search

ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.65k stars 44 forks source link

error reading link speed #544

Closed 61swong closed 4 months ago

61swong commented 2 years ago

Hi there,

I'm testing a solution by running nprobe to read packets from a local interface and pass the flows to ntopng. In my test setup, both nprobe and ntopng are running on the same host.

ntopng is executed with a list of inputs including -i tcp://127.0.0.1:9999. nprobe is executed as 'sudo nprobe --zmq "tcp://*:9999" -i et2 -n none -T "@NTOPNG@"' and I got the error message "error reading link speed on et2" at then end.

Below is the full output of the command. -bash-4.2$ sudo nprobe --zmq "tcp://*:9999" -i et2 -n none -T "@NTOPNG@" 20/Sep/2022 07:35:15 [plugin.c:178] No plugins found in ./plugins 20/Sep/2022 07:35:15 [plugin.c:186] Loading 46 plugins [.so] from /usr/lib/nprobe/plugins 20/Sep/2022 07:35:15 [plugin.c:715] WARNING: Unable to load plugin '/usr/lib/nprobe/plugins/libbgpPlugin-9.2.201231.so' 20/Sep/2022 07:35:15 [plugin.c:716] WARNING: Message is '/usr/lib/nprobe/plugins/libbgpPlugin-9.2.201231.so: undefined symbol: New_Patricia' 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Custom Fields (/usr/lib/nprobe/plugins/libcustomPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin MySQL DB (/usr/lib/nprobe/plugins/libdbPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin DHCP Protocol (/usr/lib/nprobe/plugins/libdhcpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Diameter Protocol (/usr/lib/nprobe/plugins/libdiameterPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin DNS/LLMNR Protocol (/usr/lib/nprobe/plugins/libdnsPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Export Plugin (/usr/lib/nprobe/plugins/libexportPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin FTP Protocol (/usr/lib/nprobe/plugins/libftpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin GTPv0 Signaling Protocol (/usr/lib/nprobe/plugins/libgtpv0Plugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin GTPv1 Signaling Protocol (/usr/lib/nprobe/plugins/libgtpv1Plugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin GTPv2 Signaling Protocol (/usr/lib/nprobe/plugins/libgtpv2Plugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin HTTP Protocol (/usr/lib/nprobe/plugins/libhttpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin IMAP Protocol (/usr/lib/nprobe/plugins/libimapPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Modbus Plugin (/usr/lib/nprobe/plugins/libmodbusPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin MySQL Plugin (/usr/lib/nprobe/plugins/libmysqlPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin NETBIOS Protocol (/usr/lib/nprobe/plugins/libnetbiosPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Netflow-Lite Plugin (/usr/lib/nprobe/plugins/libnflitePlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin POP3 Protocol (/usr/lib/nprobe/plugins/libpopPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin Radius Protocol (/usr/lib/nprobe/plugins/libradiusPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin RTP Plugin (/usr/lib/nprobe/plugins/librtpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin SIP Plugin (/usr/lib/nprobe/plugins/libsipPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin SMTP Protocol (/usr/lib/nprobe/plugins/libsmtpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [plugin.c:794] WARNING: Plugin SSDP Protocol (/usr/lib/nprobe/plugins/libssdpPlugin-9.2.201231.so) version mismatch [loaded=$Revision: 6996 $][expected=$Revision: 7900 $]: discarded 20/Sep/2022 07:35:15 [nprobe.c:5303] Valid nProbe Pro license found 20/Sep/2022 07:35:15 [nprobe.c:7517] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ? 20/Sep/2022 07:35:15 [nprobe.c:7520] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ? 20/Sep/2022 07:35:15 [nprobe.c:7545] Using ZMQ sourceId 598266993 20/Sep/2022 07:35:15 [nprobe.c:7619] Welcome to nProbe v.10.1.220919 for x86_64-unknown-linux-gnu with native PF_RING acceleration 20/Sep/2022 07:35:15 [nprobe.c:7641] Pro Edition running on CentOS Linux release 7.9.2009 (Core) 20/Sep/2022 07:35:15 [nprobe.c:7642] Current limits [4 ZMQ exporters][4 collector devices] 20/Sep/2022 07:35:15 [nprobe.c:7653] SystemId: L1212EDB500050783--U1212EDB5B105630E--OL 20/Sep/2022 07:35:15 [nprobe.c:7726] Sample rate [packet: 1][flow collection/export: 1/1] 20/Sep/2022 07:35:15 [nprobe.c:9705] Using template @NTOPNG@ 20/Sep/2022 07:35:15 [nprobe.c:9707] Using NetFlow Packet Payload Len: 1472 20/Sep/2022 07:35:15 [nprobe.c:9596] @NTOPNG@ expanded to " %IN_SRC_MAC %OUT_DST_MAC %INPUT_SNMP %OUTPUT_SNMP %SRC_VLAN %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %L7_PROTO %L7_CONFIDENCE %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED %CLIENT_TCP_FLAGS %SERVER_TCP_FLAGS %L7_PROTO_RISK %L7_RISK_SCORE %EXPORTER_IPV4_ADDRESS %DIRECTION %SAMPLING_INTERVAL %TOTAL_FLOWS_EXP %NPROBE_IPV4_ADDRESS %CLIENT_NW_LATENCY_MS %SERVER_NW_LATENCY_MS %APPL_LATENCY_MS %TCP_WIN_MAX_IN %TCP_WIN_MAX_OUT %OOORDER_IN_PKTS %OOORDER_OUT_PKTS %RETRANSMITTED_IN_PKTS %RETRANSMITTED_OUT_PKTS %SRC_FRAGMENTS %DST_FRAGMENTS %L7_INFO %DNS_QUERY %DNS_QUERY_TYPE %DNS_RET_CODE %HTTP_URL %HTTP_SITE %HTTP_METHOD %HTTP_RET_CODE %TLS_SERVER_NAME %BITTORRENT_HASH %SRC_TOS %DST_TOS %HTTP_USER_AGENT %L7_RISK_INFO " 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY_TYPE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_URL': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_SITE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_METHOD': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_USER_AGENT': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY_TYPE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_URL': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_SITE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_METHOD': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_USER_AGENT': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'NPROBE_IPV6_ADDRESS': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY_TYPE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_URL': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_SITE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_METHOD': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_USER_AGENT': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'NPROBE_IPV6_ADDRESS': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_QUERY_TYPE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'DNS_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_URL': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_SITE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_METHOD': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_RET_CODE': Pro version does not include plugins. 20/Sep/2022 07:35:15 [template.c:3491] WARNING: Unable to locate template 'HTTP_USER_AGENT': Pro version does not include plugins. 20/Sep/2022 07:35:15 [plugin.c:1196] 0 plugin(s) enabled 20/Sep/2022 07:35:15 [nprobe.c:10248] Each flow is 326 bytes long 20/Sep/2022 07:35:15 [nprobe.c:10249] The # flows per packet has been set to 3 20/Sep/2022 07:35:15 [nprobe.c:10252] IP TOS is ignored 20/Sep/2022 07:35:15 [nprobe.c:11020] Flow export type (-T): bidirectional flows 20/Sep/2022 07:35:15 [nprobe.c:11225] Flows ASs will not be computed (no GeoDB files loaded with --as-list) 20/Sep/2022 07:35:15 [nprobe.c:11257] Flows will be exported in NetFlow 9 format 20/Sep/2022 07:35:15 [nprobe.c:11300] Learning the public IP address.. Disable it with --disable-startup-checks 20/Sep/2022 07:35:15 [util.c:6293] Initializing ZMQ as server 20/Sep/2022 07:35:15 [util.c:6372] Successfully created ZMQ endpoint tcp://*:9999 with sourceId: 598266993 20/Sep/2022 07:35:15 [pf_ring.c:431] Initializing PF_RING socket on device et2.. (promisc) 20/Sep/2022 07:35:15 [pf_ring.c:473] Dumping traffic statistics on /proc/net/pf_ring/stats/1827-et2.24 20/Sep/2022 07:35:15 [pf_ring.c:545] PF_RING enabled on et2 20/Sep/2022 07:35:15 [nprobe.c:11482] Capturing packets from PF_RING interface et2 20/Sep/2022 07:35:15 [util.c:5188] nProbe changed user to 'nprobe' 20/Sep/2022 07:35:15 [export.c:567] Using TLV as serialization format 20/Sep/2022 07:35:15 [nprobe.c:11766] nProbe started successfully error reading link speed on et2

I followed the user guide at https://www.ntop.org/guides/ntopng/using_with_other_tools/nprobe.html.

I have no problems if ntopng is configured to read the interface directly (i.e. -i=et2) but the interface will be in a different site at my final setup.

lucaderi commented 1 year ago

You seem to have a mix of versions, please resolve them. The error reported is not harmful, you can safely ignore it.