[Bro] Bro node.cfg not setting Myricom Sniffer10G environment variables

Alejandro Carreno acarreno at ucsb.edu
Tue Jun 20 07:09:15 PDT 2017


I noticed this behavior as well a while back after upgrading SNF from
3.0.10 to 3.0.11. Downgrading back to 3.0.10 would return the ring sizes to
the expected values.

-Alex

On Tue, Jun 20, 2017 at 6:47 AM Azoff, Justin S <jazoff at illinois.edu> wrote:

>
> > On Jun 20, 2017, at 9:27 AM, Chris Chiaverini <cchiaverini at bnl.gov>
> wrote:
> >
> > It seems that bro 2.5.1 is not taking the SNF_DATARING_SIZE variable, no
> matter what I set it to.
> >
> > When at the defaults in the /etc/bro/node.cfg and with nothing set at
> the shell, it still reports it is set via "userset" instead of "default"
> like SNF_DESCRING_SIZE.
>
> Can you do this quick test using tcpdump to verify the problem is with
> bro/broctl or something with the myricom driver/library?
>
> SNF_APP_ID=10 SNF_FLAGS=0x1 SNF_NUM_RINGS=8 SNF_DEBUG_MASK=3
> SNF_DATARING_SIZE=4294967296 SNF_DESCRING_SIZE=1073741824 tcpdump -n -i
> snf0 -c 1
>
> When I run that I get
>
> 23681 snf.0.-1 P (userset)              SNF_PORTNUM = 0
> 23681 snf.0.-1 P (default)              SNF_RING_ID = -1 (0xffffffff)
> 23681 snf.0.-1 P (environ)            SNF_NUM_RINGS = 8 (0x8)
> 23681 snf.0.-1 P (default)            SNF_RSS_FLAGS = 49 (0x31)
> 23681 snf.0.-1 P (environ)        SNF_DATARING_SIZE = 4294967296
> (0x100000000) (4096.0 MiB)
> 23681 snf.0.-1 P (environ)        SNF_DESCRING_SIZE = 1073741824
> (0x40000000) (1024.0 MiB)
> 23681 snf.0.-1 P (userset)                SNF_FLAGS = 1 (0x1)
> 23681 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
> 23681 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
> 23681 snf.0.-1 P (environ)               SNF_APP_ID = 10 (0xa)
>
>
>
> --
> - Justin Azoff
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170620/5a7ccc4d/attachment.html 


More information about the Bro mailing list