[Bro] Bro node.cfg not setting Myricom Sniffer10G environment variables

[Chris Chiaverini]

Alex,

Thank you for this.  I confirmed on my end too... rolled back to 3.0.10 
and it worked.   I will let you know what Myricom comes up with, if they 
will fix in next release.


Regards,

Chris Chiaverini
Cyber Security Operations
Brookhaven National Laboratory
Upton, New York 11973

On 06/20/2017 11:01 AM, Chris Chiaverini wrote:
>
> I have a support case open with them in parallel.  I will report this 
> to them too.  Maybe we'll get a fix in next minor release.
>
> Regards,
>
> Chris Chiaverini
> Cyber Security Operations
> Brookhaven National Laboratory
> Upton, New York 11973
> On 06/20/2017 10:09 AM, Alejandro Carreno wrote:
>> I noticed this behavior as well a while back after upgrading SNF from 
>> 3.0.10 to 3.0.11. Downgrading back to 3.0.10 would return the ring 
>> sizes to the expected values.
>>
>> -Alex
>>
>> On Tue, Jun 20, 2017 at 6:47 AM Azoff, Justin S <jazoff at illinois.edu 
>> <mailto:jazoff at illinois.edu>> wrote:
>>
>>
>>     > On Jun 20, 2017, at 9:27 AM, Chris Chiaverini
>>     <cchiaverini at bnl.gov <mailto:cchiaverini at bnl.gov>> wrote:
>>     >
>>     > It seems that bro 2.5.1 is not taking the SNF_DATARING_SIZE
>>     variable, no matter what I set it to.
>>     >
>>     > When at the defaults in the /etc/bro/node.cfg and with nothing
>>     set at the shell, it still reports it is set via "userset"
>>     instead of "default" like SNF_DESCRING_SIZE.
>>
>>     Can you do this quick test using tcpdump to verify the problem is
>>     with bro/broctl or something with the myricom driver/library?
>>
>>     SNF_APP_ID=10 SNF_FLAGS=0x1 SNF_NUM_RINGS=8 SNF_DEBUG_MASK=3
>>     SNF_DATARING_SIZE=4294967296 SNF_DESCRING_SIZE=1073741824 tcpdump
>>     -n -i snf0 -c 1
>>
>>     When I run that I get
>>
>>     23681 snf.0.-1 P (userset)              SNF_PORTNUM = 0
>>     23681 snf.0.-1 P (default)              SNF_RING_ID = -1 (0xffffffff)
>>     23681 snf.0.-1 P (environ)            SNF_NUM_RINGS = 8 (0x8)
>>     23681 snf.0.-1 P (default)            SNF_RSS_FLAGS = 49 (0x31)
>>     23681 snf.0.-1 P (environ)        SNF_DATARING_SIZE = 4294967296
>>     (0x100000000) (4096.0 MiB)
>>     23681 snf.0.-1 P (environ)        SNF_DESCRING_SIZE = 1073741824
>>     (0x40000000) (1024.0 MiB)
>>     23681 snf.0.-1 P (userset)                SNF_FLAGS = 1 (0x1)
>>     23681 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
>>     23681 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
>>     23681 snf.0.-1 P (environ)               SNF_APP_ID = 10 (0xa)
>>
>>
>>
>>     --
>>     - Justin Azoff
>>
>>
>>     _______________________________________________
>>     Bro mailing list
>>     bro at bro-ids.org <mailto:bro at bro-ids.org>
>>     http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>
>
>
>
> _______________________________________________
> Bro mailing list
> bro at bro-ids.org
> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/bro/attachments/20170621/af9afded/attachment-0001.html