[Zeek] zeek erros with zbalance_ipc

[Tim Thompson]

Does this help?

https://github.com/ntop/PF_RING/blob/dev/userland/examples_zc/zbalance_ipc.c


Thanks,
Tim

On Fri, Feb 21, 2020 at 3:40 PM Tim Wojtulewicz <tim at corelight.com> wrote:

> That looks like an issue with the new IOSource changes in 3.1. Is the code
> for that plugin public and something I could go look at? We tested it
> pretty heavily with the pcap, af_packet, and myricom plugins so it might be
> something with that plugin specifically.
>
> Tim
>
> > On Feb 21, 2020, at 2:33 PM, Tim Thompson <tim at tsqrd.net> wrote:
> >
> > Version Info:
> > Zeek 3.2.0-dev.53
> > pfring-7.5.0-2838.x86_64
> >
> > We currently utilize zbalance_ipc to load balance our traffic on our
> zeek boxes.  I built a new box the other day, and now zeek refuses to work
> with any interface that zbalance_ipc creates.  This works fine on all of
> our existing boxes which are currently running Zeek 3.1.0-dev.292.
> >
> > Example:
> > zbalance_ipc -i zc:eth1 -n 1 -m 1 -c 10 -g 1 -a (creates zc:10 at 0)
> >
> > [root at server opt]# zeek -i zc:10 at 0
> > listening on zc:10 at 0
> >
> > error: Failed to register fd 22 from PktSrc: Bad address
> > fatal error: Failed to register pktsrc fd with iosource_mgr
> >
> > Has anyone ran into this issue?
> >
> > Thanks,
> > Tim
> > _______________________________________________
> > Zeek mailing list
> > zeek at zeek.org
> > http://mailman.ICSI.Berkeley.EDU/mailman/listinfo/zeek
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/zeek/attachments/20200221/738749c2/attachment.html