search

pavel-odintsov / fastnetmon

FastNetMon - very fast DDoS sensor with sFlow/Netflow/IPFIX/SPAN support
https://fastnetmon.com
GNU General Public License v2.0
3.41k stars 565 forks source link

centos6 PF_RING is failed #674

Closed xswvfr closed 6 years ago

xswvfr commented 7 years ago

hi sir i used centos6 install , but start fail tail -f /var/log/fastnetmon.log PF_RING is failed

017-07-06 14:38:55,336 [ERROR] PF_RING initilization failed, exit from programm

lsmod |grep pf_ring pf_ring 691797 0

cat /proc/net/pf_ring/info PF_RING Version : 6.0.3 ($Revision: 已导出 $) Total rings : 0

Standard (non DNA/ZC) Options Ring slots : 4096 Slot version : 16 Capture TX : Yes [RX+TX] IP Defragment : No Socket Mode : Standard Total plugins : 0 Cluster Fragment Queue : 0 Cluster Fragment Discard : 0

so i don't know how to fix it thanks!

xswvfr commented 7 years ago

modinfo pf_ring filename: /lib/modules/2.6.32-696.3.2.el6.x86_64/kernel/net/pf_ring/pf_ring.ko alias: net-pf-27 description: Packet capture acceleration and analysis author: Luca Deri deri@ntop.org license: GPL srcversion: B1E5D96084CEA8960B3D5FA depends:
vermagic: 2.6.32-696.3.2.el6.x86_64 SMP mod_unload modversions parm: min_num_slots:Min number of ring slots (uint) parm: perfect_rules_hash_size:Perfect rules hash size (uint) parm: transparent_mode:(deprecated) (uint) parm: enable_debug:Set to 1 to enable PF_RING debug tracing into the syslog (uint) parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint) parm: enable_frag_coherence:Set to 1 to handle fragments (flow coherence) in clusters (uint) parm: enable_ip_defrag:Set to 1 to enable IP defragmentation(only rx traffic is defragmentead) (uint) parm: quick_mode:Set to 1 to run at full speed but with upto one socket per interface (uint)

pavel-odintsov commented 7 years ago

Hello

Could you share dmesg output?

On Thu, 6 Jul 2017 at 07:55, fyhqycom notifications@github.com wrote:

modinfo pf_ring filename: /lib/modules/2.6.32-696.3.2.el6.x86_64/kernel/net/pf_ring/pf_ring.ko alias: net-pf-27 description: Packet capture acceleration and analysis author: Luca Deri deri@ntop.org license: GPL srcversion: B1E5D96084CEA8960B3D5FA depends: vermagic: 2.6.32-696.3.2.el6.x86_64 SMP mod_unload modversions parm: min_num_slots:Min number of ring slots (uint) parm: perfect_rules_hash_size:Perfect rules hash size (uint) parm: transparent_mode:(deprecated) (uint) parm: enable_debug:Set to 1 to enable PF_RING debug tracing into the syslog (uint) parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint) parm: enable_frag_coherence:Set to 1 to handle fragments (flow coherence) in clusters (uint) parm: enable_ip_defrag:Set to 1 to enable IP defragmentation(only rx traffic is defragmentead) (uint) parm: quick_mode:Set to 1 to run at full speed but with upto one socket per interface (uint)

— You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub https://github.com/pavel-odintsov/fastnetmon/issues/674#issuecomment-313312352, or mute the thread https://github.com/notifications/unsubscribe-auth/ACnfZqervWTZP3vnEXOR_VnBxDh2AXRcks5sLIT2gaJpZM4OPOo_ .

-- Sincerely yours, Pavel Odintsov

xswvfr commented 7 years ago

hi sir `dmesg Initializing cgroup subsys cpuset Initializing cgroup subsys cpu Linux version 2.6.32-696.3.2.el6.x86_64 (mockbuild@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Tue Jun 20 01:26:55 UTC 2017 Command line: ro root=UUID=0f2c4362-40e4-40ad-9121-1ec7e21f3d79 rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us rd_NO_MD crashkernel=auto LANG=zh_CN.UTF-8 rd_NO_LVM rd_NO_DM rhgb quiet KERNEL supported cpus: Intel GenuineIntel AMD AuthenticAMD Centaur CentaurHauls BIOS-provided physical RAM map: BIOS-e820: 0000000000000000 - 000000000009e000 (usable) BIOS-e820: 0000000000100000 - 00000000cf379000 (usable) BIOS-e820: 00000000cf379000 - 00000000cf38f000 (reserved) BIOS-e820: 00000000cf38f000 - 00000000cf3ce000 (ACPI data) BIOS-e820: 00000000cf3ce000 - 00000000d0000000 (reserved) BIOS-e820: 00000000e0000000 - 00000000f0000000 (reserved) BIOS-e820: 00000000fe000000 - 0000000100000000 (reserved) BIOS-e820: 0000000100000000 - 0000001030000000 (usable) SMBIOS version 2.6 @ 0xFCAC0 SMBIOS 2.6 present. DMI: Dell Inc. PowerEdge R410/0V8X2Y, BIOS 1.11.0 07/20/2012 e820 update range: 0000000000000000 - 0000000000001000 (usable) ==> (reserved) e820 remove range: 00000000000a0000 - 0000000000100000 (usable) last_pfn = 0x1030000 max_arch_pfn = 0x400000000 x86 PAT enabled: cpu 0, old 0x7040600070406, new 0x7010600070106 e820 update range: 00000000d0000000 - 0000000100000000 (usable) ==> (reserved) last_pfn = 0xcf379 max_arch_pfn = 0x400000000 initial memory mapped : 0 - 20000000 Using GB pages for direct mapping init_memory_mapping: 0000000000000000-00000000cf379000 0000000000 - 00c0000000 page 1G 00c0000000 - 00cf200000 page 2M 00cf200000 - 00cf379000 page 4k kernel direct mapping tables up to cf379000 @ 8000-b000 Use unified mapping for non-reserved e820 regions. init_memory_mapping: 0000000100000000-0000001030000000 0100000000 - 1000000000 page 1G 1000000000 - 1030000000 page 2M kernel direct mapping tables up to 1030000000 @ a000-c000 RAMDISK: 36e4e000 - 37fef037 ACPI: Deleted _OSI(Windows 2012) ACPI: Deleted _OSI(Windows 2013) ACPI: RSDP 00000000000f1070 00024 (v02 DELL ) ACPI: XSDT 00000000000f1174 0009C (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: FACP 00000000cf3b3f9c 000F4 (v03 DELL PE_SC3 00000001 DELL 00000001) ACPI: DSDT 00000000cf38f000 03BAF (v01 DELL PE_SC3 00000001 INTL 20050624) ACPI: FACS 00000000cf3b6000 00040 ACPI: APIC 00000000cf3b3478 0015E (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SPCR 00000000cf3b35d8 00050 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: HPET 00000000cf3b362c 00038 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: DMAR 00000000cf3b3668 001C0 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: MCFG 00000000cf3b38c4 0003C (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: WD__ 00000000cf3b3904 00134 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SLIC 00000000cf3b3a3c 00024 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: ERST 00000000cf392d50 00270 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: HEST 00000000cf392fc0 003A8 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: BERT 00000000cf392bb0 00030 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: EINJ 00000000cf392be0 00170 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SRAT 00000000cf3b3bc0 00370 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: TCPA 00000000cf3b3f34 00064 (v02 DELL PE_SC3 00000001 DELL 00000001) ACPI: SSDT 00000000cf3b7000 062C4 (v01 INTEL PPM RCM 80000001 INTL 20061109) ACPI: Local APIC address 0xfee00000 Setting APIC routing to flat. SRAT: PXM 1 -> APIC 32 -> Node 0 SRAT: PXM 2 -> APIC 0 -> Node 1 SRAT: PXM 1 -> APIC 34 -> Node 0 SRAT: PXM 2 -> APIC 2 -> Node 1 SRAT: PXM 1 -> APIC 36 -> Node 0 SRAT: PXM 2 -> APIC 4 -> Node 1 SRAT: PXM 1 -> APIC 48 -> Node 0 SRAT: PXM 2 -> APIC 16 -> Node 1 SRAT: PXM 1 -> APIC 50 -> Node 0 SRAT: PXM 2 -> APIC 18 -> Node 1 SRAT: PXM 1 -> APIC 52 -> Node 0 SRAT: PXM 2 -> APIC 20 -> Node 1 SRAT: PXM 1 -> APIC 33 -> Node 0 SRAT: PXM 2 -> APIC 1 -> Node 1 SRAT: PXM 1 -> APIC 35 -> Node 0 SRAT: PXM 2 -> APIC 3 -> Node 1 SRAT: PXM 1 -> APIC 37 -> Node 0 SRAT: PXM 2 -> APIC 5 -> Node 1 SRAT: PXM 1 -> APIC 49 -> Node 0 SRAT: PXM 2 -> APIC 17 -> Node 1 SRAT: PXM 1 -> APIC 51 -> Node 0 SRAT: PXM 2 -> APIC 19 -> Node 1 SRAT: PXM 1 -> APIC 53 -> Node 0 SRAT: PXM 2 -> APIC 21 -> Node 1 SRAT: Node 1 PXM 2 0-d0000000 SRAT: Node 1 PXM 2 100000000-830000000 SRAT: Node 0 PXM 1 830000000-1030000000 NUMA: Allocated memnodemap from b000 - b240 NUMA: Using 28 for the hash shift. Bootmem setup node 0 0000000830000000-0000001030000000 NODE_DATA [0000000830000000 - 0000000830033fff] bootmap [0000000830034000 - 0000000830133fff] pages 100 (9 early reservations) ==> bootmem [0830000000 - 1030000000]

0 [0000000000 - 0000001000] BIOS data page

1 [0000006000 - 0000008000] TRAMPOLINE

2 [0001000000 - 0002045964] TEXT DATA BSS

3 [0036e4e000 - 0037fef037] RAMDISK

4 [000009e800 - 0000100000] BIOS reserved

5 [0002046000 - 00020465a1] BRK

6 [0000008000 - 000000a000] PGTABLE

7 [000000a000 - 000000b000] PGTABLE

8 [000000b000 - 000000b240] MEMNODEMAP

Bootmem setup node 1 0000000000000000-0000000830000000 NODE_DATA [000000000000b280 - 000000000003f27f] bootmap [0000000000100000 - 0000000000205fff] pages 106 (9 early reservations) ==> bootmem [0000000000 - 0830000000]

0 [0000000000 - 0000001000] BIOS data page ==> [0000000000 - 0000001000]

1 [0000006000 - 0000008000] TRAMPOLINE ==> [0000006000 - 0000008000]

2 [0001000000 - 0002045964] TEXT DATA BSS ==> [0001000000 - 0002045964]

3 [0036e4e000 - 0037fef037] RAMDISK ==> [0036e4e000 - 0037fef037]

4 [000009e800 - 0000100000] BIOS reserved ==> [000009e800 - 0000100000]

5 [0002046000 - 00020465a1] BRK ==> [0002046000 - 00020465a1]

6 [0000008000 - 000000a000] PGTABLE ==> [0000008000 - 000000a000]

7 [000000a000 - 000000b000] PGTABLE ==> [000000a000 - 000000b000]

8 [000000b000 - 000000b240] MEMNODEMAP ==> [000000b000 - 000000b240]

found SMP MP-table at [ffff8800000fe710] fe710 Found 133MB of memory at 48MB for crashkernel auto Reserving 133MB of memory at 48MB for crashkernel (System RAM: 66304MB) [ffffea0000000000-ffffea000f1fffff] PMD -> [ffff880028600000-ffff880036dfffff] on node 1 [ffffea001ca80000-ffffea001cbfffff] potential offnode page_structs [ffffea000f200000-ffffea001cbfffff] PMD -> [ffff880038000000-ffff8800459fffff] on node 1 [ffffea001cc00000-ffffea0038bfffff] PMD -> [ffff880830200000-ffff88084c1fffff] on node 0 Zone PFN ranges: DMA 0x00000001 -> 0x00001000 DMA32 0x00001000 -> 0x00100000 Normal 0x00100000 -> 0x01030000 Movable zone start PFN for each node early_node_map[4] active PFN ranges 1: 0x00000001 -> 0x0000009e 1: 0x00000100 -> 0x000cf379 1: 0x00100000 -> 0x00830000 0: 0x00830000 -> 0x01030000 On node 0 totalpages: 8388608 Normal zone: 114688 pages used for memmap Normal zone: 8273920 pages, LIFO batch:31 On node 1 totalpages: 8385302 DMA zone: 56 pages used for memmap DMA zone: 103 pages reserved DMA zone: 3838 pages, LIFO batch:0 DMA32 zone: 14280 pages used for memmap DMA32 zone: 830385 pages, LIFO batch:31 Normal zone: 103040 pages used for memmap Normal zone: 7433600 pages, LIFO batch:31 ACPI: PM-Timer IO Port: 0x808 ACPI: Local APIC address 0xfee00000 Setting APIC routing to flat. ACPI: LAPIC (acpi_id[0x01] lapic_id[0x20] enabled) ACPI: LAPIC (acpi_id[0x02] lapic_id[0x00] enabled) ACPI: LAPIC (acpi_id[0x03] lapic_id[0x22] enabled) ACPI: LAPIC (acpi_id[0x04] lapic_id[0x02] enabled) ACPI: LAPIC (acpi_id[0x05] lapic_id[0x24] enabled) ACPI: LAPIC (acpi_id[0x06] lapic_id[0x04] enabled) ACPI: LAPIC (acpi_id[0x07] lapic_id[0x30] enabled) ACPI: LAPIC (acpi_id[0x08] lapic_id[0x10] enabled) ACPI: LAPIC (acpi_id[0x09] lapic_id[0x32] enabled) ACPI: LAPIC (acpi_id[0x0a] lapic_id[0x12] enabled) ACPI: LAPIC (acpi_id[0x0b] lapic_id[0x34] enabled) ACPI: LAPIC (acpi_id[0x0c] lapic_id[0x14] enabled) ACPI: LAPIC (acpi_id[0x0d] lapic_id[0x21] enabled) ACPI: LAPIC (acpi_id[0x0e] lapic_id[0x01] enabled) ACPI: LAPIC (acpi_id[0x0f] lapic_id[0x23] enabled) ACPI: LAPIC (acpi_id[0x10] lapic_id[0x03] enabled) ACPI: LAPIC (acpi_id[0x11] lapic_id[0x25] enabled) ACPI: LAPIC (acpi_id[0x12] lapic_id[0x05] enabled) ACPI: LAPIC (acpi_id[0x13] lapic_id[0x31] enabled) ACPI: LAPIC (acpi_id[0x14] lapic_id[0x11] enabled) ACPI: LAPIC (acpi_id[0x15] lapic_id[0x33] enabled) ACPI: LAPIC (acpi_id[0x16] lapic_id[0x13] enabled) ACPI: LAPIC (acpi_id[0x17] lapic_id[0x35] enabled) ACPI: LAPIC (acpi_id[0x18] lapic_id[0x15] enabled) ACPI: LAPIC (acpi_id[0x19] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1a] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1b] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1c] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1d] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1e] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1f] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x20] lapic_id[0xff] disabled) ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1]) ACPI: IOAPIC (id[0x00] address[0xfec00000] gsi_base[0]) IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 ACPI: IOAPIC (id[0x01] address[0xfec80000] gsi_base[32]) IOAPIC[1]: apic_id 1, version 32, address 0xfec80000, GSI 32-55 ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) ACPI: IRQ0 used by override. ACPI: IRQ2 used by override. ACPI: IRQ9 used by override. Using ACPI (MADT) for SMP configuration information ACPI: HPET id: 0x8086a301 base: 0xfed00000 SMP: Allowing 32 CPUs, 8 hotplug CPUs nr_irqs_gsi: 56 PM: Registered nosave memory: 000000000009e000 - 0000000000100000 PM: Registered nosave memory: 00000000cf379000 - 00000000cf38f000 PM: Registered nosave memory: 00000000cf38f000 - 00000000cf3ce000 PM: Registered nosave memory: 00000000cf3ce000 - 00000000d0000000 PM: Registered nosave memory: 00000000d0000000 - 00000000e0000000 PM: Registered nosave memory: 00000000e0000000 - 00000000f0000000 PM: Registered nosave memory: 00000000f0000000 - 00000000fe000000 PM: Registered nosave memory: 00000000fe000000 - 0000000100000000 Allocating PCI resources starting at d0000000 (gap: d0000000:10000000) Booting paravirtualized kernel on bare hardware NR_CPUS:4096 nr_cpumask_bits:32 nr_cpu_ids:32 nr_node_ids:2 PERCPU: Embedded 31 pages/cpu @ffff880028200000 s96600 r8192 d22184 u131072 pcpu-alloc: s96600 r8192 d22184 u131072 alloc=1*2097152 pcpu-alloc: [0] 00 02 04 06 08 10 12 14 16 18 20 22 24 26 28 30 pcpu-alloc: [1] 01 03 05 07 09 11 13 15 17 19 21 23 25 27 29 31 Built 2 zonelists in Zone order, mobility grouping on. Total pages: 16541743 Policy zone: Normal Kernel command line: ro root=UUID=0f2c4362-40e4-40ad-9121-1ec7e21f3d79 rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us rd_NO_MD crashkernel=133M@48M LANG=zh_CN.UTF-8 rd_NO_LVM rd_NO_DM rhgb quiet PID hash table entries: 4096 (order: 3, 32768 bytes) Memory: 65934272k/67895296k available (5468k kernel code, 799656k absent, 1161368k reserved, 6953k data, 1316k init) Hierarchical RCU implementation. NR_IRQS:33024 nr_irqs:1208 Extended CMOS year: 2000 Console: colour VGA+ 80x25 console [tty0] enabled allocated 268435456 bytes of page_cgroup please try 'cgroup_disable=memory' option if you don't want memory cgroups hpet clockevent registered Fast TSC calibration using PIT Detected 2260.999 MHz processor. Calibrating delay loop (skipped), value calculated using timer frequency.. 4521.99 BogoMIPS (lpj=2260999) pid_max: default: 32768 minimum: 301 Security Framework initialized SELinux: Initializing. SELinux: Starting in permissive mode Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes) Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes) Mount-cache hash table entries: 256 Initializing cgroup subsys ns Initializing cgroup subsys cpuacct Initializing cgroup subsys memory Initializing cgroup subsys devices Initializing cgroup subsys freezer Initializing cgroup subsys net_cls Initializing cgroup subsys blkio Initializing cgroup subsys perf_event Initializing cgroup subsys net_prio CPU: Physical Processor ID: 1 CPU: Processor Core ID: 0 mce: CPU supports 9 MCE banks CPU0: Thermal monitoring enabled (TM1) using mwait in idle threads. ACPI: Core revision 20090903 ftrace: converting mcount calls to 0f 1f 44 00 00 ftrace: allocating 21969 entries in 87 pages dmar: Host address width 40 dmar: DRHD base: 0x000000fed90000 flags: 0x1 dmar: IOMMU 0: reg_base_addr fed90000 ver 1:0 cap c90780106f0462 ecap f020fe dmar: RMRR base: 0x000000cf4c8000 end: 0x000000cf4dffff dmar: RMRR base: 0x000000cf4b1000 end: 0x000000cf4bffff dmar: RMRR base: 0x000000cf4a1000 end: 0x000000cf4a1fff dmar: RMRR base: 0x000000cf4a3000 end: 0x000000cf4a3fff dmar: RMRR base: 0x000000cf4a5000 end: 0x000000cf4a5fff dmar: RMRR base: 0x000000cf4a7000 end: 0x000000cf4a7fff dmar: RMRR base: 0x000000cf4a9000 end: 0x000000cf4a9fff dmar: RMRR base: 0x000000cf4c0000 end: 0x000000cf4c0fff dmar: RMRR base: 0x000000cf4c2000 end: 0x000000cf4c2fff dmar: ATSR flags: 0x0 IOAPIC id 0 under DRHD base 0xfed90000 IOAPIC id 1 under DRHD base 0xfed90000 Enabled IRQ remapping in xapic mode APIC routing finalized to physical flat. alloc irq_desc for 56 on node 0 alloc kstat_irqs on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 CPU0: Intel(R) Xeon(R) CPU L5640 @ 2.27GHz stepping 02 Performance Events: PEBS fmt1+, 16-deep LBR, Westmere events, Intel PMU driver. CPUID marked event: 'bus cycles' unavailable ... version: 3 ... bit width: 48 ... generic registers: 4 ... value mask: 0000ffffffffffff ... max period: 000000007fffffff ... fixed-purpose events: 3 ... event mask: 000000070000000f NMI watchdog enabled, takes one hw-pmu counter. Booting Node 1, Processors #1 Ok. Booting Node 0, Processors #2 Ok. Booting Node 1, Processors #3 Ok. Booting Node 0, Processors #4 Ok. Booting Node 1, Processors #5 Ok. Booting Node 0, Processors #6 Ok. Booting Node 1, Processors #7 Ok. Booting Node 0, Processors #8 Ok. Booting Node 1, Processors #9 Ok. Booting Node 0, Processors #10 Ok. Booting Node 1, Processors #11 Ok. Booting Node 0, Processors #12 Ok. Booting Node 1, Processors #13 Ok. Booting Node 0, Processors #14 Ok. Booting Node 1, Processors #15 Ok. Booting Node 0, Processors #16 Ok. Booting Node 1, Processors #17 Ok. Booting Node 0, Processors #18 Ok. Booting Node 1, Processors #19 Ok. Booting Node 0, Processors #20 Ok. Booting Node 1, Processors #21 Ok. Booting Node 0, Processors #22 Ok. Booting Node 1, Processors #23 Brought up 24 CPUs Total of 24 processors activated (108526.08 BogoMIPS). sizeof(vma)=200 bytes sizeof(page)=56 bytes sizeof(inode)=592 bytes sizeof(dentry)=192 bytes sizeof(ext3inode)=800 bytes sizeof(buffer_head)=104 bytes sizeof(skbuff)=232 bytes sizeof(task_struct)=2672 bytes devtmpfs: initialized regulator: core version 0.5 NET: Registered protocol family 16 ACPI FADT declares the system doesn't support PCIe ASPM, so disable it ACPI: bus type pci registered PCI: MCFG configuration 0: base e0000000 segment 0 buses 0 - 255 PCI: MCFG area at e0000000 reserved in E820 PCI: Using MMCONFIG at e0000000 - efffffff PCI: Using configuration type 1 for base access bio: create slab at 0 ACPI: EC: Look up EC in DSDT ACPI: BIOS _OSI(Linux) query ignored ACPI: Interpreter enabled ACPI: (supports S0 S4 S5) ACPI: Using IOAPIC for interrupt routing ACPI: No dock devices found. HEST: Table parsing has been initialized. PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) pci_root PNP0A08:00: host bridge window [io 0x0000-0x0cf7] pci_root PNP0A08:00: host bridge window [io 0x0d00-0xffff] pci_root PNP0A08:00: host bridge window [mem 0x000a0000-0x000bffff] pci_root PNP0A08:00: host bridge window [mem 0xd0000000-0xfdffffff] pci_root PNP0A08:00: host bridge window [mem 0xfed40000-0xfed44fff] PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff] pci_bus 0000:00: root bus resource [mem 0xd0000000-0xfdffffff] pcibus 0000:00: root bus resource [mem 0xfed40000-0xfed44fff] [Hardware Error]: This system BIOS has enabled interrupt remapping on a chipset that contains an errata making that feature unstable. Please reboot with intremap=off added to the kernel command line and contact your BIOS vendor for an update pci 0000:00:00.0: PME# supported from D0 D3hot D3cold pci 0000:00:00.0: PME# disabled pci 0000:00:01.0: PME# supported from D0 D3hot D3cold pci 0000:00:01.0: PME# disabled pci 0000:00:03.0: PME# supported from D0 D3hot D3cold pci 0000:00:03.0: PME# disabled pci 0000:00:07.0: PME# supported from D0 D3hot D3cold pci 0000:00:07.0: PME# disabled pci 0000:00:1a.0: reg 20: [io 0xec40-0xec5f] pci 0000:00:1a.1: reg 20: [io 0xec60-0xec7f] pci 0000:00:1a.7: reg 10: [mem 0xdf0fe000-0xdf0fe3ff] pci 0000:00:1a.7: PME# supported from D0 D3hot D3cold pci 0000:00:1a.7: PME# disabled pci 0000:00:1d.0: reg 20: [io 0xec80-0xec9f] pci 0000:00:1d.1: reg 20: [io 0xeca0-0xecbf] pci 0000:00:1d.2: reg 20: [io 0xecc0-0xecdf] pci 0000:00:1d.3: reg 20: [io 0xece0-0xecff] pci 0000:00:1d.7: reg 10: [mem 0xdf0ff000-0xdf0ff3ff] pci 0000:00:1d.7: PME# supported from D0 D3hot D3cold pci 0000:00:1d.7: PME# disabled pci 0000:00:1f.0: quirk: [io 0x0800-0x087f] claimed by ICH6 ACPI/GPIO/TCO pci 0000:00:1f.0: quirk: [io 0x0880-0x08bf] claimed by ICH6 GPIO pci 0000:00:1f.0: ICH7 LPC Generic IO decode 1 PIO at 0c00 (mask 007f) pci 0000:00:1f.0: ICH7 LPC Generic IO decode 2 PIO at 0ca0 (mask 000f) pci 0000:00:1f.0: ICH7 LPC Generic IO decode 3 PIO at 00e0 (mask 000f) pci 0000:01:00.0: reg 10: [mem 0xda000000-0xdbffffff 64bit] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold pci 0000:01:00.0: PME# disabled pci 0000:01:00.1: reg 10: [mem 0xdc000000-0xddffffff 64bit] pci 0000:01:00.1: PME# supported from D0 D3hot D3cold pci 0000:01:00.1: PME# disabled pci 0000:00:01.0: PCI bridge to [bus 01-01] pci 0000:00:01.0: bridge window [mem 0xda000000-0xddffffff] pci 0000:00:03.0: PCI bridge to [bus 02-02] pci 0000:03:00.0: reg 10: [io 0xfc00-0xfcff] pci 0000:03:00.0: reg 14: [mem 0xdf1bc000-0xdf1bffff 64bit] pci 0000:03:00.0: reg 1c: [mem 0xdf1c0000-0xdf1fffff 64bit] pci 0000:03:00.0: reg 30: [mem 0xdf100000-0xdf13ffff pref] pci 0000:03:00.0: supports D1 D2 pci 0000:00:07.0: PCI bridge to [bus 03-03] pci 0000:00:07.0: bridge window [io 0xf000-0xffff] pci 0000:00:07.0: bridge window [mem 0xdf100000-0xdf1fffff] pci 0000:04:03.0: reg 10: [mem 0xd9800000-0xd9ffffff pref] pci 0000:04:03.0: reg 14: [mem 0xde7fc000-0xde7fffff] pci 0000:04:03.0: reg 18: [mem 0xde800000-0xdeffffff] pci 0000:04:03.0: reg 30: [mem 0x00000000-0x0000ffff pref] pci 0000:00:1e.0: PCI bridge to [bus 04-04] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xde000000-0xdeffffff] pci 0000:00:1e.0: bridge window [mem 0xd9800000-0xd9ffffff 64bit pref] pci 0000:00:1e.0: bridge window [io 0x0000-0x0cf7] (subtractive decode) pci 0000:00:1e.0: bridge window [io 0x0d00-0xffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0x000a0000-0x000bffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xd0000000-0xfdffffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xfed40000-0xfed44fff] (subtractive decode) ACPI: PCI Interrupt Routing Table [_SB.PCI0.PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX1.PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX3.PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX7.PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.COMP._PRT] pci0000:00: Requesting ACPI _OSC control (0x15) pci0000:00: ACPI _OSC control (0x15) granted ACPI: PCI Interrupt Link [LK00] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK01] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK02] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK03] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK04] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK05] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK06] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK07] (IRQs 3 4 5 6 7 10 11 14 15) vgaarb: device added: PCI:0000:04:03.0,decodes=io+mem,owns=io+mem,locks=none vgaarb: loaded vgaarb: bridge control possible 0000:04:03.0 SCSI subsystem initialized libata version 3.00 loaded. usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PCI: Using ACPI for IRQ routing PCI: old code would have set cacheline size to 32 bytes, but clflush_size = 64 PCI: pci_cache_line_size set to 64 bytes NetLabel: Initializing NetLabel: domain hash size = 128 NetLabel: protocols = UNLABELED CIPSOv4 NetLabel: unlabeled traffic allowed by default HPET: 4 timers in total, 0 timers will be used for per-cpu timer hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0 hpet0: 4 comparators, 64-bit 14.318180 MHz counter Switching to clocksource hpet pnp: PnP ACPI init ACPI: bus type pnp registered pnp 00:00: [io 0x0cf8-0x0cff] pnp 00:00: Plug and Play ACPI device, IDs PNP0a08 PNP0a03 (active) pnp 00:01: [io 0x0080-0x009f] pnp 00:01: [io 0x0000-0x001f] pnp 00:01: [io 0x00c0-0x00df] pnp 00:01: [dma 4] pnp 00:01: Plug and Play ACPI device, IDs PNP0200 (active) pnp 00:02: [io 0x00f0-0x00ff] pnp 00:02: [irq 13] pnp 00:02: Plug and Play ACPI device, IDs PNP0c04 (active) pnp 00:03: [io 0x0061] pnp 00:03: Plug and Play ACPI device, IDs PNP0c01 (active) pnp 00:04: [io 0x0070-0x007f] pnp 00:04: [irq 8] pnp 00:04: Plug and Play ACPI device, IDs PNP0b00 (active) pnp 00:05: [io 0x03f8-0x03ff] pnp 00:05: [irq 4] pnp 00:05: Plug and Play ACPI device, IDs PNP0501 (active) pnp 00:06: [io 0x02f8-0x02ff] pnp 00:06: [irq 3] pnp 00:06: Plug and Play ACPI device, IDs PNP0501 (active) pnp 00:07: [io 0x0800-0x087f] pnp 00:07: [io 0x00e0-0x00e7] pnp 00:07: [io 0x0880-0x08ff] pnp 00:07: [io 0x0900-0x091f] pnp 00:07: [io 0x0920-0x0923] pnp 00:07: [io 0x0924] pnp 00:07: [io 0x0c00-0x0c7f] pnp 00:07: [io 0x0ca0-0x0ca7] pnp 00:07: [io 0x0ca9-0x0cab] pnp 00:07: [io 0x0cad-0x0caf] pnp 00:07: [io 0x0060] pnp 00:07: [io 0x0064] pnp 00:07: Plug and Play ACPI device, IDs PNP0c01 (active) pnp 00:08: [io 0x0ca8] pnp 00:08: [io 0x0cac] pnp 00:08: [irq 0 disabled] pnp 00:08: Plug and Play ACPI device, IDs IPI0001 (active) pnp 00:09: [mem 0xe0000000-0xefffffff] pnp 00:09: Plug and Play ACPI device, IDs PNP0c02 (active) pnp 00:0a: [mem 0xfed00000-0xfed003ff] pnp 00:0a: Plug and Play ACPI device, IDs PNP0103 (active) pnp 00:0b: [mem 0xfed90000-0xfed91fff] pnp 00:0b: Plug and Play ACPI device, IDs PNP0c02 (active) pnp: PnP ACPI: found 12 devices ACPI: ACPI bus type pnp unregistered system 00:07: [io 0x0800-0x087f] has been reserved system 00:07: [io 0x0880-0x08ff] could not be reserved system 00:07: [io 0x0900-0x091f] has been reserved system 00:07: [io 0x0920-0x0923] has been reserved system 00:07: [io 0x0924] has been reserved system 00:07: [io 0x0c00-0x0c7f] has been reserved system 00:07: [io 0x0ca0-0x0ca7] has been reserved system 00:07: [io 0x0ca9-0x0cab] has been reserved system 00:07: [io 0x0cad-0x0caf] has been reserved system 00:09: [mem 0xe0000000-0xefffffff] has been reserved system 00:0b: [mem 0xfed90000-0xfed91fff] could not be reserved pci 0000:00:01.0: PCI bridge to [bus 01-01] pci 0000:00:01.0: bridge window [mem 0xda000000-0xddffffff] pci 0000:00:03.0: PCI bridge to [bus 02-02] pci 0000:00:07.0: PCI bridge to [bus 03-03] pci 0000:00:07.0: bridge window [io 0xf000-0xffff] pci 0000:00:07.0: bridge window [mem 0xdf100000-0xdf1fffff] pci 0000:04:03.0: BAR 6: assigned [mem 0xde000000-0xde00ffff pref] pci 0000:00:1e.0: PCI bridge to [bus 04-04] pci 0000:00:1e.0: bridge window [mem 0xde000000-0xdeffffff] pci 0000:00:1e.0: bridge window [mem 0xd9800000-0xd9ffffff 64bit pref] alloc irq_desc for 53 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:01.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:01.0: setting latency timer to 64 pci 0000:00:03.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:03.0: setting latency timer to 64 pci 0000:00:07.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:07.0: setting latency timer to 64 pci 0000:00:1e.0: setting latency timer to 64 pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff] pci_bus 0000:00: resource 7 [mem 0xd0000000-0xfdffffff] pci_bus 0000:00: resource 8 [mem 0xfed40000-0xfed44fff] pci_bus 0000:01: resource 1 [mem 0xda000000-0xddffffff] pci_bus 0000:03: resource 0 [io 0xf000-0xffff] pci_bus 0000:03: resource 1 [mem 0xdf100000-0xdf1fffff] pci_bus 0000:04: resource 1 [mem 0xde000000-0xdeffffff] pci_bus 0000:04: resource 2 [mem 0xd9800000-0xd9ffffff 64bit pref] pci_bus 0000:04: resource 4 [io 0x0000-0x0cf7] pci_bus 0000:04: resource 5 [io 0x0d00-0xffff] pci_bus 0000:04: resource 6 [mem 0x000a0000-0x000bffff] pci_bus 0000:04: resource 7 [mem 0xd0000000-0xfdffffff] pci_bus 0000:04: resource 8 [mem 0xfed40000-0xfed44fff] NET: Registered protocol family 2 IP route cache hash table entries: 524288 (order: 10, 4194304 bytes) TCP established hash table entries: 524288 (order: 11, 8388608 bytes) TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) TCP: Hash tables configured (established 524288 bind 65536) TCP reno registered NET: Registered protocol family 1 alloc irq_desc for 17 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17 pci 0000:00:1a.0: PCI INT A disabled alloc irq_desc for 18 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.1: PCI INT B -> GSI 18 (level, low) -> IRQ 18 pci 0000:00:1a.1: PCI INT B disabled alloc irq_desc for 19 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.7: PCI INT C -> GSI 19 (level, low) -> IRQ 19 pci 0000:00:1a.7: PCI INT C disabled alloc irq_desc for 21 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1d.0: PCI INT A -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.0: PCI INT A disabled alloc irq_desc for 20 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1d.1: PCI INT B -> GSI 20 (level, low) -> IRQ 20 pci 0000:00:1d.1: PCI INT B disabled pci 0000:00:1d.2: PCI INT C -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.2: PCI INT C disabled pci 0000:00:1d.3: PCI INT D -> GSI 20 (level, low) -> IRQ 20 pci 0000:00:1d.3: PCI INT D disabled pci 0000:00:1d.7: PCI INT A -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.7: PCI INT A disabled pci 0000:03:00.0: [Firmware Bug]: VPD access disabled pci 0000:04:03.0: Boot video device Trying to unpack rootfs image as initramfs... Freeing initrd memory: 18052k freed dmar: Device scope device [0000:00:1a.02] not found PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Placing 64MB software IO TLB between ffff880020000000 - ffff880024000000 software IO TLB at phys 0x20000000 - 0x24000000 sha256_ssse3: Using SSSE3 optimized SHA-256 implementation futex hash table entries: 8192 (order: 7, 524288 bytes) audit: initializing netlink socket (disabled) type=2000 audit(1499315014.624:1): initialized HugeTLB registered 2 MB page size, pre-allocated 0 pages VFS: Disk quotas dquot_6.5.2 Dquot-cache hash table entries: 512 (order 0, 4096 bytes) msgmni has been set to 32768 SELinux: Registering netfilter hooks ksign: Installing public key data Loading keyring

add logs

pavel-odintsov commented 7 years ago

And fastnetmon.conf, please ;)

On Thu, 6 Jul 2017 at 09:38, fyhqycom notifications@github.com wrote:

hi sir `dmesg Initializing cgroup subsys cpuset Initializing cgroup subsys cpu Linux version 2.6.32-696.3.2.el6.x86_64 (mockbuild@c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 SMP Tue Jun 20 01:26:55 UTC 2017 Command line: ro root=UUID=0f2c4362-40e4-40ad-9121-1ec7e21f3d79 rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us rd_NO_MD crashkernel=auto LANG=zh_CN.UTF-8 rd_NO_LVM rd_NO_DM rhgb quiet KERNEL supported cpus: Intel GenuineIntel AMD AuthenticAMD Centaur CentaurHauls BIOS-provided physical RAM map: BIOS-e820: 0000000000000000 - 000000000009e000 (usable) BIOS-e820: 0000000000100000 - 00000000cf379000 (usable) BIOS-e820: 00000000cf379000 - 00000000cf38f000 (reserved) BIOS-e820: 00000000cf38f000 - 00000000cf3ce000 (ACPI data) BIOS-e820: 00000000cf3ce000 - 00000000d0000000 (reserved) BIOS-e820: 00000000e0000000 - 00000000f0000000 (reserved) BIOS-e820: 00000000fe000000 - 0000000100000000 (reserved) BIOS-e820: 0000000100000000 - 0000001030000000 (usable) SMBIOS version 2.6 @ 0xFCAC0 SMBIOS 2.6 present. DMI: Dell Inc. PowerEdge R410/0V8X2Y, BIOS 1.11.0 07/20/2012 e820 update range: 0000000000000000 - 0000000000001000 (usable) ==> (reserved) e820 remove range: 00000000000a0000 - 0000000000100000 (usable) last_pfn = 0x1030000 max_arch_pfn = 0x400000000 x86 PAT enabled: cpu 0, old 0x7040600070406, new 0x7010600070106 e820 update range: 00000000d0000000 - 0000000100000000 (usable) ==> (reserved) last_pfn = 0xcf379 max_arch_pfn = 0x400000000 initial memory mapped : 0 - 20000000 Using GB pages for direct mapping init_memory_mapping: 0000000000000000-00000000cf379000 0000000000 - 00c0000000 page 1G 00c0000000 - 00cf200000 page 2M 00cf200000 - 00cf379000 page 4k kernel direct mapping tables up to cf379000 @ 8000-b000 Use unified mapping for non-reserved e820 regions. init_memory_mapping: 0000000100000000-0000001030000000 0100000000 - 1000000000 page 1G 1000000000 - 1030000000 page 2M kernel direct mapping tables up to 1030000000 @ a000-c000 RAMDISK: 36e4e000 - 37fef037 ACPI: Deleted

OSI(Windows 2012) ACPI: Deleted OSI(Windows 2013) ACPI: RSDP 00000000000f1070 00024 (v02 DELL ) ACPI: XSDT 00000000000f1174 0009C (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: FACP 00000000cf3b3f9c 000F4 (v03 DELL PE_SC3 00000001 DELL 00000001) ACPI: DSDT 00000000cf38f000 03BAF (v01 DELL PE_SC3 00000001 INTL 20050624) ACPI: FACS 00000000cf3b6000 00040 ACPI: APIC 00000000cf3b3478 0015E (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SPCR 00000000cf3b35d8 00050 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: HPET 00000000cf3b362c 00038 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: DMAR 00000000cf3b3668 001C0 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: MCFG 00000000cf3b38c4 0003C (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: WD 00000000cf3b3904 00134 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SLIC 00000000cf3b3a3c 00024 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: ERST 00000000cf392d50 00270 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: HEST 00000000cf392fc0 003A8 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: BERT 00000000cf392bb0 00030 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: EINJ 00000000cf392be0 00170 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: SRAT 00000000cf3b3bc0 00370 (v01 DELL PE_SC3 00000001 DELL 00000001) ACPI: TCPA 00000000cf3b3f34 00064 (v02 DELL PE_SC3 00000001 DELL 00000001) ACPI: SSDT 00000000cf3b7000 062C4 (v01 INTEL PPM RCM 80000001 INTL 20061109) ACPI: Local APIC address 0xfee00000 Setting APIC routing to flat. SRAT: PXM 1 -> APIC 32 -> Node 0 SRAT: PXM 2 -> APIC 0 -> Node 1 SRAT: PXM 1 -> APIC 34 -> Node 0 SRAT: PXM 2 -> APIC 2 -> Node 1 SRAT: PXM 1 -> APIC 36 -> Node 0 SRAT: PXM 2 -> APIC 4 -> Node 1 SRAT: PXM 1 -> APIC 48 -> Node 0 SRAT: PXM 2 -> APIC 16 -> Node 1 SRAT: PXM 1 -> APIC 50 -> Node 0 SRAT: PXM 2 -> APIC 18 -> Node 1 SRAT: PXM 1 -> APIC 52 -> Node 0 SRAT: PXM 2 -> APIC 20 -> Node 1 SRAT: PXM 1 -> APIC 33 -> Node 0 SRAT: PXM 2 -> APIC 1 -> Node 1 SRAT: PXM 1 -> APIC 35 -> Node 0 SRAT: PXM 2 -> APIC 3 -> Node 1 SRAT: PXM 1 -> APIC 37 -> Node 0 SRAT: PXM 2 -> APIC 5 -> Node 1 SRAT: PXM 1 -> APIC 49 -> Node 0 SRAT: PXM 2 -> APIC 17 -> Node 1 SRAT: PXM 1 -> APIC 51 -> Node 0 SRAT: PXM 2 -> APIC 19 -> Node 1 SRAT: PXM 1 -> APIC 53 -> Node 0 SRAT: PXM 2 -> APIC 21 -> Node 1 SRAT: Node 1 PXM 2 0-d0000000 SRAT: Node 1 PXM 2 100000000-830000000 SRAT: Node 0 PXM 1 830000000-1030000000 NUMA: Allocated memnodemap from b000 - b240 NUMA: Using 28 for the hash shift. Bootmem setup node 0 0000000830000000-0000001030000000 NODE_DATA [0000000830000000 - 0000000830033fff] bootmap [0000000830034000 - 0000000830133fff] pages 100 (9 early reservations) ==> bootmem [0830000000 - 1030000000]

0 [0000000000 - 0000001000] BIOS data page

1 https://github.com/pavel-odintsov/fastnetmon/issues/1 [0000006000 -

0000008000] TRAMPOLINE

2 https://github.com/pavel-odintsov/fastnetmon/pull/2 [0001000000 -

0002045964] TEXT DATA BSS

3 https://github.com/pavel-odintsov/fastnetmon/issues/3 [0036e4e000 -

0037fef037] RAMDISK

4 https://github.com/pavel-odintsov/fastnetmon/issues/4 [000009e800 -

0000100000] BIOS reserved

5 https://github.com/pavel-odintsov/fastnetmon/issues/5 [0002046000 -

00020465a1] BRK

6 https://github.com/pavel-odintsov/fastnetmon/issues/6 [0000008000 -

000000a000] PGTABLE

7 https://github.com/pavel-odintsov/fastnetmon/issues/7 [000000a000 -

000000b000] PGTABLE

8 https://github.com/pavel-odintsov/fastnetmon/issues/8 [000000b000 -

000000b240] MEMNODEMAP Bootmem setup node 1 0000000000000000-0000000830000000 NODE_DATA [000000000000b280 - 000000000003f27f] bootmap [0000000000100000 - 0000000000205fff] pages 106 (9 early reservations) ==> bootmem [0000000000 - 0830000000]

0 [0000000000 - 0000001000] BIOS data page ==> [0000000000 - 0000001000]

1 https://github.com/pavel-odintsov/fastnetmon/issues/1 [0000006000 -

0000008000] TRAMPOLINE ==> [0000006000 - 0000008000]

2 https://github.com/pavel-odintsov/fastnetmon/pull/2 [0001000000 -

0002045964] TEXT DATA BSS ==> [0001000000 - 0002045964]

3 https://github.com/pavel-odintsov/fastnetmon/issues/3 [0036e4e000 -

0037fef037] RAMDISK ==> [0036e4e000 - 0037fef037]

4 https://github.com/pavel-odintsov/fastnetmon/issues/4 [000009e800 -

0000100000] BIOS reserved ==> [000009e800 - 0000100000]

5 https://github.com/pavel-odintsov/fastnetmon/issues/5 [0002046000 -

00020465a1] BRK ==> [0002046000 - 00020465a1]

6 https://github.com/pavel-odintsov/fastnetmon/issues/6 [0000008000 -

000000a000] PGTABLE ==> [0000008000 - 000000a000]

7 https://github.com/pavel-odintsov/fastnetmon/issues/7 [000000a000 -

000000b000] PGTABLE ==> [000000a000 - 000000b000]

8 https://github.com/pavel-odintsov/fastnetmon/issues/8 [000000b000 -

000000b240] MEMNODEMAP ==> [000000b000 - 000000b240] found SMP MP-table at [ffff8800000fe710] fe710 Found 133MB of memory at 48MB for crashkernel auto Reserving 133MB of memory at 48MB for crashkernel (System RAM: 66304MB) [ffffea0000000000-ffffea000f1fffff] PMD -> [ffff880028600000-ffff880036dfffff] on node 1 [ffffea001ca80000-ffffea001cbfffff] potential offnode page_structs [ffffea000f200000-ffffea001cbfffff] PMD -> [ffff880038000000-ffff8800459fffff] on node 1 [ffffea001cc00000-ffffea0038bfffff] PMD -> [ffff880830200000-ffff88084c1fffff] on node 0 Zone PFN ranges: DMA 0x00000001 -> 0x00001000 DMA32 0x00001000 -> 0x00100000 Normal 0x00100000 -> 0x01030000 Movable zone start PFN for each node early_node_map[4] active PFN ranges 1: 0x00000001 -> 0x0000009e 1: 0x00000100 -> 0x000cf379 1: 0x00100000 -> 0x00830000 0: 0x00830000 -> 0x01030000 On node 0 totalpages: 8388608 Normal zone: 114688 pages used for memmap Normal zone: 8273920 pages, LIFO batch:31 On node 1 totalpages: 8385302 DMA zone: 56 pages used for memmap DMA zone: 103 pages reserved DMA zone: 3838 pages, LIFO batch:0 DMA32 zone: 14280 pages used for memmap DMA32 zone: 830385 pages, LIFO batch:31 Normal zone: 103040 pages used for memmap Normal zone: 7433600 pages, LIFO batch:31 ACPI: PM-Timer IO Port: 0x808 ACPI: Local APIC address 0xfee00000 Setting APIC routing to flat. ACPI: LAPIC (acpi_id[0x01] lapic_id[0x20] enabled) ACPI: LAPIC (acpi_id[0x02] lapic_id[0x00] enabled) ACPI: LAPIC (acpi_id[0x03] lapic_id[0x22] enabled) ACPI: LAPIC (acpi_id[0x04] lapic_id[0x02] enabled) ACPI: LAPIC (acpi_id[0x05] lapic_id[0x24] enabled) ACPI: LAPIC (acpi_id[0x06] lapic_id[0x04] enabled) ACPI: LAPIC (acpi_id[0x07] lapic_id[0x30] enabled) ACPI: LAPIC (acpi_id[0x08] lapic_id[0x10] enabled) ACPI: LAPIC (acpi_id[0x09] lapic_id[0x32] enabled) ACPI: LAPIC (acpi_id[0x0a] lapic_id[0x12] enabled) ACPI: LAPIC (acpi_id[0x0b] lapic_id[0x34] enabled) ACPI: LAPIC (acpi_id[0x0c] lapic_id[0x14] enabled) ACPI: LAPIC (acpi_id[0x0d] lapic_id[0x21] enabled) ACPI: LAPIC (acpi_id[0x0e] lapic_id[0x01] enabled) ACPI: LAPIC (acpi_id[0x0f] lapic_id[0x23] enabled) ACPI: LAPIC (acpi_id[0x10] lapic_id[0x03] enabled) ACPI: LAPIC (acpi_id[0x11] lapic_id[0x25] enabled) ACPI: LAPIC (acpi_id[0x12] lapic_id[0x05] enabled) ACPI: LAPIC (acpi_id[0x13] lapic_id[0x31] enabled) ACPI: LAPIC (acpi_id[0x14] lapic_id[0x11] enabled) ACPI: LAPIC (acpi_id[0x15] lapic_id[0x33] enabled) ACPI: LAPIC (acpi_id[0x16] lapic_id[0x13] enabled) ACPI: LAPIC (acpi_id[0x17] lapic_id[0x35] enabled) ACPI: LAPIC (acpi_id[0x18] lapic_id[0x15] enabled) ACPI: LAPIC (acpi_id[0x19] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1a] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1b] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1c] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1d] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1e] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x1f] lapic_id[0xff] disabled) ACPI: LAPIC (acpi_id[0x20] lapic_id[0xff] disabled) ACPI: LAPIC_NMI (acpi_id[0xff] high edge lint[0x1]) ACPI: IOAPIC (id[0x00] address[0xfec00000] gsi_base[0]) IOAPIC[0]: apic_id 0, version 32, address 0xfec00000, GSI 0-23 ACPI: IOAPIC (id[0x01] address[0xfec80000] gsi_base[32]) IOAPIC[1]: apic_id 1, version 32, address 0xfec80000, GSI 32-55 ACPI: INT_SRC_OVR (bus 0 bus_irq 0 global_irq 2 dfl dfl) ACPI: INT_SRC_OVR (bus 0 bus_irq 9 global_irq 9 high level) ACPI: IRQ0 used by override. ACPI: IRQ2 used by override. ACPI: IRQ9 used by override. Using ACPI (MADT) for SMP configuration information ACPI: HPET id: 0x8086a301 base: 0xfed00000 SMP: Allowing 32 CPUs, 8 hotplug CPUs nr_irqs_gsi: 56 PM: Registered nosave memory: 000000000009e000 - 0000000000100000 PM: Registered nosave memory: 00000000cf379000 - 00000000cf38f000 PM: Registered nosave memory: 00000000cf38f000 - 00000000cf3ce000 PM: Registered nosave memory: 00000000cf3ce000 - 00000000d0000000 PM: Registered nosave memory: 00000000d0000000 - 00000000e0000000 PM: Registered nosave memory: 00000000e0000000 - 00000000f0000000 PM: Registered nosave memory: 00000000f0000000 - 00000000fe000000 PM: Registered nosave memory: 00000000fe000000 - 0000000100000000 Allocating PCI resources starting at d0000000 (gap: d0000000:10000000) Booting paravirtualized kernel on bare hardware NR_CPUS:4096 nr_cpumask_bits:32 nr_cpu_ids:32 nr_node_ids:2 PERCPU: Embedded 31 pages/cpu @ffff880028200000 s96600 r8192 d22184 u131072 pcpu-alloc: s96600 r8192 d22184 u131072 alloc=1*2097152 pcpu-alloc: [0] 00 02 04 06 08 10 12 14 16 18 20 22 24 26 28 30 pcpu-alloc: [1] 01 03 05 07 09 11 13 15 17 19 21 23 25 27 29 31 Built 2 zonelists in Zone order, mobility grouping on. Total pages: 16541743 Policy zone: Normal Kernel command line: ro root=UUID=0f2c4362-40e4-40ad-9121-1ec7e21f3d79 rd_NO_LUKS KEYBOARDTYPE=pc KEYTABLE=us rd_NO_MD crashkernel=133M@48M LANG=zh_CN.UTF-8 rd_NO_LVM rd_NO_DM rhgb quiet PID hash table entries: 4096 (order: 3, 32768 bytes) Memory: 65934272k/67895296k available (5468k kernel code, 799656k absent, 1161368k reserved, 6953k data, 1316k init) Hierarchical RCU implementation. NR_IRQS:33024 nr_irqs:1208 Extended CMOS year: 2000 Console: colour VGA+ 80x25 console [tty0] enabled allocated 268435456 bytes of page_cgroup please try 'cgroup_disable=memory' option if you don't want memory cgroups hpet clockevent registered Fast TSC calibration using PIT Detected 2260.999 MHz processor. Calibrating delay loop (skipped), value calculated using timer frequency.. 4521.99 BogoMIPS (lpj=2260999) pid_max: default: 32768 minimum: 301 Security Framework initialized SELinux: Initializing. SELinux: Starting in permissive mode Dentry cache hash table entries: 8388608 (order: 14, 67108864 bytes) Inode-cache hash table entries: 4194304 (order: 13, 33554432 bytes) Mount-cache hash table entries: 256 Initializing cgroup subsys ns Initializing cgroup subsys cpuacct Initializing cgroup subsys memory Initializing cgroup subsys devices Initializing cgroup subsys freezer Initializing cgroup subsys net_cls Initializing cgroup subsys blkio Initializing cgroup subsys perf_event Initializing cgroup subsys net_prio CPU: Physical Processor ID: 1 CPU: Processor Core ID: 0 mce: CPU supports 9 MCE banks CPU0: Thermal monitoring enabled (TM1) using mwait in idle threads. ACPI: Core revision 20090903 ftrace: converting mcount calls to 0f 1f 44 00 00 ftrace: allocating 21969 entries in 87 pages dmar: Host address width 40 dmar: DRHD base: 0x000000fed90000 flags: 0x1 dmar: IOMMU 0: reg_base_addr fed90000 ver 1:0 cap c90780106f0462 ecap f020fe dmar: RMRR base: 0x000000cf4c8000 end: 0x000000cf4dffff dmar: RMRR base: 0x000000cf4b1000 end: 0x000000cf4bffff dmar: RMRR base: 0x000000cf4a1000 end: 0x000000cf4a1fff dmar: RMRR base: 0x000000cf4a3000 end: 0x000000cf4a3fff dmar: RMRR base: 0x000000cf4a5000 end: 0x000000cf4a5fff dmar: RMRR base: 0x000000cf4a7000 end: 0x000000cf4a7fff dmar: RMRR base: 0x000000cf4a9000 end: 0x000000cf4a9fff dmar: RMRR base: 0x000000cf4c0000 end: 0x000000cf4c0fff dmar: RMRR base: 0x000000cf4c2000 end: 0x000000cf4c2fff dmar: ATSR flags: 0x0 IOAPIC id 0 under DRHD base 0xfed90000 IOAPIC id 1 under DRHD base 0xfed90000 Enabled IRQ remapping in xapic mode APIC routing finalized to physical flat. alloc irq_desc for 56 on node 0 alloc kstat_irqs on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 alloc irq_2_iommu on node 0 ..TIMER: vector=0x30 apic1=0 pin1=2 apic2=-1 pin2=-1 CPU0: Intel(R) Xeon(R) CPU L5640 @ 2.27GHz stepping 02 Performance Events: PEBS fmt1+, 16-deep LBR, Westmere events, Intel PMU driver. CPUID marked event: 'bus cycles' unavailable ... version: 3 ... bit width: 48 ... generic registers: 4 ... value mask: 0000ffffffffffff ... max period: 000000007fffffff ... fixed-purpose events: 3 ... event mask: 000000070000000f NMI watchdog enabled, takes one hw-pmu counter. Booting Node 1, Processors #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 Ok. Booting Node 0, Processors #2 https://github.com/pavel-odintsov/fastnetmon/pull/2 Ok. Booting Node 1, Processors #3 https://github.com/pavel-odintsov/fastnetmon/issues/3 Ok. Booting Node 0, Processors #4 https://github.com/pavel-odintsov/fastnetmon/issues/4 Ok. Booting Node 1, Processors #5 https://github.com/pavel-odintsov/fastnetmon/issues/5 Ok. Booting Node 0, Processors #6 https://github.com/pavel-odintsov/fastnetmon/issues/6 Ok. Booting Node 1, Processors #7 https://github.com/pavel-odintsov/fastnetmon/issues/7 Ok. Booting Node 0, Processors #8 https://github.com/pavel-odintsov/fastnetmon/issues/8 Ok. Booting Node 1, Processors #9 https://github.com/pavel-odintsov/fastnetmon/issues/9 Ok. Booting Node 0, Processors #10 https://github.com/pavel-odintsov/fastnetmon/issues/10 Ok. Booting Node 1, Processors #11 https://github.com/pavel-odintsov/fastnetmon/issues/11 Ok. Booting Node 0, Processors #12 https://github.com/pavel-odintsov/fastnetmon/pull/12 Ok. Booting Node 1, Processors #13 https://github.com/pavel-odintsov/fastnetmon/issues/13 Ok. Booting Node 0, Processors #14 https://github.com/pavel-odintsov/fastnetmon/issues/14 Ok. Booting Node 1, Processors #15 https://github.com/pavel-odintsov/fastnetmon/issues/15 Ok. Booting Node 0, Processors #16 https://github.com/pavel-odintsov/fastnetmon/issues/16 Ok. Booting Node 1, Processors #17 https://github.com/pavel-odintsov/fastnetmon/issues/17 Ok. Booting Node 0, Processors #18 https://github.com/pavel-odintsov/fastnetmon/issues/18 Ok. Booting Node 1, Processors #19 https://github.com/pavel-odintsov/fastnetmon/issues/19 Ok. Booting Node 0, Processors #20 https://github.com/pavel-odintsov/fastnetmon/issues/20 Ok. Booting Node 1, Processors #21 https://github.com/pavel-odintsov/fastnetmon/issues/21 Ok. Booting Node 0, Processors #22 https://github.com/pavel-odintsov/fastnetmon/issues/22 Ok. Booting Node 1, Processors #23 https://github.com/pavel-odintsov/fastnetmon/issues/23 Brought up 24 CPUs Total of 24 processors activated (108526.08 BogoMIPS). sizeof(vma)=200 bytes sizeof(page)=56 bytes sizeof(inode)=592 bytes sizeof(dentry)=192 bytes sizeof(ext3inode)=800 bytes sizeof(buffer_head)=104 bytes sizeof(skbuff)=232 bytes sizeof(task_struct)=2672 bytes devtmpfs: initialized regulator: core version 0.5 NET: Registered protocol family 16 ACPI FADT declares the system doesn't support PCIe ASPM, so disable it ACPI: bus type pci registered PCI: MCFG configuration 0: base e0000000 segment 0 buses 0 - 255 PCI: MCFG area at e0000000 reserved in E820 PCI: Using MMCONFIG at e0000000 - efffffff PCI: Using configuration type 1 for base access bio: create slab at 0 ACPI: EC: Look up EC in DSDT ACPI: BIOS

OSI(Linux) query ignored ACPI: Interpreter enabled ACPI: (supports S0 S4 S5) ACPI: Using IOAPIC for interrupt routing ACPI: No dock devices found. HEST: Table parsing has been initialized. PCI: Using host bridge windows from ACPI; if necessary, use "pci=nocrs" and report a bug ACPI: PCI Root Bridge [PCI0] (domain 0000 [bus 00-ff]) pci_root PNP0A08:00: host bridge window [io 0x0000-0x0cf7] pci_root PNP0A08:00: host bridge window [io 0x0d00-0xffff] pci_root PNP0A08:00: host bridge window [mem 0x000a0000-0x000bffff] pci_root PNP0A08:00: host bridge window [mem 0xd0000000-0xfdffffff] pci_root PNP0A08:00: host bridge window [mem 0xfed40000-0xfed44fff] PCI host bridge to bus 0000:00 pci_bus 0000:00: root bus resource [io 0x0000-0x0cf7] pci_bus 0000:00: root bus resource [io 0x0d00-0xffff] pci_bus 0000:00: root bus resource [mem 0x000a0000-0x000bffff] pci_bus 0000:00: root bus resource [mem 0xd0000000-0xfdffffff] pci_bus 0000:00: root bus resource [mem 0xfed40000-0xfed44fff] [Hardware Error]: This system BIOS has enabled interrupt remapping on a chipset that contains an errata making that feature unstable. Please reboot with intremap=off added to the kernel command line and contact your BIOS vendor for an update pci 0000:00:00.0: PME# supported from D0 D3hot D3cold pci 0000:00:00.0: PME# disabled pci 0000:00:01.0: PME# supported from D0 D3hot D3cold pci 0000:00:01.0: PME# disabled pci 0000:00:03.0: PME# supported from D0 D3hot D3cold pci 0000:00:03.0: PME# disabled pci 0000:00:07.0: PME# supported from D0 D3hot D3cold pci 0000:00:07.0: PME# disabled pci 0000:00:1a.0: reg 20: [io 0xec40-0xec5f] pci 0000:00:1a.1: reg 20: [io 0xec60-0xec7f] pci 0000:00:1a.7: reg 10: [mem 0xdf0fe000-0xdf0fe3ff] pci 0000:00:1a.7: PME# supported from D0 D3hot D3cold pci 0000:00:1a.7: PME# disabled pci 0000:00:1d.0: reg 20: [io 0xec80-0xec9f] pci 0000:00:1d.1: reg 20: [io 0xeca0-0xecbf] pci 0000:00:1d.2: reg 20: [io 0xecc0-0xecdf] pci 0000:00:1d.3: reg 20: [io 0xece0-0xecff] pci 0000:00:1d.7: reg 10: [mem 0xdf0ff000-0xdf0ff3ff] pci 0000:00:1d.7: PME# supported from D0 D3hot D3cold pci 0000:00:1d.7: PME# disabled pci 0000:00:1f.0: quirk: [io 0x0800-0x087f] claimed by ICH6 ACPI/GPIO/TCO pci 0000:00:1f.0: quirk: [io 0x0880-0x08bf] claimed by ICH6 GPIO pci 0000:00:1f.0: ICH7 LPC Generic IO decode 1 PIO at 0c00 (mask 007f) pci 0000:00:1f.0: ICH7 LPC Generic IO decode 2 PIO at 0ca0 (mask 000f) pci 0000:00:1f.0: ICH7 LPC Generic IO decode 3 PIO at 00e0 (mask 000f) pci 0000:01:00.0: reg 10: [mem 0xda000000-0xdbffffff 64bit] pci 0000:01:00.0: PME# supported from D0 D3hot D3cold pci 0000:01:00.0: PME# disabled pci 0000:01:00.1: reg 10: [mem 0xdc000000-0xddffffff 64bit] pci 0000:01:00.1: PME# supported from D0 D3hot D3cold pci 0000:01:00.1: PME# disabled pci 0000:00:01.0: PCI bridge to [bus 01-01] pci 0000:00:01.0: bridge window [mem 0xda000000-0xddffffff] pci 0000:00:03.0: PCI bridge to [bus 02-02] pci 0000:03:00.0: reg 10: [io 0xfc00-0xfcff] pci 0000:03:00.0: reg 14: [mem 0xdf1bc000-0xdf1bffff 64bit] pci 0000:03:00.0: reg 1c: [mem 0xdf1c0000-0xdf1fffff 64bit] pci 0000:03:00.0: reg 30: [mem 0xdf100000-0xdf13ffff pref] pci 0000:03:00.0: supports D1 D2 pci 0000:00:07.0: PCI bridge to [bus 03-03] pci 0000:00:07.0: bridge window [io 0xf000-0xffff] pci 0000:00:07.0: bridge window [mem 0xdf100000-0xdf1fffff] pci 0000:04:03.0: reg 10: [mem 0xd9800000-0xd9ffffff pref] pci 0000:04:03.0: reg 14: [mem 0xde7fc000-0xde7fffff] pci 0000:04:03.0: reg 18: [mem 0xde800000-0xdeffffff] pci 0000:04:03.0: reg 30: [mem 0x00000000-0x0000ffff pref] pci 0000:00:1e.0: PCI bridge to [bus 04-04] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xde000000-0xdeffffff] pci 0000:00:1e.0: bridge window [mem 0xd9800000-0xd9ffffff 64bit pref] pci 0000:00:1e.0: bridge window [io 0x0000-0x0cf7] (subtractive decode) pci 0000:00:1e.0: bridge window [io 0x0d00-0xffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0x000a0000-0x000bffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xd0000000-0xfdffffff] (subtractive decode) pci 0000:00:1e.0: bridge window [mem 0xfed40000-0xfed44fff] (subtractive decode) ACPI: PCI Interrupt Routing Table [_SB.PCI0. PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX1. PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX3. PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.PEX7. PRT] ACPI: PCI Interrupt Routing Table [_SB.PCI0.COMP._PRT] pci0000:00: Requesting ACPI _OSC control (0x15) pci0000:00: ACPI _OSC control (0x15) granted ACPI: PCI Interrupt Link [LK00] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK01] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK02] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK03] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK04] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK05] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK06] (IRQs 3 4 5 6 7 10 11 14 15) ACPI: PCI Interrupt Link [LK07] (IRQs 3 4 5 6 7 10 11 14 15) vgaarb: device added: PCI:0000:04:03.0,decodes=io+mem,owns=io+mem,locks=none vgaarb: loaded vgaarb: bridge control possible 0000:04:03.0 SCSI subsystem initialized libata version 3.00 loaded. usbcore: registered new interface driver usbfs usbcore: registered new interface driver hub usbcore: registered new device driver usb PCI: Using ACPI for IRQ routing PCI: old code would have set cacheline size to 32 bytes, but clflush_size = 64 PCI: pci_cache_line_size set to 64 bytes NetLabel: Initializing NetLabel: domain hash size = 128 NetLabel: protocols = UNLABELED CIPSOv4 NetLabel: unlabeled traffic allowed by default HPET: 4 timers in total, 0 timers will be used for per-cpu timer hpet0: at MMIO 0xfed00000, IRQs 2, 8, 0, 0 hpet0: 4 comparators, 64-bit 14.318180 MHz counter Switching to clocksource hpet pnp: PnP ACPI init ACPI: bus type pnp registered pnp 00:00: [io 0x0cf8-0x0cff] pnp 00:00: Plug and Play ACPI device, IDs PNP0a08 PNP0a03 (active) pnp 00:01: [io 0x0080-0x009f] pnp 00:01: [io 0x0000-0x001f] pnp 00:01: [io 0x00c0-0x00df] pnp 00:01: [dma 4] pnp 00:01: Plug and Play ACPI device, IDs PNP0200 (active) pnp 00:02: [io 0x00f0-0x00ff] pnp 00:02: [irq 13] pnp 00:02: Plug and Play ACPI device, IDs PNP0c04 (active) pnp 00:03: [io 0x0061] pnp 00:03: Plug and Play ACPI device, IDs PNP0c01 (active) pnp 00:04: [io 0x0070-0x007f] pnp 00:04: [irq 8] pnp 00:04: Plug and Play ACPI device, IDs PNP0b00 (active) pnp 00:05: [io 0x03f8-0x03ff] pnp 00:05: [irq 4] pnp 00:05: Plug and Play ACPI device, IDs PNP0501 (active) pnp 00:06: [io 0x02f8-0x02ff] pnp 00:06: [irq 3] pnp 00:06: Plug and Play ACPI device, IDs PNP0501 (active) pnp 00:07: [io 0x0800-0x087f] pnp 00:07: [io 0x00e0-0x00e7] pnp 00:07: [io 0x0880-0x08ff] pnp 00:07: [io 0x0900-0x091f] pnp 00:07: [io 0x0920-0x0923] pnp 00:07: [io 0x0924] pnp 00:07: [io 0x0c00-0x0c7f] pnp 00:07: [io 0x0ca0-0x0ca7] pnp 00:07: [io 0x0ca9-0x0cab] pnp 00:07: [io 0x0cad-0x0caf] pnp 00:07: [io 0x0060] pnp 00:07: [io 0x0064] pnp 00:07: Plug and Play ACPI device, IDs PNP0c01 (active) pnp 00:08: [io 0x0ca8] pnp 00:08: [io 0x0cac] pnp 00:08: [irq 0 disabled] pnp 00:08: Plug and Play ACPI device, IDs IPI0001 (active) pnp 00:09: [mem 0xe0000000-0xefffffff] pnp 00:09: Plug and Play ACPI device, IDs PNP0c02 (active) pnp 00:0a: [mem 0xfed00000-0xfed003ff] pnp 00:0a: Plug and Play ACPI device, IDs PNP0103 (active) pnp 00:0b: [mem 0xfed90000-0xfed91fff] pnp 00:0b: Plug and Play ACPI device, IDs PNP0c02 (active) pnp: PnP ACPI: found 12 devices ACPI: ACPI bus type pnp unregistered system 00:07: [io 0x0800-0x087f] has been reserved system 00:07: [io 0x0880-0x08ff] could not be reserved system 00:07: [io 0x0900-0x091f] has been reserved system 00:07: [io 0x0920-0x0923] has been reserved system 00:07: [io 0x0924] has been reserved system 00:07: [io 0x0c00-0x0c7f] has been reserved system 00:07: [io 0x0ca0-0x0ca7] has been reserved system 00:07: [io 0x0ca9-0x0cab] has been reserved system 00:07: [io 0x0cad-0x0caf] has been reserved system 00:09: [mem 0xe0000000-0xefffffff] has been reserved system 00:0b: [mem 0xfed90000-0xfed91fff] could not be reserved pci 0000:00:01.0: PCI bridge to [bus 01-01] pci 0000:00:01.0: bridge window [mem 0xda000000-0xddffffff] pci 0000:00:03.0: PCI bridge to [bus 02-02] pci 0000:00:07.0: PCI bridge to [bus 03-03] pci 0000:00:07.0: bridge window [io 0xf000-0xffff] pci 0000:00:07.0: bridge window [mem 0xdf100000-0xdf1fffff] pci 0000:04:03.0: BAR 6: assigned [mem 0xde000000-0xde00ffff pref] pci 0000:00:1e.0: PCI bridge to [bus 04-04] pci 0000:00:1e.0: bridge window [mem 0xde000000-0xdeffffff] pci 0000:00:1e.0: bridge window [mem 0xd9800000-0xd9ffffff 64bit pref] alloc irq_desc for 53 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:01.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:01.0: setting latency timer to 64 pci 0000:00:03.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:03.0: setting latency timer to 64 pci 0000:00:07.0: PCI INT A -> GSI 53 (level, low) -> IRQ 53 pci 0000:00:07.0: setting latency timer to 64 pci 0000:00:1e.0: setting latency timer to 64 pci_bus 0000:00: resource 4 [io 0x0000-0x0cf7] pci_bus 0000:00: resource 5 [io 0x0d00-0xffff] pci_bus 0000:00: resource 6 [mem 0x000a0000-0x000bffff] pci_bus 0000:00: resource 7 [mem 0xd0000000-0xfdffffff] pci_bus 0000:00: resource 8 [mem 0xfed40000-0xfed44fff] pci_bus 0000:01: resource 1 [mem 0xda000000-0xddffffff] pci_bus 0000:03: resource 0 [io 0xf000-0xffff] pci_bus 0000:03: resource 1 [mem 0xdf100000-0xdf1fffff] pci_bus 0000:04: resource 1 [mem 0xde000000-0xdeffffff] pci_bus 0000:04: resource 2 [mem 0xd9800000-0xd9ffffff 64bit pref] pci_bus 0000:04: resource 4 [io 0x0000-0x0cf7] pci_bus 0000:04: resource 5 [io 0x0d00-0xffff] pci_bus 0000:04: resource 6 [mem 0x000a0000-0x000bffff] pci_bus 0000:04: resource 7 [mem 0xd0000000-0xfdffffff] pci_bus 0000:04: resource 8 [mem 0xfed40000-0xfed44fff] NET: Registered protocol family 2 IP route cache hash table entries: 524288 (order: 10, 4194304 bytes) TCP established hash table entries: 524288 (order: 11, 8388608 bytes) TCP bind hash table entries: 65536 (order: 8, 1048576 bytes) TCP: Hash tables configured (established 524288 bind 65536) TCP reno registered NET: Registered protocol family 1 alloc irq_desc for 17 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17 pci 0000:00:1a.0: PCI INT A disabled alloc irq_desc for 18 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.1: PCI INT B -> GSI 18 (level, low) -> IRQ 18 pci 0000:00:1a.1: PCI INT B disabled alloc irq_desc for 19 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1a.7: PCI INT C -> GSI 19 (level, low) -> IRQ 19 pci 0000:00:1a.7: PCI INT C disabled alloc irq_desc for 21 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1d.0: PCI INT A -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.0: PCI INT A disabled alloc irq_desc for 20 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pci 0000:00:1d.1: PCI INT B -> GSI 20 (level, low) -> IRQ 20 pci 0000:00:1d.1: PCI INT B disabled pci 0000:00:1d.2: PCI INT C -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.2: PCI INT C disabled pci 0000:00:1d.3: PCI INT D -> GSI 20 (level, low) -> IRQ 20 pci 0000:00:1d.3: PCI INT D disabled pci 0000:00:1d.7: PCI INT A -> GSI 21 (level, low) -> IRQ 21 pci 0000:00:1d.7: PCI INT A disabled pci 0000:03:00.0: [Firmware Bug]: VPD access disabled pci 0000:04:03.0: Boot video device Trying to unpack rootfs image as initramfs... Freeing initrd memory: 18052k freed dmar: Device scope device [0000:00:1a.02] not found PCI-DMA: Using software bounce buffering for IO (SWIOTLB) Placing 64MB software IO TLB between ffff880020000000 - ffff880024000000 software IO TLB at phys 0x20000000 - 0x24000000 sha256_ssse3: Using SSSE3 optimized SHA-256 implementation futex hash table entries: 8192 (order: 7, 524288 bytes) audit: initializing netlink socket (disabled) type=2000 audit(1499315014.624:1): initialized HugeTLB registered 2 MB page size, pre-allocated 0 pages VFS: Disk quotas dquot_6.5.2 Dquot-cache hash table entries: 512 (order 0, 4096 bytes) msgmni has been set to 32768 SELinux: Registering netfilter hooks ksign: Installing public key data Loading keyring

  • Added public key 705257022A52FA92
  • User ID: CentOS (Kernel Module GPG key) Block layer SCSI generic (bsg) driver version 0.4 loaded (major 250) io scheduler noop registered io scheduler anticipatory registered io scheduler deadline registered io scheduler cfq registered (default) pcieport 0000:00:01.0: setting latency timer to 64 alloc irq_desc for 57 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pcieport 0000:00:01.0: irq 57 for MSI/MSI-X pcieport 0000:00:03.0: setting latency timer to 64 alloc irq_desc for 58 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pcieport 0000:00:03.0: irq 58 for MSI/MSI-X pcieport 0000:00:07.0: setting latency timer to 64 alloc irq_desc for 59 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 pcieport 0000:00:07.0: irq 59 for MSI/MSI-X pci_hotplug: PCI Hot Plug PCI Core version: 0.5 pciehp: PCI Express Hot Plug Controller Driver version: 0.4 acpiphp: ACPI Hot Plug PCI Controller Driver version: 0.5 input: Power Button as /devices/LNXSYSTM:00/LNXPWRBN:00/input/input0 ACPI: Power Button [PWRF] ACPI: acpi_idle yielding to intel_idle [Firmware Bug]: No valid trip found ERST: Error Record Serialization Table (ERST) support is initialized. GHES: APEI firmware first mode is enabled by APEI bit and WHEA _OSC. Non-volatile memory driver v1.3 Linux agpgart interface v0.103 crash memory driver: version 1.1 Serial: 8250/16550 driver, 4 ports, IRQ sharing enabled serial8250: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A serial8250: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A 00:05: ttyS0 at I/O 0x3f8 (irq = 4) is a 16550A 00:06: ttyS1 at I/O 0x2f8 (irq = 3) is a 16550A brd: module loaded loop: module loaded input: Macintosh mouse button emulation as /devices/virtual/input/input1 Fixed MDIO Bus: probed ehci_hcd: USB 2.0 'Enhanced' Host Controller (EHCI) Driver ehci_hcd 0000:00:1a.7: PCI INT C -> GSI 19 (level, low) -> IRQ 19 ehci_hcd 0000:00:1a.7: setting latency timer to 64 ehci_hcd 0000:00:1a.7: EHCI Host Controller ehci_hcd 0000:00:1a.7: new USB bus registered, assigned bus number 1 ehci_hcd 0000:00:1a.7: debug port 1 ehci_hcd 0000:00:1a.7: cache line size of 64 is not supported ehci_hcd 0000:00:1a.7: irq 19, io mem 0xdf0fe000 ehci_hcd 0000:00:1a.7: USB 2.0 started, EHCI 1.00 usb usb1: New USB device found, idVendor=1d6b, idProduct=0002 usb usb1: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb1: Product: EHCI Host Controller usb usb1: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 ehci_hcd usb usb1: SerialNumber: 0000:00:1a.7 usb usb1: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 1-0:1.0: USB hub found hub 1-0:1.0: 4 ports detected ehci_hcd 0000:00:1d.7: PCI INT A -> GSI 21 (level, low) -> IRQ 21 ehci_hcd 0000:00:1d.7: setting latency timer to 64 ehci_hcd 0000:00:1d.7: EHCI Host Controller ehci_hcd 0000:00:1d.7: new USB bus registered, assigned bus number 2 ehci_hcd 0000:00:1d.7: debug port 1 ehci_hcd 0000:00:1d.7: cache line size of 64 is not supported ehci_hcd 0000:00:1d.7: irq 21, io mem 0xdf0ff000 ehci_hcd 0000:00:1d.7: USB 2.0 started, EHCI 1.00 usb usb2: New USB device found, idVendor=1d6b, idProduct=0002 usb usb2: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb2: Product: EHCI Host Controller usb usb2: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 ehci_hcd usb usb2: SerialNumber: 0000:00:1d.7 usb usb2: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 2-0:1.0: USB hub found hub 2-0:1.0: 4 ports detected ohci_hcd: USB 1.1 'Open' Host Controller (OHCI) Driver uhci_hcd: USB Universal Host Controller Interface driver uhci_hcd 0000:00:1a.0: PCI INT A -> GSI 17 (level, low) -> IRQ 17 uhci_hcd 0000:00:1a.0: setting latency timer to 64 uhci_hcd 0000:00:1a.0: UHCI Host Controller uhci_hcd 0000:00:1a.0: new USB bus registered, assigned bus number 3 uhci_hcd 0000:00:1a.0: irq 17, io base 0x0000ec40 usb usb3: New USB device found, idVendor=1d6b, idProduct=0001 usb usb3: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb3: Product: UHCI Host Controller usb usb3: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb3: SerialNumber: 0000:00:1a.0 usb usb3: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 3-0:1.0: USB hub found hub 3-0:1.0: 2 ports detected uhci_hcd 0000:00:1a.1: PCI INT B -> GSI 18 (level, low) -> IRQ 18 uhci_hcd 0000:00:1a.1: setting latency timer to 64 uhci_hcd 0000:00:1a.1: UHCI Host Controller uhci_hcd 0000:00:1a.1: new USB bus registered, assigned bus number 4 uhci_hcd 0000:00:1a.1: irq 18, io base 0x0000ec60 usb usb4: New USB device found, idVendor=1d6b, idProduct=0001 usb usb4: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb4: Product: UHCI Host Controller usb usb4: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb4: SerialNumber: 0000:00:1a.1 usb usb4: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 4-0:1.0: USB hub found hub 4-0:1.0: 2 ports detected uhci_hcd 0000:00:1d.0: PCI INT A -> GSI 21 (level, low) -> IRQ 21 uhci_hcd 0000:00:1d.0: setting latency timer to 64 uhci_hcd 0000:00:1d.0: UHCI Host Controller uhci_hcd 0000:00:1d.0: new USB bus registered, assigned bus number 5 uhci_hcd 0000:00:1d.0: irq 21, io base 0x0000ec80 usb usb5: New USB device found, idVendor=1d6b, idProduct=0001 usb usb5: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb5: Product: UHCI Host Controller usb usb5: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb5: SerialNumber: 0000:00:1d.0 usb usb5: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 5-0:1.0: USB hub found hub 5-0:1.0: 2 ports detected uhci_hcd 0000:00:1d.1: PCI INT B -> GSI 20 (level, low) -> IRQ 20 uhci_hcd 0000:00:1d.1: setting latency timer to 64 uhci_hcd 0000:00:1d.1: UHCI Host Controller uhci_hcd 0000:00:1d.1: new USB bus registered, assigned bus number 6 uhci_hcd 0000:00:1d.1: irq 20, io base 0x0000eca0 usb usb6: New USB device found, idVendor=1d6b, idProduct=0001 usb usb6: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb6: Product: UHCI Host Controller usb usb6: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb6: SerialNumber: 0000:00:1d.1 usb usb6: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 6-0:1.0: USB hub found hub 6-0:1.0: 2 ports detected uhci_hcd 0000:00:1d.2: PCI INT C -> GSI 21 (level, low) -> IRQ 21 uhci_hcd 0000:00:1d.2: setting latency timer to 64 uhci_hcd 0000:00:1d.2: UHCI Host Controller uhci_hcd 0000:00:1d.2: new USB bus registered, assigned bus number 7 uhci_hcd 0000:00:1d.2: irq 21, io base 0x0000ecc0 usb usb7: New USB device found, idVendor=1d6b, idProduct=0001 usb usb7: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb7: Product: UHCI Host Controller usb usb7: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb7: SerialNumber: 0000:00:1d.2 usb usb7: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 7-0:1.0: USB hub found hub 7-0:1.0: 2 ports detected uhci_hcd 0000:00:1d.3: PCI INT D -> GSI 20 (level, low) -> IRQ 20 uhci_hcd 0000:00:1d.3: setting latency timer to 64 uhci_hcd 0000:00:1d.3: UHCI Host Controller uhci_hcd 0000:00:1d.3: new USB bus registered, assigned bus number 8 uhci_hcd 0000:00:1d.3: irq 20, io base 0x0000ece0 usb usb8: New USB device found, idVendor=1d6b, idProduct=0001 usb usb8: New USB device strings: Mfr=3, Product=2, SerialNumber=1 usb usb8: Product: UHCI Host Controller usb usb8: Manufacturer: Linux 2.6.32-696.3.2.el6.x86_64 uhci_hcd usb usb8: SerialNumber: 0000:00:1d.3 usb usb8: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 8-0:1.0: USB hub found hub 8-0:1.0: 2 ports detected PNP: No PS/2 controller found. Probing ports directly. serio: i8042 KBD port at 0x60,0x64 irq 1 serio: i8042 AUX port at 0x60,0x64 irq 12 mice: PS/2 mouse device common for all mice rtc_cmos 00:04: RTC can wake from S4 rtc_cmos 00:04: rtc core: registered rtc_cmos as rtc0 rtc0: alarms up to one day, y3k, 242 bytes nvram, hpet irqs cpuidle: using governor ladder cpuidle: using governor menu EFI Variables Facility v0.08 2004-May-17 usbcore: registered new interface driver hiddev usbcore: registered new interface driver usbhid usbhid: v2.6:USB HID core driver GRE over IPv4 demultiplexor driver TCP cubic registered Initializing XFRM netlink socket NET: Registered protocol family 17 registered taskstats version 1 rtc_cmos 00:04: setting system clock to 2017-07-06 04:23:36 UTC (1499315016) Initalizing network drop monitor service Freeing unused kernel memory: 1316k freed Write protecting the kernel read-only data: 10240k Freeing unused kernel memory: 656k freed Freeing unused kernel memory: 1548k freed dracut: dracut-004-409.el6_8.2 dracut: rd_NO_LUKS: removing cryptoluks activation dracut: rd_NO_LVM: removing LVM activation device-mapper: uevent: version 1.0.3 device-mapper: ioctl: 4.33.1-ioctl (2015-8-18) initialised: dm-devel@redhat.com udev: starting version 147 ACPI: WMI: Mapper loaded dracut: Starting plymouth daemon dracut: rd_NO_MD: removing MD RAID activation megasas: 07.700.00.00-rc1 alloc irq_desc for 38 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 megaraid_sas 0000:03:00.0: PCI INT A -> GSI 38 (level, low) -> IRQ 38 megaraid_sas 0000:03:00.0: setting latency timer to 64 megaraid_sas 0000:03:00.0: FW now in Ready state alloc irq_desc for 60 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 megaraid_sas 0000:03:00.0: irq 60 for MSI/MSI-X megaraid_sas 0000:03:00.0: firmware supports msix : (0) megaraid_sas 0000:03:00.0: current msix/online cpus : (1/24) megaraid_sas 0000:03:00.0: RDPQ mode : (disabled) usb 1-3: new high speed USB device number 2 using ehci_hcd megaraid_sas 0000:03:00.0: controller type : MR(512MB) megaraid_sas 0000:03:00.0: Online Controller Reset(OCR) : Enabled megaraid_sas 0000:03:00.0: Secure JBOD support : No megaraid_sas 0000:03:00.0: megasas_init_mfi: fw_support_ieee=67108864 megaraid_sas 0000:03:00.0: INIT adapter done megaraid_sas 0000:03:00.0: Jbod map is not supported megasas_setup_jbod_map 5034 megaraid_sas 0000:03:00.0: pci id : (0x1000)/(0x0079)/(0x1028)/(0x1f17) megaraid_sas 0000:03:00.0: unevenspan support : no megaraid_sas 0000:03:00.0: firmware crash dump : no megaraid_sas 0000:03:00.0: jbod sync map : no scsi0 : Avago SAS based MegaRAID driver scsi 0:2:0:0: Direct-Access DELL PERC H700 2.10 PQ: 0 ANSI: 5 usb 1-3: New USB device found, idVendor=0424, idProduct=2514 usb 1-3: New USB device strings: Mfr=0, Product=0, SerialNumber=0 usb 1-3: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice hub 1-3:1.0: USB hub found hub 1-3:1.0: 4 ports detected Refined TSC clocksource calibration: 2260.999 MHz. Switching to clocksource tsc sd 0:2:0:0: [sda] 7811891200 512-byte logical blocks: (3.99 TB/3.63 TiB) sd 0:2:0:0: [sda] Write Protect is off sd 0:2:0:0: [sda] Mode Sense: 1f 00 00 08 sd 0:2:0:0: [sda] Write cache: enabled, read cache: enabled, doesn't support DPO or FUA sda: sda1 sda2 sda3 sda4 sd 0:2:0:0: [sda] Attached SCSI disk usb 5-2: new full speed USB device number 2 using uhci_hcd EXT4-fs (sda3): mounted filesystem with ordered data mode. Opts: dracut: Mounted root filesystem /dev/sda3 usb 5-2: New USB device found, idVendor=0624, idProduct=0248 usb 5-2: New USB device strings: Mfr=1, Product=2, SerialNumber=3 usb 5-2: Product: USB Composite Device-0 usb 5-2: Manufacturer: Avocent usb 5-2: SerialNumber: 20080519 usb 5-2: configuration #1 https://github.com/pavel-odintsov/fastnetmon/issues/1 chosen from 1 choice input: Avocent USB Composite Device-0 as /devices/pci0000:00/0000:00:1d.0/usb5/5-2/5-2:1.0/input/input2 generic-usb 0003:0624:0248.0001: input,hidraw0: USB HID v1.00 Keyboard [Avocent USB Composite Device-0] on usb-0000:00:1d.0-2/input0 input: Avocent USB Composite Device-0 as /devices/pci0000:00/0000:00:1d.0/usb5/5-2/5-2:1.1/input/input3 generic-usb 0003:0624:0248.0002: input,hidraw1: USB HID v1.00 Mouse [Avocent USB Composite Device-0] on usb-0000:00:1d.0-2/input1 SELinux: Disabled at runtime. SELinux: Unregistering netfilter hooks type=1404 audit(1499315017.618:2): selinux=0 auid=4294967295 ses=4294967295 dracut: dracut: Switching root udev: starting version 147 bnx2: QLogic bnx2 Gigabit Ethernet Driver v2.2.6 (January 29, 2014) alloc irq_desc for 36 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: PCI INT A -> GSI 36 (level, low) -> IRQ 36 bnx2 0000:01:00.0: setting latency timer to 64 bnx2 0000:01:00.0: eth0: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express found at mem da000000, IRQ 36, node addr 84:2b:2b:0d:05:62 alloc irq_desc for 48 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.1: PCI INT B -> GSI 48 (level, low) -> IRQ 48 bnx2 0000:01:00.1: setting latency timer to 64 bnx2 0000:01:00.1: eth1: Broadcom NetXtreme II BCM5716 1000Base-T (C0) PCI Express found at mem dc000000, IRQ 48, node addr 84:2b:2b:0d:05:63 udev: renamed network interface eth0 to em1 udev: renamed network interface eth1 to em2 EDAC MC: Ver: 2.1.0 Jun 20 2017 sd 0:2:0:0: Attached scsi generic sg0 type 0 dcdbas dcdbas: Dell Systems Management Base Driver (version 5.6.0-3.2) iTCO_vendor_support: vendor-support=0 iTCO_wdt: Intel TCO WatchDog Timer Driver v1.11rh iTCO_wdt: Found a ICH10R TCO device (Version=2, TCOBASE=0x0860) iTCO_wdt: initialized. heartbeat=30 sec (nowayout=0) ipmi message handler version 39.2 IPMI System Interface driver. ipmi_si: probing via ACPI ipmi_si 00:08: [io 0x0ca8] regsize 1 spacing 4 irq 0 ipmi_si: Adding ACPI-specified kcs state machine ipmi_si: probing via SMBIOS ipmi_si: SMBIOS: io 0xca8 regsize 1 spacing 4 irq 0 ipmi_si: Adding SMBIOS-specified kcs state machine duplicate interface ipmi_si: Trying ACPI-specified kcs state machine at i/o address 0xca8, slave address 0x0, irq 0 ipmi_si 00:08: Found new BMC (man_id: 0x0002a2, prod_id: 0x0100, dev_id: 0x20) ipmi_si 00:08: IPMI kcs interface initialized power_meter ACPI000D:00: Found ACPI power meter. kvm: VM_EXIT_LOAD_IA32_PERF_GLOBAL_CTRL does not work properly. Using workaround tun: Universal TUN/TAP device driver, 1.6 tun: (C) 1999-2004 Max Krasnyansky maxk@qualcomm.com EXT4-fs (sda1): mounted filesystem with ordered data mode. Opts: Adding 107315196k swap on /dev/sda2. Priority:-1 extents:1 across:107315196k NET: Registered protocol family 10 lo: Disabled Privacy Extensions ip6_tables: (C) 2000-2006 Netfilter Core Team ip_tables: (C) 2000-2006 Netfilter Core Team nf_conntrack version 0.5.0 (16384 buckets, 65536 max) Bridge firewalling registered bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-mips-09-6.2.1b.fw bnx2 0000:01:00.0: firmware: requesting bnx2/bnx2-rv2p-09-6.0.17.fw alloc irq_desc for 61 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 61 for MSI/MSI-X alloc irq_desc for 62 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 62 for MSI/MSI-X alloc irq_desc for 63 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 63 for MSI/MSI-X alloc irq_desc for 64 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 64 for MSI/MSI-X alloc irq_desc for 65 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 65 for MSI/MSI-X alloc irq_desc for 66 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 66 for MSI/MSI-X alloc irq_desc for 67 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 67 for MSI/MSI-X alloc irq_desc for 68 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 68 for MSI/MSI-X alloc irq_desc for 69 on node -1 alloc kstat_irqs on node -1 alloc irq_2_iommu on node -1 bnx2 0000:01:00.0: irq 69 for MSI/MSI-X bnx2 0000:01:00.0: em1: using MSIX ADDRCONF(NETDEV_UP): em1: link is not ready device em1 entered promiscuous mode bnx2 0000:01:00.0: em1: NIC Copper Link is Up, 1000 Mbps full duplex ADDRCONF(NETDEV_CHANGE): em1: link becomes ready br0: port 1(em1) entering forwarding state type=1305 audit(1499315042.329:3): audit_pid=2375 old=0 auid=4294967295 ses=4294967295 res=1 br0: port 1(em1) entering forwarding state device virbr0-nic entered promiscuous mode virbr0: starting userspace STP failed, starting kernel STP Ebtables v2.0 registered u32 classifier Performance counters on input device check on Actions configured device kvm1792.0 entered promiscuous mode br0: port 2(kvm1792.0) entering forwarding state device kvm2537.0 entered promiscuous mode br0: port 3(kvm2537.0) entering forwarding state device kvm2571.0 entered promiscuous mode br0: port 4(kvm2571.0) entering forwarding state device kvm2254.0 entered promiscuous mode br0: port 5(kvm2254.0) entering forwarding state device kvm2119.0 entered promiscuous mode br0: port 6(kvm2119.0) entering forwarding state device kvm2572.0 entered promiscuous mode br0: port 7(kvm2572.0) entering forwarding state device kvm2547.0 entered promiscuous mode br0: port 8(kvm2547.0) entering forwarding state device kvm2299.0 entered promiscuous mode br0: port 9(kvm2299.0) entering forwarding state device kvm2511.0 entered promiscuous mode br0: port 10(kvm2511.0) entering forwarding state device kvm2517.0 entered promiscuous mode br0: port 11(kvm2517.0) entering forwarding state device kvm2523.0 entered promiscuous mode br0: port 12(kvm2523.0) entering forwarding state device kvm2430.0 entered promiscuous mode br0: port 13(kvm2430.0) entering forwarding state device kvm2079.0 entered promiscuous mode br0: port 14(kvm2079.0) entering forwarding state device kvm1742.0 entered promiscuous mode br0: port 15(kvm1742.0) entering forwarding state device kvm2053.0 entered promiscuous mode br0: port 16(kvm2053.0) entering forwarding state device kvm2358.0 entered promiscuous mode br0: port 17(kvm2358.0) entering forwarding state device kvm2301.0 entered promiscuous mode br0: port 18(kvm2301.0) entering forwarding state device kvm2540.0 entered promiscuous mode br0: port 19(kvm2540.0) entering forwarding state kvm: 4106: cpu0 disabled perfctr wrmsr: 0xc1 data 0xffff device kvm2569.0 entered promiscuous mode br0: port 20(kvm2569.0) entering forwarding state device kvm2509.0 entered promiscuous mode br0: port 21(kvm2509.0) entering forwarding state br0: port 2(kvm1792.0) entering forwarding state br0: port 3(kvm2537.0) entering forwarding state br0: port 4(kvm2571.0) entering forwarding state br0: port 5(kvm2254.0) entering forwarding state br0: port 6(kvm2119.0) entering forwarding state device kvm2402.0 entered promiscuous mode br0: port 22(kvm2402.0) entering forwarding state br0: port 7(kvm2572.0) entering forwarding state br0: port 8(kvm2547.0) entering forwarding state br0: port 9(kvm2299.0) entering forwarding state br0: port 10(kvm2511.0) entering forwarding state br0: port 11(kvm2517.0) entering forwarding state kvm: 4375: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 12(kvm2523.0) entering forwarding state device kvm2272.0 entered promiscuous mode br0: port 23(kvm2272.0) entering forwarding state br0: port 13(kvm2430.0) entering forwarding state br0: port 14(kvm2079.0) entering forwarding state br0: port 15(kvm1742.0) entering forwarding state br0: port 16(kvm2053.0) entering forwarding state device kvm2498.0 entered promiscuous mode br0: port 24(kvm2498.0) entering forwarding state br0: port 17(kvm2358.0) entering forwarding state kvm: 4460: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 4534: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 18(kvm2301.0) entering forwarding state device kvm2256.0 entered promiscuous mode br0: port 25(kvm2256.0) entering forwarding state kvm: 4494: cpu0 unhandled rdmsr: 0x140 kvm: 4494: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 4494: cpu1 unhandled rdmsr: 0x140 br0: port 19(kvm2540.0) entering forwarding state kvm: 4638: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 4749: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2520.0 entered promiscuous mode br0: port 26(kvm2520.0) entering forwarding state br0: port 20(kvm2569.0) entering forwarding state device kvm2123.0 entered promiscuous mode br0: port 27(kvm2123.0) entering forwarding state br0: port 21(kvm2509.0) entering forwarding state kvm: 4671: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2490.0 entered promiscuous mode br0: port 28(kvm2490.0) entering forwarding state kvm: 4602: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 4568: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 22(kvm2402.0) entering forwarding state device kvm2556.0 entered promiscuous mode br0: port 29(kvm2556.0) entering forwarding state br0: port 23(kvm2272.0) entering forwarding state device kvm2360.0 entered promiscuous mode br0: port 30(kvm2360.0) entering forwarding state device kvm2541.0 entered promiscuous mode br0: port 31(kvm2541.0) entering forwarding state br0: port 24(kvm2498.0) entering forwarding state kvm: 4851: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff device kvm2296.0 entered promiscuous mode br0: port 32(kvm2296.0) entering forwarding state kvm: 4851: cpu0 unhandled rdmsr: 0x570 kvm: 4851: cpu1 unhandled rdmsr: 0x570 br0: port 25(kvm2256.0) entering forwarding state device kvm2480.0 entered promiscuous mode br0: port 33(kvm2480.0) entering forwarding state br0: port 26(kvm2520.0) entering forwarding state kvm: 4977: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2436.0 entered promiscuous mode br0: port 34(kvm2436.0) entering forwarding state br0: port 27(kvm2123.0) entering forwarding state br0: port 28(kvm2490.0) entering forwarding state kvm: 5048: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2225.0 entered promiscuous mode br0: port 35(kvm2225.0) entering forwarding state device kvm2590.0 entered promiscuous mode br0: port 36(kvm2590.0) entering forwarding state br0: port 29(kvm2556.0) entering forwarding state br0: port 30(kvm2360.0) entering forwarding state br0: port 31(kvm2541.0) entering forwarding state br0: port 32(kvm2296.0) entering forwarding state device kvm2348.0 entered promiscuous mode br0: port 37(kvm2348.0) entering forwarding state br0: port 33(kvm2480.0) entering forwarding state br0: port 34(kvm2436.0) entering forwarding state device kvm2076.0 entered promiscuous mode br0: port 38(kvm2076.0) entering forwarding state br0: port 35(kvm2225.0) entering forwarding state kvm: 5081: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2475.0 entered promiscuous mode br0: port 39(kvm2475.0) entering forwarding state kvm: 5014: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 5014: cpu0 unhandled rdmsr: 0x570 br0: port 36(kvm2590.0) entering forwarding state hrtimer: interrupt took 13931 ns device kvm2385.0 entered promiscuous mode br0: port 40(kvm2385.0) entering forwarding state kvm: 5119: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 37(kvm2348.0) entering forwarding state kvm: 4816: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 5248: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 38(kvm2076.0) entering forwarding state br0: port 39(kvm2475.0) entering forwarding state device kvm2494.0 entered promiscuous mode br0: port 41(kvm2494.0) entering forwarding state br0: port 40(kvm2385.0) entering forwarding state device kvm2220.0 entered promiscuous mode br0: port 42(kvm2220.0) entering forwarding state kvm: 6205: cpu0 disabled perfctr wrmsr: 0xc1 data 0xffff kvm: 5896: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 5896: cpu0 unhandled rdmsr: 0x570 kvm: 5896: cpu1 unhandled rdmsr: 0x570 br0: port 41(kvm2494.0) entering forwarding state br0: port 42(kvm2220.0) entering forwarding state kvm: 6754: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2485.0 entered promiscuous mode br0: port 43(kvm2485.0) entering forwarding state device kvm2493.0 entered promiscuous mode br0: port 44(kvm2493.0) entering forwarding state kvm: 6909: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 5370: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff kvm: 5370: cpu0 unhandled rdmsr: 0x570 device kvm2527.0 entered promiscuous mode br0: port 45(kvm2527.0) entering forwarding state device kvm2529.0 entered promiscuous mode br0: port 46(kvm2529.0) entering forwarding state br0: port 43(kvm2485.0) entering forwarding state kvm: 6993: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 6807: cpu0 disabled perfctr wrmsr: 0xc1 data 0xffff device kvm2568.0 entered promiscuous mode br0: port 47(kvm2568.0) entering forwarding state br0: port 44(kvm2493.0) entering forwarding state device kvm2307.0 entered promiscuous mode br0: port 48(kvm2307.0) entering forwarding state br0: port 45(kvm2527.0) entering forwarding state kvm: 7321: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd device kvm2557.0 entered promiscuous mode br0: port 49(kvm2557.0) entering forwarding state br0: port 46(kvm2529.0) entering forwarding state br0: port 47(kvm2568.0) entering forwarding state device kvm2441.0 entered promiscuous mode br0: port 50(kvm2441.0) entering forwarding state br0: port 48(kvm2307.0) entering forwarding state device kvm1743.0 entered promiscuous mode br0: port 51(kvm1743.0) entering forwarding state device kvm2576.0 entered promiscuous mode br0: port 52(kvm2576.0) entering forwarding state br0: port 49(kvm2557.0) entering forwarding state kvm: 7255: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff device kvm2223.0 entered promiscuous mode br0: port 53(kvm2223.0) entering forwarding state br0: port 50(kvm2441.0) entering forwarding state kvm: 7689: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 51(kvm1743.0) entering forwarding state device kvm2550.0 entered promiscuous mode br0: port 54(kvm2550.0) entering forwarding state br0: port 52(kvm2576.0) entering forwarding state device kvm2323.0 entered promiscuous mode br0: port 55(kvm2323.0) entering forwarding state device kvm2135.0 entered promiscuous mode br0: port 56(kvm2135.0) entering forwarding state br0: port 53(kvm2223.0) entering forwarding state br0: port 54(kvm2550.0) entering forwarding state device kvm1868.0 entered promiscuous mode br0: port 57(kvm1868.0) entering forwarding state device kvm2300.0 entered promiscuous mode br0: port 58(kvm2300.0) entering forwarding state br0: port 55(kvm2323.0) entering forwarding state device kvm2180.0 entered promiscuous mode br0: port 59(kvm2180.0) entering forwarding state kvm: 7461: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 56(kvm2135.0) entering forwarding state device kvm2546.0 entered promiscuous mode br0: port 60(kvm2546.0) entering forwarding state br0: port 57(kvm1868.0) entering forwarding state kvm: 6564: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 58(kvm2300.0) entering forwarding state br0: port 59(kvm2180.0) entering forwarding state device kvm2551.0 entered promiscuous mode br0: port 61(kvm2551.0) entering forwarding state br0: port 60(kvm2546.0) entering forwarding state device kvm2534.0 entered promiscuous mode br0: port 62(kvm2534.0) entering forwarding state br0: port 61(kvm2551.0) entering forwarding state device kvm2499.0 entered promiscuous mode br0: port 63(kvm2499.0) entering forwarding state device kvm2459.0 entered promiscuous mode br0: port 64(kvm2459.0) entering forwarding state br0: port 62(kvm2534.0) entering forwarding state kvm: 8247: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 7764: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 63(kvm2499.0) entering forwarding state device kvm2290.0 entered promiscuous mode br0: port 65(kvm2290.0) entering forwarding state device kvm2306.0 entered promiscuous mode br0: port 66(kvm2306.0) entering forwarding state br0: port 64(kvm2459.0) entering forwarding state device kvm2302.0 entered promiscuous mode br0: port 67(kvm2302.0) entering forwarding state br0: port 65(kvm2290.0) entering forwarding state br0: port 66(kvm2306.0) entering forwarding state [PF_RING] Welcome to PF_RING 6.0.3 ($Revision: 已导出 $) (C) 2004-14 ntop.org [PF_RING] registered /proc/net/pf_ring/ NET: Registered protocol family 27 [PF_RING] Min # ring slots 4096 [PF_RING] Slot version 16 [PF_RING] Capture TX Yes [RX+TX] [PF_RING] IP Defragment No [PF_RING] Initialized correctly device kvm2222.0 entered promiscuous mode br0: port 68(kvm2222.0) entering forwarding state kvm: 8032: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 67(kvm2302.0) entering forwarding state kvm: 8299: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff device kvm1981.0 entered promiscuous mode br0: port 69(kvm1981.0) entering forwarding state kvm: 8140: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 68(kvm2222.0) entering forwarding state device kvm2585.0 entered promiscuous mode br0: port 70(kvm2585.0) entering forwarding state kvm: 8438: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd lo: Disabled Privacy Extensions br0: port 69(kvm1981.0) entering forwarding state br0: port 70(kvm2585.0) entering forwarding state device kvm2591.0 entered promiscuous mode br0: port 71(kvm2591.0) entering forwarding state kvm: 8477: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff br0: port 71(kvm2591.0) entering forwarding state kvm: 8727: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 9570: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 36(kvm2590.0) entering disabled state device kvm2590.0 left promiscuous mode br0: port 36(kvm2590.0) entering disabled state br0: port 7(kvm2572.0) entering disabled state device kvm2572.0 left promiscuous mode br0: port 7(kvm2572.0) entering disabled state device kvm2590.0 entered promiscuous mode br0: port 7(kvm2590.0) entering forwarding state kvm: 8688: cpu0 disabled perfctr wrmsr: 0xc2 data 0xffff device kvm2572.0 entered promiscuous mode br0: port 36(kvm2572.0) entering forwarding state kvm: 9300: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd br0: port 7(kvm2590.0) entering forwarding state br0: port 36(kvm2572.0) entering forwarding state kvm: 10458: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 10688: cpu0 disabled perfctr wrmsr: 0xc1 data 0xabcd kvm: 10770: cpu0 disable
xswvfr commented 7 years ago

/etc/fastnetmon.conf file `###

Main configuration params

Logging configuration

enable this option if you want to send logs to local syslog facility

logging:local_syslog_logging = off

enable this option if you want to send logs to a remote syslog server via UDP

logging:remote_syslog_logging = off

specify a custom server and port for remote logging

logging:remote_syslog_server = 10.10.10.10 logging:remote_syslog_port = 514

Enable/Disable any actions in case of attack

enable_ban = on

disable processing for certain direction of traffic

process_incoming_traffic = on process_outgoing_traffic = on

How many packets will be collected from attack traffic

ban_details_records_count = 500

How long (in seconds) we should keep an IP in blocked state

If you set 0 here it completely disables unban capability

ban_time = 1900

Check if the attack is still active, before triggering an unban callback with this option

If the attack is still active, check each run of the unban watchdog

unban_only_if_attack_finished = on

enable per subnet speed meters

For each subnet, list track speed in bps and pps for both directions

enable_subnet_counters = off

list of all your networks in CIDR format

networks_list_path = /etc/networks_list

list networks in CIDR format which will be not monitored for attacks

white_list_path = /etc/networks_whitelist

redraw period for client's screen

check_period = 1

Connection tracking is very useful for attack detection because it provides huge amounts of information,

but it's very CPU intensive and not recommended in big networks

enable_connection_tracking = off

Different approaches to attack detection

ban_for_pps = on ban_for_bandwidth = on ban_for_flows = off

Limits for Dos/DDoS attacks

threshold_pps = 2000 threshold_mbps = 1000 threshold_flows = 3500

Per protocol attack thresholds

We don't implement per protocol flow limits, sorry :(

These limits should be smaller than global pps/mbps limits

threshold_tcp_mbps = 100000 threshold_udp_mbps = 100000 threshold_icmp_mbps = 100000

threshold_tcp_pps = 100000 threshold_udp_pps = 100000 threshold_icmp_pps = 100000

ban_for_tcp_bandwidth = off ban_for_udp_bandwidth = off ban_for_icmp_bandwidth = off

ban_for_tcp_pps = off ban_for_udp_pps = off ban_for_icmp_pps = off

Traffic capture methods

PF_RING traffic capture, fast enough but the wirespeed version needs a paid license

mirror = on

Port mirroring sample rate

pfring_sampling_ratio = 1

Netmap traffic capture (very fast but needs patched drivers)

mirror_netmap = off

SnabbSwitch traffic capture

mirror_snabbswitch = off

AF_PACKET capture engine

Please use it only with modern Linux kernels (3.6 and more)

And please install birq for irq ditribution over cores

mirror_afpacket = off

use PCI-e addresses here instead of OS device names. You can find them in "lspci" output

interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

Port mirroring sampling ratio

netmap_sampling_ratio = 1

This option should be enabled if you are using Juniper with mirroring of the first X bytes of packet: maximum-packet-length 110;

netmap_read_packet_length_from_ip_header = off

Pcap mode, very slow and thus not suitable for production

pcap = off

Netflow capture method with v5, v9 and IPFIX support

netflow = on

sFLOW capture suitable for switches

sflow = on

PF_RING configuration

If you have a license for PF_RING ZC, enable this mode and it might achieve wire speed for 10GE

enable_pf_ring_zc_mode = off

Configuration for netmap, mirror, pcap modes

For pcap and PF_RING we could specify "any"

For netmap and PF_RING we could specify multiple interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

We use average values for traffic speed to certain IP and we calculate average over this time slice

average_calculation_time = 5

We use average values for traffic speed for subnet and we calculate average over this time slice

average_calculation_time_for_subnets = 20

Netflow configuration

it's possible to specify multiple ports here, using commas as delimiter

netflow_port = 2055 netflow_host = 0.0.0.0

To bind to all interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

To bind to all interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

To bind to localhost for a specific protocol: ::1 or 127.0.0.1

Netflow v9 and IPFIX agents use different and very complex approaches for notifying about sample ratio

Here you could specify a sampling ratio for all this agents

For NetFLOW v5 we extract sampling ratio from packets directely and this option not used

netflow_sampling_ratio = 1

In some cases with NetFlow we could get huge bursts related to aggregated data nature

We could try to get smoother data with this option, i.e. we will divide counters on collection interval time

netflow_divide_counters_on_interval_length = off

Process each netflow packet with LUA

This option is not default and you need build it additionally

netflow_lua_hooks_path = /usr/src/fastnetmon/src/netflow_hooks.lua

sFLOW configuration

It's possible to specify multiple ports here, using commas as delimiter

sflow_port = 6343

sflow_port = 6343,6344

sflow_host = 0.0.0.0

process each sFLOW packet with LUA

This option is not default and you need build it additionally

sflow_lua_hooks_path = /usr/src/fastnetmon/src/sflow_hooks.lua

Actions when attack detected

This script executed for ban, unban and attack detail collection

notify_script_path = /usr/local/bin/notify_about_attack.sh

pass attack details to notify_script via stdin

Pass details only in case of "ban" call

No details will be passed for "unban" call

notify_script_pass_details = on

collect a full dump of the attack with full payload in pcap compatible format

collect_attack_pcap_dumps = off

Execute Deep Packet Inspection on captured PCAP packets

process_pcap_attack_dumps_with_dpi = off

Save attack details to Redis

redis_enabled = off

Redis configuration

redis_port = 6379 redis_host = 127.0.0.1

specify a custom prefix here

redis_prefix = mydc1

We could store attack information to MongoDB

mongodb_enabled = off mongodb_host = localhost mongodb_port = 27017 mongodb_database_name = fastnetmon

If you are using PF_RING non ZC version you could block traffic on host with hardware filters

Please be aware! We can not remove blocks with this action plugin

pfring_hardware_filters_enabled = off

announce blocked IPs with BGP protocol with ExaBGP

exabgp = off exabgp_command_pipe = /var/run/exabgp.cmd exabgp_community = 65001:666

specify multiple communities with this syntax:

exabgp_community = [65001:666 65001:777]

specify different communities for host and subnet announces

exabgp_community_subnet = 65001:667

exabgp_community_host = 65001:668

exabgp_next_hop = 10.0.3.114

In complex cases you could have both options enabled and announce host and subnet simultaneously

Announce /32 host itself with BGP

exabgp_announce_host = on

Announce origin subnet of IP address instead IP itself

exabgp_announce_whole_subnet = off

Announce Flow Spec rules when we could detect certain attack type

Please we aware! Flow Spec announce triggered when we collect some details about attack,

i.e. when we call attack_details script

Please disable exabgp_announce_host and exabgp_announce_whole_subnet if you want to use this feature

Please use ExaBGP v4 only (Git version), for more details: https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/BGP_FLOW_SPEC.md

exabgp_flow_spec_announces = off

GoBGP intergation

gobgp = off gobgp_next_hop = 0.0.0.0 gobgp_announce_host = on gobgp_announce_whole_subnet = off

Graphite monitoring

InfluxDB is also supported, please check our reference:

https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/INFLUXDB_INTEGRATION.md

graphite = off graphite_host = 127.0.0.1 graphite_port = 2003

Default namespace for Graphite data

graphite_prefix = fastnetmon

Add local IP addresses and aliases to monitoring list

Works only for Linux

monitor_local_ip_addresses = on

Create group of hosts with non-standard thresholds

You should create this group before (in configuration file) specifying any limits

hostgroup = my_hosts:10.10.10.221/32,10.10.10.222/32

Configure this group

my_hosts_enable_ban = off

my_hosts_ban_for_pps = off my_hosts_ban_for_bandwidth = off my_hosts_ban_for_flows = off

my_hosts_threshold_pps = 20000 my_hosts_threshold_mbps = 1000 my_hosts_threshold_flows = 3500

Path to pid file for checking "if another copy of tool is running", it's useful when you run multiple instances of tool

pid_path = /var/run/fastnetmon.pid

Path to file where we store information for fastnetmon_client

cli_stats_file_path = /tmp/fastnetmon.dat

Enable gRPC api (required for fastnetmon_api_client tool)

enable_api = off

Client configuration

Field used for sorting in client, valid values are: packets, bytes or flows

sort_parameter = packets

How much IPs will be listed for incoming and outgoing channel eaters

max_ips_in_list = 7`

pavel-odintsov commented 7 years ago

I think in your case you need to monitor only external interface or br0. You do not need to monitor all your vm interfaces.

On Thu, 6 Jul 2017 at 09:42, fyhqycom notifications@github.com wrote:

/etc/fastnetmon.conf file `### Main configuration params Logging configuration enable this option if you want to send logs to local syslog facility

logging:local_syslog_logging = off enable this option if you want to send logs to a remote syslog server via UDP

logging:remote_syslog_logging = off specify a custom server and port for remote logging

logging:remote_syslog_server = 10.10.10.10 logging:remote_syslog_port = 514 Enable/Disable any actions in case of attack

enable_ban = on disable processing for certain direction of traffic

process_incoming_traffic = on process_outgoing_traffic = on How many packets will be collected from attack traffic

ban_details_records_count = 500 How long (in seconds) we should keep an IP in blocked state If you set 0 here it completely disables unban capability

ban_time = 1900 Check if the attack is still active, before triggering an unban callback with this option If the attack is still active, check each run of the unban watchdog

unban_only_if_attack_finished = on enable per subnet speed meters For each subnet, list track speed in bps and pps for both directions

enable_subnet_counters = off list of all your networks in CIDR format

networks_list_path = /etc/networks_list list networks in CIDR format which will be not monitored for attacks

white_list_path = /etc/networks_whitelist redraw period for client's screen

check_period = 1 Connection tracking is very useful for attack detection because it provides huge amounts of information, but it's very CPU intensive and not recommended in big networks

enable_connection_tracking = off Different approaches to attack detection

ban_for_pps = on ban_for_bandwidth = on ban_for_flows = off Limits for Dos/DDoS attacks

threshold_pps = 2000 threshold_mbps = 1000 threshold_flows = 3500 Per protocol attack thresholds We don't implement per protocol flow limits, sorry :( These limits should be smaller than global pps/mbps limits

threshold_tcp_mbps = 100000 threshold_udp_mbps = 100000 threshold_icmp_mbps = 100000

threshold_tcp_pps = 100000 threshold_udp_pps = 100000 threshold_icmp_pps = 100000

ban_for_tcp_bandwidth = off ban_for_udp_bandwidth = off ban_for_icmp_bandwidth = off

ban_for_tcp_pps = off ban_for_udp_pps = off ban_for_icmp_pps = off Traffic capture methods PF_RING traffic capture, fast enough but the wirespeed version needs a paid license

mirror = on Port mirroring sample rate

pfring_sampling_ratio = 1 Netmap traffic capture (very fast but needs patched drivers)

mirror_netmap = off SnabbSwitch traffic capture

mirror_snabbswitch = off AF_PACKET capture engine Please use it only with modern Linux kernels (3.6 and more) And please install birq for irq ditribution over cores

mirror_afpacket = off use PCI-e addresses here instead of OS device names. You can find them in "lspci" output

interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0 Port mirroring sampling ratio

netmap_sampling_ratio = 1 This option should be enabled if you are using Juniper with mirroring of the first X bytes of packet: maximum-packet-length 110;

netmap_read_packet_length_from_ip_header = off Pcap mode, very slow and thus not suitable for production

pcap = off Netflow capture method with v5, v9 and IPFIX support

netflow = on sFLOW capture suitable for switches

sflow = on PF_RING configuration If you have a license for PF_RING ZC, enable this mode and it might achieve wire speed for 10GE

enable_pf_ring_zc_mode = off Configuration for netmap, mirror, pcap modes For pcap and PF_RING we could specify "any" For netmap and PF_RING we could specify multiple interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0

interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0 We use average values for traffic speed to certain IP and we calculate average over this time slice

average_calculation_time = 5 We use average values for traffic speed for subnet and we calculate average over this time slice

average_calculation_time_for_subnets = 20 Netflow configuration it's possible to specify multiple ports here, using commas as delimiter

netflow_port = 2055 netflow_host = 0.0.0.0 To bind to all interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0 To bind to all interfaces = br0,em1,kvm1742.0,kvm1743.0,kvm1792.0,kvm1834.0,kvm1835.0,kvm1836.0,kvm1868.0,kvm1872.0,kvm1886.0,kvm1897.0,kvm1903.0,kvm1967.0,kvm1981.0,kvm1983.0,kvm1987.0,kvm1988.0,kvm2006.0,kvm2010.0,kvm2018.0,kvm2020.0,kvm2026.0,kvm2028.0,kvm2030.0,kvm2033.0,kvm2039.0,kvm2040.0,kvm2046.0,kvm2047.0,kvm2051.0,kvm2052.0,kvm2053.0,kvm2054.0,kvm2057.0,kvm2059.0,kvm2060.0,kvm2062.0,kvm2074.0,kvm2076.0,kvm2079.0,virbr0 To bind to localhost for a specific protocol: ::1 or 127.0.0.1 Netflow v9 and IPFIX agents use different and very complex approaches for notifying about sample ratio Here you could specify a sampling ratio for all this agents For NetFLOW v5 we extract sampling ratio from packets directely and this option not used

netflow_sampling_ratio = 1 In some cases with NetFlow we could get huge bursts related to aggregated data nature We could try to get smoother data with this option, i.e. we will divide counters on collection interval time

netflow_divide_counters_on_interval_length = off Process each netflow packet with LUA This option is not default and you need build it additionally netflow_lua_hooks_path = /usr/src/fastnetmon/src/netflow_hooks.lua sFLOW configuration It's possible to specify multiple ports here, using commas as delimiter

sflow_port = 6343 sflow_port = 6343,6344

sflow_host = 0.0.0.0 process each sFLOW packet with LUA This option is not default and you need build it additionally sflow_lua_hooks_path = /usr/src/fastnetmon/src/sflow_hooks.lua Actions when attack detected This script executed for ban, unban and attack detail collection

notify_script_path = /usr/local/bin/notify_about_attack.sh pass attack details to notify_script via stdin Pass details only in case of "ban" call No details will be passed for "unban" call

notify_script_pass_details = on collect a full dump of the attack with full payload in pcap compatible format

collect_attack_pcap_dumps = off Execute Deep Packet Inspection on captured PCAP packets

process_pcap_attack_dumps_with_dpi = off Save attack details to Redis

redis_enabled = off Redis configuration

redis_port = 6379 redis_host = 127.0.0.1 specify a custom prefix here

redis_prefix = mydc1 We could store attack information to MongoDB

mongodb_enabled = off mongodb_host = localhost mongodb_port = 27017 mongodb_database_name = fastnetmon If you are using PF_RING non ZC version you could block traffic on host with hardware filters Please be aware! We can not remove blocks with this action plugin

pfring_hardware_filters_enabled = off announce blocked IPs with BGP protocol with ExaBGP

exabgp = off exabgp_command_pipe = /var/run/exabgp.cmd exabgp_community = 65001:666 specify multiple communities with this syntax: exabgp_community = [65001:666 65001:777] specify different communities for host and subnet announces exabgp_community_subnet = 65001:667 exabgp_community_host = 65001:668

exabgp_next_hop = 10.0.3.114 In complex cases you could have both options enabled and announce host and subnet simultaneously Announce /32 host itself with BGP

exabgp_announce_host = on Announce origin subnet of IP address instead IP itself

exabgp_announce_whole_subnet = off Announce Flow Spec rules when we could detect certain attack type Please we aware! Flow Spec announce triggered when we collect some details about attack, i.e. when we call attack_details script Please disable exabgp_announce_host and exabgp_announce_whole_subnet if you want to use this feature Please use ExaBGP v4 only (Git version), for more details: https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/BGP_FLOW_SPEC.md

exabgp_flow_spec_announces = off GoBGP intergation

gobgp = off gobgp_next_hop = 0.0.0.0 gobgp_announce_host = on gobgp_announce_whole_subnet = off Graphite monitoring InfluxDB is also supported, please check our reference: https://github.com/FastVPSEestiOu/fastnetmon/blob/master/docs/INFLUXDB_INTEGRATION.md

graphite = off graphite_host = 127.0.0.1 graphite_port = 2003 Default namespace for Graphite data

graphite_prefix = fastnetmon Add local IP addresses and aliases to monitoring list Works only for Linux

monitor_local_ip_addresses = on Create group of hosts with non-standard thresholds You should create this group before (in configuration file) specifying any limits

hostgroup = my_hosts:10.10.10.221/32,10.10.10.222/32 Configure this group

my_hosts_enable_ban = off

my_hosts_ban_for_pps = off my_hosts_ban_for_bandwidth = off my_hosts_ban_for_flows = off

my_hosts_threshold_pps = 20000 my_hosts_threshold_mbps = 1000 my_hosts_threshold_flows = 3500 Path to pid file for checking "if another copy of tool is running", it's useful when you run multiple instances of tool

pid_path = /var/run/fastnetmon.pid Path to file where we store information for fastnetmon_client

cli_stats_file_path = /tmp/fastnetmon.dat Enable gRPC api (required for fastnetmon_api_client tool)

enable_api = off Client configuration Field used for sorting in client, valid values are: packets, bytes or flows

sort_parameter = packets How much IPs will be listed for incoming and outgoing channel eaters

max_ips_in_list = 7`

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/pavel-odintsov/fastnetmon/issues/674#issuecomment-313334180, or mute the thread https://github.com/notifications/unsubscribe-auth/ACnfZnJ4e7Zy0WmdEz_-w9mbdWAwoH4kks5sLJ4IgaJpZM4OPOo_ .

-- Sincerely yours, Pavel Odintsov

xswvfr commented 7 years ago

yes .but i install other test host is work but i don't know , PF_RING is install , fastnetmon can't start

pavel-odintsov commented 7 years ago

Probably, it related with long list of interfaces. You could raise ticket to pfring project or try to install latest version of pf_ring.

We have special option to do it in fastnetmon_install.pl, check code ;)

On Thu, 6 Jul 2017 at 09:53, fyhqycom notifications@github.com wrote:

yes .but i install other test host is work but i don't know , PF_RING is install , fastnetmon can't start

— You are receiving this because you commented.

Reply to this email directly, view it on GitHub https://github.com/pavel-odintsov/fastnetmon/issues/674#issuecomment-313336539, or mute the thread https://github.com/notifications/unsubscribe-auth/ACnfZis1TVuVeUqv3YKJkQrsMxPYEuMFks5sLKBxgaJpZM4OPOo_ .

-- Sincerely yours, Pavel Odintsov

xswvfr commented 7 years ago

pf_ring_6.6.0 it's the same [ERROR] PF_RING initilization failed

pavel-odintsov commented 7 years ago

Well, at this point I could suggest to raise a ticket for github.com/ntop/PF_RING project and describe your case in details.

xswvfr commented 7 years ago

i creat issue https://github.com/ntop/PF_RING/issues/236#issuecomment-313730857

xswvfr commented 7 years ago

hi if i don't reinstall system.so how can uninstall fastnetmon, and reinstall fastnetmon thanks

pavel-odintsov commented 6 years ago

The issue was moved to PF_RING project. Closing it here.