[Bro] Bro node.cfg not setting Myricom Sniffer10G environment variables

[Chris Chiaverini]

It seems that bro 2.5.1 is not taking the SNF_DATARING_SIZE variable, no 
matter what I set it to.

When at the defaults in the /etc/bro/node.cfg and with nothing set at 
the shell, it still reports it is set via "userset" instead of "default" 
like SNF_DESCRING_SIZE.

Here is the defaults:

- Nothing at shell
#env | grep SNF
#

- node.cfg with defaults
#fgrep -A 12 worker-1 node.cfg
[worker-1]
type=worker
host=<MYHOSTNAME>
interface=snf0
lb_method=myricom
lb_procs=8
#lb_procs=7
### Keep it on one NUMA node
## NUMA node0 CPU(s):     0,2,4,6,8,10,12,14,16,18,20,22
## NUMA node1 CPU(s):     1,3,5,7,9,11,13,15,17,19,21,23
pin_cpus=2,4,6,8,10,12,14,16
env_vars=SNF_APP_ID=10,SNF_FLAGS=0x1,SNF_NUM_RINGS=8,SNF_DEBUG_MASK=3
#

- defaults show "userset" for SNF_DATARING_SIZE
#fgrep SNF_D /data01/bro/spool/worker-1-1/stderr.log
121273 snf.0.-1 P (*userset*) *  SNF_DATARING_SIZE = 134217728 
(0x8000000) (128.0 MiB)*
121273 snf.0.-1 P (*default*) *SNF_DESCRING_SIZE = 67108864 (0x4000000) 
(64.0 MiB)*
121273 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
121273 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
121273 snf.0.-1 P SNF_DEBUG_MASK=0x3 for modes WARN=0x1, PARAM=0x2 
QSTATS=0x4  TIMESYNC=0x8  IOCTL=0x10  QEVENTS=0x20  ARISTA=0x40
#

-------------------------------------------


- Manually setting *SNF_DATARING_SIZE* and *SNF_DESCRING_SIZE*
#fgrep -A 12 worker-1 node.cfg
[worker-1]
type=worker
host=<MYHOSTNAME>
interface=snf0
lb_method=myricom
lb_procs=8
#lb_procs=7
### Keep it on one NUMA node
## NUMA node0 CPU(s):     0,2,4,6,8,10,12,14,16,18,20,22
## NUMA node1 CPU(s):     1,3,5,7,9,11,13,15,17,19,21,23
pin_cpus=2,4,6,8,10,12,14,16
#env_vars=SNF_APP_ID=10,SNF_FLAGS=0x1,SNF_NUM_RINGS=8,SNF_DEBUG_MASK=3
env_vars=SNF_APP_ID=10,SNF_FLAGS=0x1,SNF_NUM_RINGS=8,SNF_DEBUG_MASK=3,*SNF_DATARING_SIZE=4294967296,SNF_DESCRING_SIZE=1073741824*
#


- deploy new config with restart
#/opt/bro/bin/broctl deploy
<OMITTED>


- SNF_DATARING_SIZE still set to 128MB like in default and still reports 
that it was set via "userset" (should be 4GB set via "environ")
#fgrep SNF_D /data01/bro/spool/worker-1-1/stderr.log
34852 snf.0.-1 P *(userset)        SNF_DATARING_SIZE = 134217728 
(0x8000000) (128.0 MiB)*
34852 snf.0.-1 P *(environ)        SNF_DESCRING_SIZE = 1073741824 
(0x40000000) (1024.0 MiB)*
34852 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
34852 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
34852 snf.0.-1 P SNF_DEBUG_MASK=0x3 for modes WARN=0x1, PARAM=0x2 
QSTATS=0x4  TIMESYNC=0x8  IOCTL=0x10  QEVENTS=0x20  ARISTA=0x40
#


-- 


Regards,

Chris Chiaverini
Cyber Security Operations
Brookhaven National Laboratory
Upton, New York 11973

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170620/49c40f30/attachment.html