[Bro] Myricom + Bro: are these log entries normal?

Glenn Forbes Fleming Larratt gl89 at cornell.edu
Mon Jun 29 11:48:30 PDT 2015


I'm running 11 worker processes on each of my five clustered listeners, 
and each of them, like clockwork, spits out 290 apiece (i.e. every five 
minutes) of these three log entries every day (thank you, logwatch!):

Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: SNF rx attach: out of free rx rings. app_id=-1 pid=56578 rings_attached=0 rings_requested=0
Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: Failed to attach to ring -1 with err=16
Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: eth4: endpt 76, early enable failed

I'm getting oodles of traffic to both my Bro workers and the Snort 
instances running as SNF_APP_ID 2 ; are these logs anything I need to 
worry about, in anyone's experience?

Thanks,
-- 
Glenn Forbes Fleming Larratt
Cornell University IT Security Office


More information about the Bro mailing list