[Bro] Bro node.cfg not setting Myricom Sniffer10G environment variables

[Chris Chiaverini]

Rollback!!!!

Myricom opened an internal ticket on their end so hopefully we will see 
a bugfix soon.

Regards,

Chris Chiaverini
Cyber Security Operations
Brookhaven National Laboratory
Upton, New York 11973

On 06/21/2017 07:59 PM, Aashish Sharma wrote:
> Doh! I just upgraded the myricom drivers to 3.0.11 today only :)
>
> Aashish
>
> On Wed, Jun 21, 2017 at 06:31:50PM -0400, Chris Chiaverini wrote:
>> Alex,
>>
>> Thank you for this.  I confirmed on my end too... rolled back to 3.0.10 and
>> it worked.   I will let you know what Myricom comes up with, if they will
>> fix in next release.
>>
>>
>> Regards,
>>
>> Chris Chiaverini
>> Cyber Security Operations
>> Brookhaven National Laboratory
>> Upton, New York 11973
>>
>> On 06/20/2017 11:01 AM, Chris Chiaverini wrote:
>>> I have a support case open with them in parallel.  I will report this to
>>> them too.  Maybe we'll get a fix in next minor release.
>>>
>>> Regards,
>>>
>>> Chris Chiaverini
>>> Cyber Security Operations
>>> Brookhaven National Laboratory
>>> Upton, New York 11973
>>> On 06/20/2017 10:09 AM, Alejandro Carreno wrote:
>>>> I noticed this behavior as well a while back after upgrading SNF from
>>>> 3.0.10 to 3.0.11. Downgrading back to 3.0.10 would return the ring sizes
>>>> to the expected values.
>>>>
>>>> -Alex
>>>>
>>>> On Tue, Jun 20, 2017 at 6:47 AM Azoff, Justin S <jazoff at illinois.edu
>>>> <mailto:jazoff at illinois.edu>> wrote:
>>>>
>>>>
>>>>     > On Jun 20, 2017, at 9:27 AM, Chris Chiaverini
>>>>     <cchiaverini at bnl.gov <mailto:cchiaverini at bnl.gov>> wrote:
>>>>     >
>>>>     > It seems that bro 2.5.1 is not taking the SNF_DATARING_SIZE
>>>>     variable, no matter what I set it to.
>>>>     >
>>>>     > When at the defaults in the /etc/bro/node.cfg and with nothing
>>>>     set at the shell, it still reports it is set via "userset"
>>>>     instead of "default" like SNF_DESCRING_SIZE.
>>>>
>>>>     Can you do this quick test using tcpdump to verify the problem is
>>>>     with bro/broctl or something with the myricom driver/library?
>>>>
>>>>     SNF_APP_ID=10 SNF_FLAGS=0x1 SNF_NUM_RINGS=8 SNF_DEBUG_MASK=3
>>>>     SNF_DATARING_SIZE=4294967296 SNF_DESCRING_SIZE=1073741824 tcpdump
>>>>     -n -i snf0 -c 1
>>>>
>>>>     When I run that I get
>>>>
>>>>     23681 snf.0.-1 P (userset)              SNF_PORTNUM = 0
>>>>     23681 snf.0.-1 P (default)              SNF_RING_ID = -1 (0xffffffff)
>>>>     23681 snf.0.-1 P (environ)            SNF_NUM_RINGS = 8 (0x8)
>>>>     23681 snf.0.-1 P (default)            SNF_RSS_FLAGS = 49 (0x31)
>>>>     23681 snf.0.-1 P (environ)        SNF_DATARING_SIZE = 4294967296
>>>>     (0x100000000) (4096.0 MiB)
>>>>     23681 snf.0.-1 P (environ)        SNF_DESCRING_SIZE = 1073741824
>>>>     (0x40000000) (1024.0 MiB)
>>>>     23681 snf.0.-1 P (userset)                SNF_FLAGS = 1 (0x1)
>>>>     23681 snf.0.-1 P (environ)           SNF_DEBUG_MASK = 3 (0x3)
>>>>     23681 snf.0.-1 P (default)       SNF_DEBUG_FILENAME = stderr
>>>>     23681 snf.0.-1 P (environ)               SNF_APP_ID = 10 (0xa)
>>>>
>>>>
>>>>
>>>>     --
>>>>     - Justin Azoff
>>>>
>>>>
>>>>     _______________________________________________
>>>>     Bro mailing list
>>>>     bro at bro-ids.org <mailto:bro at bro-ids.org>
>>>>     http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>>>>
>>>
>>>
>>> _______________________________________________
>>> Bro mailing list
>>> bro at bro-ids.org
>>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro
>> _______________________________________________
>> Bro mailing list
>> bro at bro-ids.org
>> http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/bro