Hi are you running the application as root? Please also provide "dmesg | tail” after running pfcount
Thank you Alfredo > On 3 May 2018, at 10:26, milad arabi <[email protected]> wrote: > > Hi there > Our company purchase some products and I try use nprobe with ZC driver but I > got this error. > > # nprobe -i zc:ens192f0 -t 60 -d 15 -P /milad -V 10 -T "%IPV4_SRC_ADDR > %IPV4_DST_ADDR %IN_PKTS %L4_DST_PORT %L4_SRC_PORT %IN_BYTES > %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS %PROTOCOL %L7_PROTO_NAME > %IPV4_SRC_MASK %IPV4_DST_MASK %IN_SRC_MAC %OUT_DST_MAC %TCP_FLAGS" > --max-log-lines 100000 --cpu-affinity 0 > 01/May/2018 00:13:56 [plugin.c:177] No plugins found in ./plugins > 01/May/2018 00:13:56 [plugin.c:185] Loading 23 plugins [.so] from > /usr/local/lib/nprobe/plugins > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin DHCP Protocol > [/etc/nprobe.license.dhcp]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin DNS/LLMNR > Protocol [/etc/nprobe.license.dns]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Export Plugin > [/etc/nprobe.license.export]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin FTP Protocol > [/etc/nprobe.license.ftp]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv0 Signaling > Protocol [/etc/nprobe.license.gtpv0]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv1 Signaling > Protocol [/etc/nprobe.license.gtpv1]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin GTPv2 Signaling > Protocol [/etc/nprobe.license.gtpv2]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin HTTP Protocol > [/etc/nprobe.license.http]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin IMAP Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Netflow-Lite > Plugin [/etc/nprobe.license.nflite]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin Oracle Protocol > [/etc/nprobe.license.oracle]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin POP3 Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin RTP Plugin > [/etc/nprobe.license.voip]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin S1AP Protocol > [/etc/nprobe.license.S1AP]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin SIP Plugin > [/etc/nprobe.license.voip]: Missing license file > 01/May/2018 00:13:56 [plugin.c:850] Unable to enable plugin SMTP Protocol > [/etc/nprobe.license.email]: Missing license file > 01/May/2018 00:13:56 [nprobe.c:3908] Valid nProbe Pro license found > 01/May/2018 00:13:56 [nprobe.c:5530] WARNING: The output interfaceId is set > to 0: did you forget to use -Q perhaps ? > 01/May/2018 00:13:56 [nprobe.c:5533] WARNING: The input interfaceId is set to > 0: did you forget to use -u perhaps ? > 01/May/2018 00:13:56 [nprobe.c:5620] Welcome to nProbe Pro v.8.5.180430 > ($Revision: 6145 $) for x86_64-unknown-linux-gnu with native PF_RING > acceleration > 01/May/2018 00:13:56 [nprobe.c:5630] Running on CentOS Linux release 7.4.1708 > (Core) > 01/May/2018 00:13:56 [nprobe.c:5641] [LICENSE] nProbe SystemId: > 1C6A1C5E82062206 > 01/May/2018 00:13:56 [nprobe.c:5678] Dumping flow files every 60 sec into > directory /milad > 01/May/2018 00:13:56 [nprobe.c:5683] WARNING: -n parameter is missing. > 127.0.0.1:2055 <http://127.0.0.1:2055/> will be used. > 01/May/2018 00:13:56 [nprobe.c:3562] Exporting flows towards 127.0.0.1:2055 > <http://127.0.0.1:2055/> using UDP > 01/May/2018 00:13:56 [util.c:3471] CPU affinity successfully set to 0 > 01/May/2018 00:13:56 [nprobe.c:5708] Sample rate [packet: 1][flow > collection/export: 1/1] > 01/May/2018 00:13:56 [nprobe.c:8318] Welcome to nProbe v.8.5.180430 for > x86_64-unknown-linux-gnu > 01/May/2018 00:13:56 [nprobe.c:7326] Using NetFlow Packet Payload Len: 1472 > 01/May/2018 00:13:56 [plugin.c:1214] 0 plugin(s) enabled > 01/May/2018 00:13:56 [nprobe.c:7765] Each flow is 96 bytes long > 01/May/2018 00:13:56 [nprobe.c:7766] The # flows per packet has been set to 14 > 01/May/2018 00:13:56 [nprobe.c:7769] IP TOS is accounted > 01/May/2018 00:13:56 [util.c:465] GeoIP: loaded AS config file > /usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat > 01/May/2018 00:13:56 [util.c:476] GeoIP: loaded AS IPv6 config file > /usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat > 01/May/2018 00:13:56 [pro/pf_ring.c:356] Initializing PF_RING socket on > device zc:ens192f0.. > 01/May/2018 00:13:56 [nprobe.c:6383] Initializing pcap socket on device > zc:ens192f0.. > 01/May/2018 00:13:56 [nprobe.c:6394] ERROR: Unable to open interface > zc:ens192f0. > 01/May/2018 00:13:56 [nprobe.c:8427] ERROR: Unable to open interface > zc:ens192f0 (zc:ens192f0: No such device exists (SIOCGIFHWADDR: No such > device)) > 01/May/2018 00:13:56 [nprobe.c:8429] ERROR: Try using -i none if you do not > want capture from a NIC > > > #pfcount -i zc:ens192f0 > pfring_open error [No such device] (pf_ring not loaded or interface > zc:ens192f0 is down ?) > > # lsmod | grep 'pf_ring\|ixgbe' > ixgbe_zc 330574 0 > ptp 19231 1 ixgbe_zc > pf_ring 1242512 514 > > lspci | grep -i 'ethernet' > 0b:00.0 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ > Network Connection (rev 01) > 0b:00.1 Ethernet controller: Intel Corporation 82599ES 10-Gigabit SFI/SFP+ > Network Connection (rev 01) > 1b:00.0 Ethernet controller: VMware VMXNET3 Ethernet Controller (rev 01) > > # cat /proc/net/pf_ring/dev/ens192f0/info > Name: ens192f0 > Index: 9 > Address: 00:11:0A:67:16:5C > Polling Mode: NAPI/ZC > Type: Ethernet > Family: Intel ixgbe 82599 > TX Queues: 1 > RX Queues: 1 > Num RX Slots: 32768 > Num TX Slots: 32768 > > # ethtool -i ens192f0 | grep driver > driver: ixgbe > > # systemctl status pf_ring > ● pf_ring.service - Start/stop pfring service > Loaded: loaded (/usr/lib/systemd/system/pf_ring.service; enabled; vendor > preset: disabled) > Active: active (exited) since Mon 2018-04-30 23:22:06 +0430; 1h 1min ago > Process: 2408 ExecStop=/usr/local/bin/pf_ringctl stop (code=exited, > status=0/SUCCESS) > Process: 2532 ExecStart=/usr/local/bin/pf_ringctl start (code=exited, > status=0/SUCCESS) > Main PID: 2532 (code=exited, status=0/SUCCESS) > CGroup: /system.slice/pf_ring.service > Apr 30 23:22:01 ipdr2 systemd[1]: Starting Start/stop pfring service... > Apr 30 23:22:01 ipdr2 pf_ringctl[2532]: Starting PF_RING module: PF_RING > already loaded.[ OK ] > Apr 30 23:22:06 ipdr2 pf_ringctl[2532]: [ OK ] > Apr 30 23:22:06 ipdr2 systemd[1]: Started Start/stop pfring service. > > any suggestion would be appreciate. > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop
signature.asc
Description: Message signed with OpenPGP
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
