[Bro] Bro node.cfg not setting Myricom Sniffer10G environment variables

[Chris Chiaverini]

I have a support case open with them in parallel.  I will report this to 
them too.  Maybe we'll get a fix in next minor release.

Regards,

Chris Chiaverini
Cyber Security Operations
Brookhaven National Laboratory
Upton, New York 11973

On 06/20/2017 10:09 AM, Alejandro Carreno wrote:
> I noticed this behavior as well a while back after upgrading SNF from 
> 3.0.10 to 3.0.11. Downgrading back to 3.0.10 would return the ring 
> sizes to the expected values.
>
> -Alex
>
> On Tue, Jun 20, 2017 at 6:47 AM Azoff, Justin S <jazoff at illinois.edu 
> <mailto:jazoff at illinois.edu>> wrote:
>
>
>     > On Jun 20, 2017, at 9:27 AM, Chris Chiaverini
>     <cchiaverini at bnl.gov <mailto:cchiaverini at bnl.gov>> wrote:
>     >
>     > It seems that bro 2.5.1 is not taking the SNF_DATARING_SIZE
>     variable, no matter what I set it to.
>     >
>     > When at the defaults in the /etc/bro/node.cfg and with nothing
>     set at the shell, it still reports it is set via "userset" instead
>     of "default" like SNF_DESCRING_SIZE.
>
>     Can you do this quick test using tcpdump to verify the problem is
>     with bro/broctl or something with the myricom driver/library?
>
>     SNF_APP_ID=10 SNF_FLAGS=0x1 SNF_NUM_RINGS=8 SNF_DEBUG_MASK=3
>     SNF_DATARING_SIZE=4294967296 SNF_DESCRING_SIZE=1073741824 tcpdump
>     -n -i snf0 -c 1
>
>     When I run that I get
>
>     23681 snf.0.-1 P (userset)              SNF_PORTNUM = 0
>     23681 snf.0.-1 P (default)              SNF_RING_ID = -1 (0xffffffff)
>     23681 snf.0.-1 P (environ)            SNF_NUM_RINGS = 8 (0x8)
>     23681 snf.0.-1 P (default)            SNF_RSS_FLAGS = 49 (0x31)
>     23681 snf.0.-1 P (environ)        SNF_DATARING_SIZE = 4294967296
>     (0x100000000) (4096.0 MiB)
>     23681 snf.0.-1 P (environ)        SNF_DESCRING_SIZE = 1073741824
>     (0x40000000) (1024.0 MiB)
>     23681 snf.0.-1 P (userset)                SNF_FLAGS = 1 (0x1)
>     23681 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
>     23681 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
>     23681 snf.0.-1 P (environ)               SNF_APP_ID = 10 (0xa)
>
>
>
>     --
>     - Justin Azoff
>
>
>     _______________________________________________
>     Bro mailing list
>     bro at bro-ids.org <mailto:bro at bro-ids.org>
>     http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170620/1408d0e9/attachment.html