Hi,
nprobe segfaulted occassionally, so I upgraded it. Now it segfaults
every single time, I start it.
I'm starting nprobe with the following command: nprobe
/etc/nprobe/nprobe-zmq.conf
Here's the output:
01/Apr/2017 00:49:43 [plugin.c:176] No plugins found in ./plugins
01/Apr/2017 00:49:43 [plugin.c:184] Loading 24 plugins [.so] from
/usr/local/lib/nprobe/plugins
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin DHCP
Protocol [/etc/nprobe.license.dhcp]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Diameter
Protocol [/etc/nprobe.license.diameter]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin DNS/LLMNR
Protocol [/etc/nprobe.license.dns]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Export
Plugin [/etc/nprobe.license.export]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin FTP Protocol
[/etc/nprobe.license.ftp]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv0
Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv1
Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv2
Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin HTTP
Protocol [/etc/nprobe.license.http]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin IMAP
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Netflow-Lite
Plugin [/etc/nprobe.license.nflite]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Oracle
Protocol [/etc/nprobe.license.oracle]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin POP3
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin System
process information [/etc/nprobe.license.process]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Radius
Protocol [/etc/nprobe.license.radius]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin RTP Plugin
[/etc/nprobe.license.voip]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin S1AP
Protocol [/etc/nprobe.license.S1AP]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin SIP Plugin
[/etc/nprobe.license.voip]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin SMTP
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [nprobe.c:3615] Valid nProbe Pro license found
01/Apr/2017 00:49:43 [nprobe.c:5489] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
01/Apr/2017 00:49:43 [nprobe.c:5492] WARNING: The input interfaceId is
set to 0: did you forget to use -u perhaps ?
01/Apr/2017 00:49:43 [nprobe.c:5591] Welcome to nProbe Pro v.7.5.170331
($Revision: 5706 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
01/Apr/2017 00:49:43 [nprobe.c:5601] Running on Ubuntu 16.04.2 LTS
01/Apr/2017 00:49:43 [nprobe.c:5612] [LICENSE] nProbe SystemId:
33BEDA5A09B0B922
01/Apr/2017 00:49:43 [nprobe.c:5726] Sample rate [packet: 1][flow: 1]
01/Apr/2017 00:49:43 [nprobe.c:8019] Welcome to nProbe v.7.5.170331 for
x86_64-pc-linux-gnu
01/Apr/2017 00:49:43 [nprobe.c:7097] Using NetFlow Packet Payload Len: 1472
01/Apr/2017 00:49:43 [plugin.c:1068] 0 plugin(s) enabled
01/Apr/2017 00:49:43 [nprobe.c:7516] Each flow is 198 bytes long
01/Apr/2017 00:49:43 [nprobe.c:7517] The # flows per packet has been set
to 6
01/Apr/2017 00:49:43 [nprobe.c:7520] IP TOS is accounted
01/Apr/2017 00:49:43 [util.c:430] GeoIP: loaded AS config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
01/Apr/2017 00:49:43 [util.c:441] GeoIP: loaded AS IPv6 config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
01/Apr/2017 00:49:43 [nprobe.c:6172] Using packet capture length 1600
01/Apr/2017 00:49:43 [pro/pf_ring.c:357] Initializing PF_RING socket on
device enp10s0f0..
01/Apr/2017 00:49:43 [pro/pf_ring.c:399] Dumping traffic statistics on
/proc/net/pf_ring/stats/19402-enp10s0f0.26
01/Apr/2017 00:49:43 [pro/pf_ring.c:464] PF_RING enabled on enp10s0f0
01/Apr/2017 00:49:43 [util.c:4127] Initializing ZMQ as server
01/Apr/2017 00:49:43 [util.c:4170] Succesfully created ZMQ endpoint
tcp://195.222.111.208:1234
01/Apr/2017 00:49:43 [util.c:3216] nProbe changed user to 'nobody'
01/Apr/2017 00:49:43 [nprobe.c:8576] nProbe started successfully
01/Apr/2017 00:49:43 [pro/pf_ring.c:213] Reading packets using PF_RING
in 0 copy mode
Segmentation fault
My configuration file contains the following:
-g=/var/run/nprobe-zmq.pid
-i=enp10s0f0
-n=none
--zmq=tcp://195.222.111.208:1234
-V=9
-T="%IN_BYTES %IN_PKTS %PROTOCOL %SRC_TOS %TCP_FLAGS %L4_SRC_PORT
%IPV4_SRC_ADDR %IPV4_SRC_MASK %INPUT_SNMP %L4_DST_PORT %IPV4_DST_ADDR
%IPV4_DST_MASK %OUTPUT_SNMP %IPV4_NEXT_HOP %SRC_AS %DST_AS
%LAST_SWITCHED %FIRST_SWITCHED %OUT_BYTES %OUT_PKTS %IPV6_SRC_ADDR
%IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK %FLOW_ACTIVE_TIMEOUT
%FLOW_INACTIVE_TIMEOUT %ENGINE_TYPE %ENGINE_ID %TOTAL_BYTES_EXP
%TOTAL_PKTS_EXP %TOTAL_FLOWS_EXP %MIN_TTL %MAX_TTL %IN_SRC_MAC %SRC_VLAN
%DST_VLAN %IP_PROTOCOL_VERSION %DIRECTION %IPV6_NEXT_HOP %OUT_DST_MAC
%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS %FLOW_ID %FLOW_START_SEC
%FLOW_END_SEC %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
%BIFLOW_DIRECTION %L7_PROTO %L7_PROTO_NAME"
The following packages are installed, platform is Ubuntu 16.04
nprobe 7.5.170331-5706
pfring 6.5.0-1176 pfring-dkms
6.5.0
Essentially, nprobe and hence ntopng is not usable anymore.
Kind regards,
Martin List-Petersen
--
Airwire Ltd. - Ag Nascadh Pobail an Iarthair
http://www.airwire.ie
Phone: 091-865 968
Registered Office: Moy, Kinvara, Co. Galway, 091-865 968 - Registered in
Ireland No. 508961
_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc
nprobe segfaulted occassionally, so I upgraded it. Now it segfaults
every single time, I start it.
I'm starting nprobe with the following command: nprobe
/etc/nprobe/nprobe-zmq.conf
Here's the output:
01/Apr/2017 00:49:43 [plugin.c:176] No plugins found in ./plugins
01/Apr/2017 00:49:43 [plugin.c:184] Loading 24 plugins [.so] from
/usr/local/lib/nprobe/plugins
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin DHCP
Protocol [/etc/nprobe.license.dhcp]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Diameter
Protocol [/etc/nprobe.license.diameter]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin DNS/LLMNR
Protocol [/etc/nprobe.license.dns]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Export
Plugin [/etc/nprobe.license.export]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin FTP Protocol
[/etc/nprobe.license.ftp]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv0
Signaling Protocol [/etc/nprobe.license.gtpv0]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv1
Signaling Protocol [/etc/nprobe.license.gtpv1]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin GTPv2
Signaling Protocol [/etc/nprobe.license.gtpv2]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin HTTP
Protocol [/etc/nprobe.license.http]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin IMAP
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Netflow-Lite
Plugin [/etc/nprobe.license.nflite]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Oracle
Protocol [/etc/nprobe.license.oracle]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin POP3
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin System
process information [/etc/nprobe.license.process]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin Radius
Protocol [/etc/nprobe.license.radius]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin RTP Plugin
[/etc/nprobe.license.voip]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin S1AP
Protocol [/etc/nprobe.license.S1AP]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin SIP Plugin
[/etc/nprobe.license.voip]: Missing license file
01/Apr/2017 00:49:43 [plugin.c:796] Unable to enable plugin SMTP
Protocol [/etc/nprobe.license.email]: Missing license file
01/Apr/2017 00:49:43 [nprobe.c:3615] Valid nProbe Pro license found
01/Apr/2017 00:49:43 [nprobe.c:5489] WARNING: The output interfaceId is
set to 0: did you forget to use -Q perhaps ?
01/Apr/2017 00:49:43 [nprobe.c:5492] WARNING: The input interfaceId is
set to 0: did you forget to use -u perhaps ?
01/Apr/2017 00:49:43 [nprobe.c:5591] Welcome to nProbe Pro v.7.5.170331
($Revision: 5706 $) for x86_64-pc-linux-gnu with native PF_RING acceleration
01/Apr/2017 00:49:43 [nprobe.c:5601] Running on Ubuntu 16.04.2 LTS
01/Apr/2017 00:49:43 [nprobe.c:5612] [LICENSE] nProbe SystemId:
33BEDA5A09B0B922
01/Apr/2017 00:49:43 [nprobe.c:5726] Sample rate [packet: 1][flow: 1]
01/Apr/2017 00:49:43 [nprobe.c:8019] Welcome to nProbe v.7.5.170331 for
x86_64-pc-linux-gnu
01/Apr/2017 00:49:43 [nprobe.c:7097] Using NetFlow Packet Payload Len: 1472
01/Apr/2017 00:49:43 [plugin.c:1068] 0 plugin(s) enabled
01/Apr/2017 00:49:43 [nprobe.c:7516] Each flow is 198 bytes long
01/Apr/2017 00:49:43 [nprobe.c:7517] The # flows per packet has been set
to 6
01/Apr/2017 00:49:43 [nprobe.c:7520] IP TOS is accounted
01/Apr/2017 00:49:43 [util.c:430] GeoIP: loaded AS config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNum.dat
01/Apr/2017 00:49:43 [util.c:441] GeoIP: loaded AS IPv6 config file
/usr/share/ntopng/httpdocs/geoip/GeoIPASNumv6.dat
01/Apr/2017 00:49:43 [nprobe.c:6172] Using packet capture length 1600
01/Apr/2017 00:49:43 [pro/pf_ring.c:357] Initializing PF_RING socket on
device enp10s0f0..
01/Apr/2017 00:49:43 [pro/pf_ring.c:399] Dumping traffic statistics on
/proc/net/pf_ring/stats/19402-enp10s0f0.26
01/Apr/2017 00:49:43 [pro/pf_ring.c:464] PF_RING enabled on enp10s0f0
01/Apr/2017 00:49:43 [util.c:4127] Initializing ZMQ as server
01/Apr/2017 00:49:43 [util.c:4170] Succesfully created ZMQ endpoint
tcp://195.222.111.208:1234
01/Apr/2017 00:49:43 [util.c:3216] nProbe changed user to 'nobody'
01/Apr/2017 00:49:43 [nprobe.c:8576] nProbe started successfully
01/Apr/2017 00:49:43 [pro/pf_ring.c:213] Reading packets using PF_RING
in 0 copy mode
Segmentation fault
My configuration file contains the following:
-g=/var/run/nprobe-zmq.pid
-i=enp10s0f0
-n=none
--zmq=tcp://195.222.111.208:1234
-V=9
-T="%IN_BYTES %IN_PKTS %PROTOCOL %SRC_TOS %TCP_FLAGS %L4_SRC_PORT
%IPV4_SRC_ADDR %IPV4_SRC_MASK %INPUT_SNMP %L4_DST_PORT %IPV4_DST_ADDR
%IPV4_DST_MASK %OUTPUT_SNMP %IPV4_NEXT_HOP %SRC_AS %DST_AS
%LAST_SWITCHED %FIRST_SWITCHED %OUT_BYTES %OUT_PKTS %IPV6_SRC_ADDR
%IPV6_DST_ADDR %IPV6_SRC_MASK %IPV6_DST_MASK %FLOW_ACTIVE_TIMEOUT
%FLOW_INACTIVE_TIMEOUT %ENGINE_TYPE %ENGINE_ID %TOTAL_BYTES_EXP
%TOTAL_PKTS_EXP %TOTAL_FLOWS_EXP %MIN_TTL %MAX_TTL %IN_SRC_MAC %SRC_VLAN
%DST_VLAN %IP_PROTOCOL_VERSION %DIRECTION %IPV6_NEXT_HOP %OUT_DST_MAC
%EXPORTER_IPV4_ADDRESS %EXPORTER_IPV6_ADDRESS %FLOW_ID %FLOW_START_SEC
%FLOW_END_SEC %FLOW_START_MILLISECONDS %FLOW_END_MILLISECONDS
%BIFLOW_DIRECTION %L7_PROTO %L7_PROTO_NAME"
The following packages are installed, platform is Ubuntu 16.04
nprobe 7.5.170331-5706
pfring 6.5.0-1176 pfring-dkms
6.5.0
Essentially, nprobe and hence ntopng is not usable anymore.
Kind regards,
Martin List-Petersen
--
Airwire Ltd. - Ag Nascadh Pobail an Iarthair
http://www.airwire.ie
Phone: 091-865 968
Registered Office: Moy, Kinvara, Co. Galway, 091-865 968 - Registered in
Ireland No. 508961
_______________________________________________
Ntop-misc mailing list
Ntop-misc@listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-misc