<div dir="auto"><div>Try to run bro or tcpdump feeding from the pipes eth}0,.. I think I encountered the same problem, if there is no application feeding of the lb's output, it can get stuck.</div><div dir="auto"><br></div><div dir="auto">Martina<br><div class="gmail_extra" dir="auto"><br><div class="gmail_quote">On Dec 20, 2017 00:40, "Scott Campbell" <<a href="mailto:scampbell@lbl.gov">scampbell@lbl.gov</a>> wrote:<br type="attribution"><blockquote class="quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">Currently running bro current (2.5-372) on a Scientific Linux release<br>
6.9 kernel 2.6.32-696.13.2.el6.x86_64 . The bro netmap module was added<br>
per directions:<br>
<br>
bro@xdev-m ~/bin> ./bro -N Bro::Netmap<br>
Bro::Netmap - Packet acquisition via Netmap (dynamic, version 1.0)<br>
<br>
I downloaded and installed the current git netmap (<br>
MODULE_INFO(srcversion, "70F039B58865AAE47076678") ) without issue, and<br>
there are no messages when the modules load besides what you would<br>
expect to see.<br>
<br>
What I am seeing is when I run the lb application it runs as expected<br>
for a few minutes, then stops forwarding packets and continues logging<br>
the same line regardless of how long you wait. Sample logs follow.<br>
<br>
lb starts:<br>
<br>
> [root@xdev-w1 lb]# ./lb -i eth5 -o 10 -p8 -B 1024<br>
> 933.751533 main [600] interface is eth5<br>
> 933.751614 main [621] requested 1024 extra buffers<br>
> 934.080683 main [714] successfully opened netmap:eth5 (tx rings: 512)<br>
> 934.080699 main [725] obtained 1024 extra buffers<br>
> 934.081586 main [784] opening pipe named netmap:eth5{0/xT@1<br>
> 934.081627 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081639 main [799] successfully opened pipe #1 netmap:eth5{0/xT@1 (tx slots: 512)<br>
> 934.081646 main [803] zerocopy enabled<br>
> 934.081671 main [784] opening pipe named netmap:eth5{1/xT@1<br>
> 934.081692 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081700 main [799] successfully opened pipe #2 netmap:eth5{1/xT@1 (tx slots: 512)<br>
> 934.081706 main [803] zerocopy enabled<br>
> 934.081729 main [784] opening pipe named netmap:eth5{2/xT@1<br>
> 934.081746 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081754 main [799] successfully opened pipe #3 netmap:eth5{2/xT@1 (tx slots: 512)<br>
> 934.081760 main [803] zerocopy enabled<br>
> 934.081786 main [784] opening pipe named netmap:eth5{3/xT@1<br>
> 934.081803 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081813 main [799] successfully opened pipe #4 netmap:eth5{3/xT@1 (tx slots: 512)<br>
> 934.081819 main [803] zerocopy enabled<br>
> 934.081842 main [784] opening pipe named netmap:eth5{4/xT@1<br>
> 934.081862 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081870 main [799] successfully opened pipe #5 netmap:eth5{4/xT@1 (tx slots: 512)<br>
> 934.081876 main [803] zerocopy enabled<br>
> 934.081899 main [784] opening pipe named netmap:eth5{5/xT@1<br>
> 934.081916 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081923 main [799] successfully opened pipe #6 netmap:eth5{5/xT@1 (tx slots: 512)<br>
> 934.081929 main [803] zerocopy enabled<br>
> 934.081954 main [784] opening pipe named netmap:eth5{6/xT@1<br>
> 934.081972 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.081980 main [799] successfully opened pipe #7 netmap:eth5{6/xT@1 (tx slots: 512)<br>
> 934.081986 main [803] zerocopy enabled<br>
> 934.082013 main [784] opening pipe named netmap:eth5{7/xT@1<br>
> 934.082031 nm_mmap [987] do not mmap, inherit from parent<br>
> 934.082041 main [799] successfully opened pipe #8 netmap:eth5{7/xT@1 (tx slots: 512)<br>
> 934.082046 main [803] zerocopy enabled<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{0/xT@1<wbr>","output_ring":0,"packets_<wbr>forwarded":85397,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":160.3504,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":19.4110,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{1/xT@1<wbr>","output_ring":1,"packets_<wbr>forwarded":65319,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":29.0976,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":8.5940,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{2/xT@1<wbr>","output_ring":2,"packets_<wbr>forwarded":317351,"packets_<wbr>dropped":1300,"data_forward_<wbr>rate_Mbps":395.4482,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":35.<wbr>4900,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{3/xT@1<wbr>","output_ring":3,"packets_<wbr>forwarded":100570,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":148.8784,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":16.3190,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{4/xT@1<wbr>","output_ring":4,"packets_<wbr>forwarded":75111,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":91.5148,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":11.4440,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{5/xT@1<wbr>","output_ring":5,"packets_<wbr>forwarded":66920,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":66.1700,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":8.0000,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{6/xT@1<wbr>","output_ring":6,"packets_<wbr>forwarded":143992,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":170.3500,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":17.5980,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5{7/xT@1<wbr>","output_ring":7,"packets_<wbr>forwarded":67032,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":29.2870,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":5.2020,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513728945.082923,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":1035728,"packets_<wbr>forwarded":921692,"packets_<wbr>dropped":1300,"non_ip_packets"<wbr>:18,"data_forward_rate_Mbps":<wbr>1091.0964,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":122.0570,"packet_<wbr>drop_rate_kpps":0.0000,"free_<wbr>buffer_slots":1024}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{0/xT@1<wbr>","output_ring":0,"packets_<wbr>forwarded":517056,"packets_<wbr>dropped":31870,"data_forward_<wbr>rate_Mbps":583.9244,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":46.<wbr>9350,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{1/xT@1<wbr>","output_ring":1,"packets_<wbr>forwarded":415852,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":583.7359,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":48.9310,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{2/xT@1<wbr>","output_ring":2,"packets_<wbr>forwarded":998058,"packets_<wbr>dropped":1300,"data_forward_<wbr>rate_Mbps":925.2677,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":106.<wbr>8910,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{3/xT@1<wbr>","output_ring":3,"packets_<wbr>forwarded":836948,"packets_<wbr>dropped":14154,"data_forward_<wbr>rate_Mbps":1321.3131,"data_<wbr>drop_rate_Mbps":15.6000,"<wbr>packet_forward_rate_kpps":91.<wbr>2690,"packet_drop_rate_kpps":<wbr>1.0790,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{4/xT@1<wbr>","output_ring":4,"packets_<wbr>forwarded":409670,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":519.5414,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":40.8310,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{5/xT@1<wbr>","output_ring":5,"packets_<wbr>forwarded":395510,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":545.0672,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":42.6580,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{6/xT@1<wbr>","output_ring":6,"packets_<wbr>forwarded":555556,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":592.1166,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":47.5850,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5{7/xT@1<wbr>","output_ring":7,"packets_<wbr>forwarded":393490,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":515.1810,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":41.6850,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513728955.083739,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":5323612,"packets_<wbr>forwarded":4522140,"packets_<wbr>dropped":47324,"non_ip_<wbr>packets":18,"data_forward_<wbr>rate_Mbps":5586.1473,"data_<wbr>drop_rate_Mbps":15.6000,"<wbr>packet_forward_rate_kpps":466.<wbr>7870,"packet_drop_rate_kpps":<wbr>1.0790,"free_buffer_slots":<wbr>1024}<br>
<br>
this continues for some time then :<br>
<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{0/xT@1<wbr>","output_ring":0,"packets_<wbr>forwarded":4920687,"packets_<wbr>dropped":33825,"data_forward_<wbr>rate_Mbps":10.7695,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":2.0180,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{1/xT@1<wbr>","output_ring":1,"packets_<wbr>forwarded":5930891,"packets_<wbr>dropped":3760,"data_forward_<wbr>rate_Mbps":47.3625,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":9.5640,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{2/xT@1<wbr>","output_ring":2,"packets_<wbr>forwarded":16009392,"packets_<wbr>dropped":130519,"data_forward_<wbr>rate_Mbps":849.3118,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":77.<wbr>2920,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{3/xT@1<wbr>","output_ring":3,"packets_<wbr>forwarded":7001918,"packets_<wbr>dropped":1337878,"data_<wbr>forward_rate_Mbps":36.4586,"<wbr>data_drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":5.<wbr>6990,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{4/xT@1<wbr>","output_ring":4,"packets_<wbr>forwarded":5250042,"packets_<wbr>dropped":1403,"data_forward_<wbr>rate_Mbps":161.3338,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":17.<wbr>7030,"packet_drop_rate_kpps":<wbr>0.0000,"overflow_queue_size":<wbr>0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{5/xT@1<wbr>","output_ring":5,"packets_<wbr>forwarded":5426001,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":67.0789,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":7.9150,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{6/xT@1<wbr>","output_ring":6,"packets_<wbr>forwarded":5991695,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":58.6742,"data_drop_rate_<wbr>Mbps":0.0000,"packet_forward_<wbr>rate_kpps":7.5420,"packet_<wbr>drop_rate_kpps":0.0000,"<wbr>overflow_queue_size":0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5{7/xT@1<wbr>","output_ring":7,"packets_<wbr>forwarded":5094833,"packets_<wbr>dropped":0,"data_forward_rate_<wbr>Mbps":152.4217,"data_drop_<wbr>rate_Mbps":0.0000,"packet_<wbr>forward_rate_kpps":15.5730,"<wbr>packet_drop_rate_kpps":0.0000,<wbr>"overflow_queue_size":0}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":62232503,"packets_<wbr>forwarded":55625459,"packets_<wbr>dropped":1507385,"non_ip_<wbr>packets":413,"data_forward_<wbr>rate_Mbps":1383.4110,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":143.<wbr>3050,"packet_drop_rate_kpps":<wbr>0.0000,"free_buffer_slots":<wbr>1024}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":62232503,"packets_<wbr>forwarded":55625459,"packets_<wbr>dropped":1507385,"non_ip_<wbr>packets":413,"data_forward_<wbr>rate_Mbps":1383.4110,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":143.<wbr>3050,"packet_drop_rate_kpps":<wbr>0.0000,"free_buffer_slots":<wbr>1024}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":62232503,"packets_<wbr>forwarded":55625459,"packets_<wbr>dropped":1507385,"non_ip_<wbr>packets":413,"data_forward_<wbr>rate_Mbps":1383.4110,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":143.<wbr>3050,"packet_drop_rate_kpps":<wbr>0.0000,"free_buffer_slots":<wbr>1024}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":62232503,"packets_<wbr>forwarded":55625459,"packets_<wbr>dropped":1507385,"non_ip_<wbr>packets":413,"data_forward_<wbr>rate_Mbps":1383.4110,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":143.<wbr>3050,"packet_drop_rate_kpps":<wbr>0.0000,"free_buffer_slots":<wbr>1024}<br>
> {"ts":1513729195.106307,"<wbr>interface":"netmap:eth5","<wbr>output_ring":null,"packets_<wbr>received":62232503,"packets_<wbr>forwarded":55625459,"packets_<wbr>dropped":1507385,"non_ip_<wbr>packets":413,"data_forward_<wbr>rate_Mbps":1383.4110,"data_<wbr>drop_rate_Mbps":0.0000,"<wbr>packet_forward_rate_kpps":143.<wbr>3050,"packet_drop_rate_kpps":<wbr>0.0000,"free_buffer_slots":<wbr>1024}<br>
<br>
The individual sub interfaces created by lb no longer report, but every<br>
10 seconds (as configured) 9 identical lines (8 from -p 8 , and one from<br>
eth5) print out with the numbers no longer changing.<br>
<br>
Interface counters on eth5 continue to move so the interface is still<br>
seeing data. As well the time it takes for this to happen seems to<br>
vary. I have reloaded the modules, run lb as a user or root, changed<br>
the configuration parameters, rebooted the system all to no avail.<br>
<br>
Any thoughts?<br>
<br>
scott<br>
______________________________<wbr>_________________<br>
bro-dev mailing list<br>
<a href="mailto:bro-dev@bro.org">bro-dev@bro.org</a><br>
<a href="http://mailman.icsi.berkeley.edu/mailman/listinfo/bro-dev" rel="noreferrer" target="_blank">http://mailman.icsi.berkeley.<wbr>edu/mailman/listinfo/bro-dev</a><br>
</blockquote></div><br></div></div></div>