2647]: error mmap'ing 49 hugepages of 2048 KB
Aug 30 18:06:58 server ZC[2647]: error opening
/dev/hugepages/ens160@0-txrx: Permission denied
Aug 30 18:06:58 server ZC[2647]: error mmap'ing 49 hugepages of 2048 KB
Aug 30 18:06:58 server ZC[2647]: error opening
/dev/hugepages/ens160@2-txrx: Permission denied
Aug 30 18:06:58 server ZC[2647]: error mmap'ing 49 hugepages of 2048 KB
Aug 30 18:06:58 server ZC[2647]: error opening
/dev/hugepages/ens160@3-txrx: Permission denied
Aug 30 18:06:58 server ZC[2647]: error mmap'ing 49 hugepages of 2048 KB
Aug 30 18:07:01 server systemd: Started Session 6 of user root.
Aug 30 18:07:01 server systemd: Starting Session 6 of user root.
The ntopng then, seems to be working but I would like to get rid of the
errors. What should I do to avoid the hugepages errors? I'm running ntop
as root (though I can see it drops privs).
My conf:
-G=/var/run/ntopng.pid
--data-dir=/mnt/data/ntopng
#--interface=zc:ens160
--interface=zc:ens160@0
--interface=zc:ens160@1
--interface=zc:ens160@2
--interface=zc:ens160@3
#--interface=view:zc:ens160@0,zc:ens160@1,zc:ens160@2,zc:ens160@3
--local-networks="xx.xx.0.0/16,xx.xx.cc.0/24,xx.xx.ff.0/22,xx.xx.vv.0/24"
--dns-mode=3
--disable-autologout
--max-num-flows=512000
--max-num-hosts=256000
--sticky-hosts=none
-g -1
# cat /etc/ntopng/ntopng.start
#
# cat /etc/pf_ring/hugepages.conf
node=0 hugepages=1024
# cat /etc/pf_ring/pf_ring.conf
transparent_mode=2
# cat /etc/pf_ring/pf_ring.start
# cat /etc/pf_ring/zc/ixgbe/ixgbe.conf
RSS=0,0,0,0
# cat /etc/pf_ring/zc/ixgbe/ixgbe.start
#
Regards,
Spiros
_______________________________________________
Ntop mailing list
Ntop@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
