search

ntop / PF_RING

High-speed packet processing framework
http://www.ntop.org
GNU Lesser General Public License v2.1
2.67k stars 353 forks source link

Issue while running cento-ids #809

Closed cybersecurity99 closed 2 years ago

cybersecurity99 commented 2 years ago

Hi , What maybe the reason for this I am running this cento-ids -i zc:enp69s0 --balanced-egress-queues 2 

23/May/2022 16:11:27 [cento.cpp:1695] Welcome to nProbe cento v.1.17.220523
23/May/2022 16:11:27 [cento.cpp:1696] Using nDPI 4.3.0-3620-2560260a
23/May/2022 16:11:27 [cento.cpp:1697] Copyright 2015-22 - ntop
23/May/2022 16:11:27 [cento.cpp:1700] SystemId: LD3563FB200830F20--UD3563FB28958C197--OL
23/May/2022 16:11:27 [cento.cpp:1712] WARNING: Invalid license /etc/nprobe.cento: Missing license file
23/May/2022 16:11:27 [Runtime.cpp:489] WARNING: *****************************************************
23/May/2022 16:11:27 [Runtime.cpp:490] WARNING: **                                                 **
23/May/2022 16:11:27 [Runtime.cpp:491] WARNING: **  Switching to DEMO MODE (missing valid license) **
23/May/2022 16:11:27 [Runtime.cpp:492] WARNING: **                                                 **
23/May/2022 16:11:27 [Runtime.cpp:493] WARNING: **  Purchase your nProbe Cento license at          **
23/May/2022 16:11:27 [Runtime.cpp:494] WARNING: **       https://shop.ntop.org/                    **
23/May/2022 16:11:27 [Runtime.cpp:495] WARNING: **                                                 **
23/May/2022 16:11:27 [Runtime.cpp:496] WARNING: *****************************************************
23/May/2022 16:11:27 [cento.cpp:1719] Built on Ubuntu 20.04.4 LTS
23/May/2022 16:11:27 [cento.cpp:1720] Available CPU Cores: 48
23/May/2022 16:11:27 [cento.cpp:1721] Max flow duration set to 120 sec (-t)
23/May/2022 16:11:27 [cento.cpp:1722] Max flow idleness set to 60 sec (-d)
23/May/2022 16:11:27 [cento.cpp:1723] Flow hash size set to 512000 buckets (-w)
23/May/2022 16:11:27 [cento.cpp:1724] Hashes will have up to 1024000 buckets (-W)
23/May/2022 16:11:27 [cento.cpp:1734] WARNING: No flow export defined (missing -5/-9/-I parameters)
23/May/2022 16:11:27 [cento.cpp:1735] WARNING: Flows are just harvested after they are expired
23/May/2022 16:11:29 [cento.cpp:2007] Initialized global ZC cluster 10
23/May/2022 16:11:29 [ZCInterface.cpp:33] ERROR: pfring_zc_open_device error [Socket operation on non-socket] Please check that zc:enp69s0 is up and not already used
23/May/2022 16:11:29 [cento.cpp:2068] WARNING: Unable to open zc:enp69s0 (No such file or directory)
23/May/2022 16:11:29 [cento.cpp:2069] WARNING: Hint: is pf_ring module loaded, and HugePages configured?
cardigliano commented 2 years ago

Did you load the ZC driver for enp69s0? Please try running pfcount -i zc:enp69s0 or provide the output of cat /proc/net/pf_ring/dev/enp69s0/info