<?xml version="1.0" encoding="iso-8859-1" ?>
<?xml-stylesheet title="XSL_formatting" type="text/xsl" href="/images/lists/rssstyle2.xsl"?>
<rss version="2.0">
<channel>
<title>NTop | Misc</title>
<description>Mailing List Archive by Gossamer Threads</description>
<link>http://www.gossamer-threads.com/lists/ntop/misc/</link>
<language>en-us</language>
<copyright>(c) Gossamer Threads Inc. All rights reserved.</copyright>
<lastBuildDate>12 Feb  2012 14:26:48 -0800</lastBuildDate>
<ttl>120</ttl>
<image>
<title>Gossamer Threads | NTop | Misc</title>
<width>75</width>
<height>23</height>
<link>http://www.gossamer-threads.com/lists/ntop/misc/</link>
<url>http://www.gossamer-threads.com/images/lists/rss_logo.jpg</url>
</image>
<item>
<title>Re: pf_ring quick_mode not being set?</title>
<description>0100 please update to the latest SVN rev Regards Alfredo  On Feb 12, 2012, at 7:21 PM, 0100 wrote: &amp;gt; Please can someone help? &amp;gt; &amp;gt; On Friday, Febru</description>
<pubDate>12 Feb  2012 10:26:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28468</link>
</item><item>
<title>Re: pf_ring quick_mode not being set?</title>
<description>Please can someone help? On Friday, February 10, 2012, 0100 &amp;lt;suroot@gmail.com&amp;gt; wrote: &amp;gt; Hi. &amp;gt; &amp;gt; I can&amp;#039;t get two simultaneous daemons to listen on the</description>
<pubDate>12 Feb  2012 10:21:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28467</link>
</item><item>
<title>pf_ring quick_mode not being set?</title>
<description>Hi. I can&amp;#039;t get two simultaneous daemons to listen on the same interface. After reading it seems like this is usually due to quick_mode being enabled</description>
<pubDate>10 Feb  2012 12:38:15 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28461</link>
</item><item>
<title>scanIdleTimedoutSessions message</title>
<description>Luca,  I noticed that in sessions.c the &amp;quot;#ifdef DEBUG&amp;quot; lines that surround the scanIdleTimedoutSessions message have been commented out, was wonder</description>
<pubDate>10 Feb  2012 10:58:13 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28460</link>
</item><item>
<title>Re: Ntop-misc Digest, Vol 92, Issue 6</title>
<description>Hi Alfredo, Thank you very much. It turns out that that include was misplaced. For everyone to know, we were able to finally compile the bnx2 driver</description>
<pubDate>10 Feb  2012 04:44:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28459</link>
</item><item>
<title>Re: Ntop-misc Digest, Vol 92, Issue 6</title>
<description>Josr pfring_ptr is defined in linux/pf_ring.h: #define pfring_ptr ec_ptr make sure you are including it Regards Alfredo On Feb 9, 2012, at 12:16 P</description>
<pubDate>09 Feb  2012 03:32:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28456</link>
</item><item>
<title>Re: Ntop-misc Digest, Vol 92, Issue 6</title>
<description>Hi Luca, I am aware you don&amp;#039;t have Broadcom NICs, but I was just wondering if some of you had ever encountered this kind of errors: &#039;struct net_devi</description>
<pubDate>09 Feb  2012 03:16:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28455</link>
</item><item>
<title>Re: Error when compiling bnx2 driver with pf_ring support</title>
<description>Jose we have no Broadcom NICs and this I cannot maintain these drivers. Shall you be willing to fix these issues, please send us a code patch Thanks</description>
<pubDate>09 Feb  2012 02:56:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28454</link>
</item><item>
<title>Error when compiling bnx2 driver with pf_ring support</title>
<description>Hello, I&amp;#039;ve tried to compile the same problems that other person had earlier with bnx2 driver provided by pf_ring, as per: http://listgateway.unipi.i</description>
<pubDate>09 Feb  2012 02:00:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28451</link>
</item><item>
<title>strange kernel oops panics</title>
<description>Hello, I got the following kernel oops panic condition while running urlsnarf and tshark. Both of them has the same error. I have no error with tcpdu</description>
<pubDate>08 Feb  2012 07:49:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28447</link>
</item><item>
<title>newbie (netflow-related) nprobe/ntop problem</title>
<description>hi, I&amp;#039;m trying to use nprobe/ntop as a netflow collector/analyser. I&amp;#039;ve followed this simple howto: http://www.ntop.org/nprobe/using-ntop-as-a-flow-c</description>
<pubDate>08 Feb  2012 04:43:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28446</link>
</item><item>
<title>Another interesting error</title>
<description>Just got another one that I thought you all might want to see and ponder on: Feb 6 18:51:39 ring ntop[21554]:  **ERROR** Buffer too short @ session</description>
<pubDate>06 Feb  2012 17:00:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28439</link>
</item><item>
<title>This ought to be interesting...</title>
<description>Installed NTop from svn on Feb 2: &amp;quot;Welcome to ntop v.4.1.2 (64 bit) [Configured on Feb 2 2012 13:28:28, built on Feb 2 2012 13:30:33]&amp;quot; Worked fine</description>
<pubDate>06 Feb  2012 16:54:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28438</link>
</item><item>
<title>Capturing first 128 bits of payload in pfring</title>
<description>Dear All,      I would like to capture 128 bits of my packets via pfring. I saw this structure struct pkt_parsing_info but I already used most</description>
<pubDate>05 Feb  2012 19:35:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28435</link>
</item><item>
<title>Fw: nprobe compilation error</title>
<description>hi you know,  i receive error when i try to compile the nprobe and its plugins source files. I think the package&amp;#039;s been written seperately by differe</description>
<pubDate>05 Feb  2012 12:57:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28434</link>
</item><item>
<title>Re: Bloom filtering</title>
<description>Hi Luca, &amp;gt; we removed this code as it was strict so not too many different filter &amp;gt; types could not be accommodated as many people want. If you go ba</description>
<pubDate>01 Feb  2012 23:11:44 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28413</link>
</item><item>
<title>Re: Bloom filtering</title>
<description>Jaime we removed this code as it was strict so not too many different filter types could not be accommodated as many people want. If you go back with</description>
<pubDate>01 Feb  2012 13:36:19 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28412</link>
</item><item>
<title>Bloom filtering</title>
<description>Hi all,   I remember there was some kind of bloom filtering capability included in pf_ring but seems it has been removed.   May I ask why it was</description>
<pubDate>01 Feb  2012 04:54:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28405</link>
</item><item>
<title>Re: pfRing delay in capturing TX packets</title>
<description>Thanks Luca,  That did work!   Is there any way we can control this dynamically? i.e make PF_RING poll only when your  application inserts someth</description>
<pubDate>31 Jan  2012 06:18:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28402</link>
</item><item>
<title>nprobe mysql plugin conflics</title>
<description>Dear Sir/Madam I have just run nprobe on my system. without any options. Here&amp;#039;s a sample output: bash-3.1# nprobe 30/Jan/2012 20:38:00 [nprobe.c:258</description>
<pubDate>30 Jan  2012 08:13:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28399</link>
</item><item>
<title>Re: pfRing delay in capturing TX packets</title>
<description>Daniel PF_RING attempts to reduce the number of polls, by using the watermark that is a minimum number of packets that need to be received before PF</description>
<pubDate>30 Jan  2012 01:12:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28398</link>
</item><item>
<title>pfRing delay in capturing TX packets</title>
<description>Hi Luca,  I am using the following config pfRing (on my linux version 2.6.18-194.17.1.el5)  [root@localhost ~]# cat /proc/net/pf_ring/info PF_RIN</description>
<pubDate>29 Jan  2012 19:20:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28395</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>Alfredo,  &amp;gt;&amp;gt;Actually we are aware that the bnx2 PF_RING-aware driver is an old release   I figured as much. Thanks for the confirmation. I have</description>
<pubDate>28 Jan  2012 06:07:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28390</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>Sorry guys we don&amp;#039;t have such hardware in our lab to reproduce the issue. Actually we are aware that the bnx2 PF_RING-aware driver is an old release a</description>
<pubDate>28 Jan  2012 01:32:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28389</link>
</item><item>
<title>Fedora 16 with e1000 PF_Ring aware driver fails to compile</title>
<description>Fresh install + updates of Fedora 16. e1000 PF_Ring Aware driver: make: make -C /lib/modules/3.1.9-1.fc16.i686/build SUBDIRS=/root/PF_RING/drivers/P</description>
<pubDate>27 Jan  2012 21:10:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28388</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>That&amp;#039;s what I&amp;#039;ve come down to also.  I&amp;#039;m searching for hardware that has the e1000e chipset and will give that a try next. I just wanted to make sure</description>
<pubDate>27 Jan  2012 13:25:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28383</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>Richard, You are not alone. I&amp;#039;ve been working on a Dell 2950 with two Broadcom 5708&amp;#039;s on board. I&amp;#039;ve seen the same behavior: pfcount (or tcpdump) o</description>
<pubDate>27 Jan  2012 13:22:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28382</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>Thank You! That fix worked well. I was able to compile both the PF_Ring and the bnx2 driver.  Now I seem to have another problem though... I removed</description>
<pubDate>27 Jan  2012 12:35:18 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28381</link>
</item><item>
<title>Re: CentOS 6.2 with PF_Ring?</title>
<description>Richard please update to svn rev.5134 and let us know Regards Alfredo On Jan 27, 2012, at 1:48 AM, Richard Ullrich wrote: &amp;gt; Has anyone successfully</description>
<pubDate>26 Jan  2012 17:15:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28380</link>
</item><item>
<title>CentOS 6.2 with PF_Ring?</title>
<description>Has anyone successfully compiled and used the current svn build (5133) with CentOS 6.2 ? When I attempt the /PF_RING/kernel/make, I get :  make -C /l</description>
<pubDate>26 Jan  2012 16:48:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28379</link>
</item><item>
<title>Re: Question about the PF_ring Paper</title>
<description>*Much thanks for your reply, Luca:* *The question is pfring_recv function is still the same. Watermark is just added to different applications, like p</description>
<pubDate>21 Jan  2012 10:13:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28362</link>
</item><item>
<title>Re: Question about the PF_ring Paper</title>
<description>Eugene this is old stuff. In the current PF_RING we use a different approach. We implement the concept of watermark (i.e. a minimum amount of packets</description>
<pubDate>21 Jan  2012 00:33:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28355</link>
</item><item>
<title>Re: Last svn patch. - PATCH</title>
<description>Great! Luca On Jan 17, 2012, at 5:26 PM, Brian Behrens wrote: &amp;gt; Awesome, I have synced and applied to my svn working arm.  I also just checked on</description>
<pubDate>21 Jan  2012 00:31:26 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28354</link>
</item><item>
<title>Question about the PF_ring Paper</title>
<description>Hi Luca: I have a small question about your paper &amp;quot;Beyond Device Polling&amp;quot;: *In the last month the real-time patch issue has been solved using an</description>
<pubDate>18 Jan  2012 19:17:54 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28348</link>
</item><item>
<title>Packet generator</title>
<description></description>
<pubDate>17 Jan  2012 17:18:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28342</link>
</item><item>
<title>Re: Last svn patch. - PATCH</title>
<description>Awesome, I have synced and applied to my svn working arm.  I also just checked on the busy network and have seen a max session count of 68415, probl</description>
<pubDate>17 Jan  2012 08:26:22 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28338</link>
</item><item>
<title>Re: Last svn patch. - PATCH</title>
<description>Brian the patch looks good to me and I have committed it and I am now using on my test lab.  Many thanks for all, Luca On Jan 17, 2012, at 2:23 PM,</description>
<pubDate>17 Jan  2012 07:45:35 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28337</link>
</item><item>
<title>Re: Last svn patch. - PATCH</title>
<description>Luca, Here is the patch file. Found disagreements between unsigned short and unsigned integers.  The unsigned short as a 65535 limit, thus where th</description>
<pubDate>17 Jan  2012 05:23:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28331</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>Great! Luca On 01/17/2012 02:10 PM, Brian Behrens wrote: &amp;gt; &amp;gt; Luca, &amp;gt; &amp;gt; Thanks, I have found the issue.  I am correcting it now, working on a &amp;gt; pat</description>
<pubDate>17 Jan  2012 05:12:21 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28330</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>Luca,  Thanks, I have found the issue.  I am correcting it now, working on a patch and will submit it to you, probably within the hour...  --Bria</description>
<pubDate>17 Jan  2012 05:10:20 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28329</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>Brian thanks for the update. Please let me know if you need support from my side Cheers Luca On 01/17/2012 01:14 PM, Brian Behrens wrote: &amp;gt; &amp;gt; Luca,</description>
<pubDate>17 Jan  2012 05:04:56 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28328</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>Luca,  As of this morning, my one instance passed 65535 sessions, and ntop would not see more than that even though the command line is set.  I wil</description>
<pubDate>17 Jan  2012 04:14:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28327</link>
</item><item>
<title>PF_ring, active waiting or passively waiting?????????</title>
<description>Hi Luca: I&amp;#039;m using PF_ring to capture packets, so I have to choose using &amp;quot;active waiting&amp;quot;, or &amp;quot;passively waiting&amp;quot;. My understanding is active waiting</description>
<pubDate>16 Jan  2012 11:48:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28323</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>I understand, guess sometimes the compiles go by so fast on my machine I miss stuff.  I will keep an eye on it, I just re-built it and on the config</description>
<pubDate>16 Jan  2012 05:33:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28316</link>
</item><item>
<title>Re: Last svn patch.</title>
<description>Brian I did that change because the compiler (it was right) was complaining. Is this causing side effects? If so let&amp;#039;s address them: I didn&amp;#039;t want to</description>
<pubDate>16 Jan  2012 05:22:52 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28315</link>
</item><item>
<title>Last svn patch.</title>
<description>Luca,  I noticed you changed my u_int back to int in prefs.c.  I had to change this because I could not get the max sessions, max hash above 65535.</description>
<pubDate>16 Jan  2012 05:09:01 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28314</link>
</item><item>
<title>nProbe issues during make</title>
<description>Hi, I&amp;#039;m running into an issue after configuring nProbe with an unprivileged user. I was able to run autogen.sh without issue but running make runs in</description>
<pubDate>09 Jan  2012 12:06:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28273</link>
</item><item>
<title>nprobe CPU sudden rise</title>
<description>Hi, I experienced a sudden nprobe CPU raise (from less than 20% to 95%). At about the time this happened, I found this (and only this....) message in</description>
<pubDate>06 Jan  2012 02:54:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28265</link>
</item><item>
<title>PF-ring:Problem about multiple ring racing</title>
<description>Hi Luca: I have a problem about multiple PF-ring working on one machine together, so would there be a severe racing between different rings£¿£¿ Since</description>
<pubDate>30 Dec  2011 09:17:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28253</link>
</item><item>
<title>PF_RING packet forwarding with tun/tap devices</title>
<description>Hello,  How can I get data through PF_RING using hash filtering to a virtual interface (tun/tap devices) without having to open this interface and re</description>
<pubDate>29 Dec  2011 16:25:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28252</link>
</item><item>
<title>AUTO : Yves-Alain BILTERYST est absent / Yves-Alain BILTERYST is out of office (retour 02/01/2012)</title>
<description>Je suis absent(e) du bureau jusqu&amp;#039;au 02/01/2012 I am currently out of office with limited access to e-mail. I will be back on January, 2nd. For urg</description>
<pubDate>28 Dec  2011 07:03:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28249</link>
</item><item>
<title>New Patches</title>
<description>Luca, I have e-mailed you some patches that have corrected some issues for me, and I have not had a segfault with these patches implemented in over a</description>
<pubDate>28 Dec  2011 05:53:25 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28248</link>
</item><item>
<title>Re: PF_RING plugin custom extended header</title>
<description>On Dec 22, 2011, at 5:43 PM, Y J wrote: &amp;gt;&amp;gt; Yann &amp;gt;&amp;gt; if your plugin allocates for instance a &amp;quot;struct your_plugin_data&amp;quot; and sets &amp;gt; the &amp;gt;&amp;gt; pointer into p</description>
<pubDate>22 Dec  2011 08:47:08 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28237</link>
</item><item>
<title>Re: PF_RING plugin custom extended header</title>
<description>&amp;gt; Yann &amp;gt; if your plugin allocates for instance a &amp;quot;struct your_plugin_data&amp;quot; and sets the &amp;gt; pointer into parse_buffer.mem and the length into parse_buff</description>
<pubDate>22 Dec  2011 08:43:04 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28236</link>
</item><item>
<title>Re: PF_RING plugin custom extended header</title>
<description>Yann if your plugin allocates for instance a &amp;quot;struct your_plugin_data&amp;quot; and sets the pointer into parse_buffer.mem and the length into parse_buffer.mem</description>
<pubDate>22 Dec  2011 08:36:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28235</link>
</item><item>
<title>Re: PF_RING plugin custom extended header</title>
<description>&amp;gt;Yann &amp;gt;Yes it is possible, your plugin function has to allocate a struct &amp;gt;parse_buffer to be assigned to the parse_memory parameter, filling .mem and</description>
<pubDate>22 Dec  2011 08:19:37 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28232</link>
</item><item>
<title>Re: pfsend with DNA (demo) issue</title>
<description>Fernando you&amp;#039;re not missing anything this time. Please patch the code and send us the diff. It looks like the clock frequency routine of pfsend is bug</description>
<pubDate>15 Dec  2011 06:39:55 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28210</link>
</item><item>
<title>Re: pfsend with DNA (demo) issue</title>
<description>Thanks for your replies. However, I tried to run the tool without -f with no result (still sends packet at a much more higher rate than configured):</description>
<pubDate>15 Dec  2011 04:11:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28209</link>
</item><item>
<title>Re: pfsend with DNA (demo) issue</title>
<description>Fernando pfsend is an example application and in actual implementation the -r parameter works fine only without the -f option (it uses the -l paramete</description>
<pubDate>15 Dec  2011 03:10:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28208</link>
</item><item>
<title>Re: pfsend with DNA (demo) issue</title>
<description>Fernando pfsend is a test utility and we have not planned to make it a network testing tool. However we&amp;#039;re willing to improve it. The tool uses -r pro</description>
<pubDate>15 Dec  2011 03:06:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28207</link>
</item><item>
<title>pfsend with DNA (demo) issue</title>
<description>Hi everyone, I just installed the more recent (demo) version of PF_RING DNA driver for ixgbe, in order to make stress tests on a new router platform.</description>
<pubDate>15 Dec  2011 03:00:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28206</link>
</item><item>
<title>Re: DNA: pfring_send returns -3</title>
<description>Scott no pfring_send is not thread safe: this is not good. Please file a bug on http://bugzilla.ntop.org and we&amp;#039;ll fix it thanks Luca On Dec 13, 201</description>
<pubDate>13 Dec  2011 09:24:10 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28205</link>
</item><item>
<title>Re: DNA: pfring_send returns -3</title>
<description>Luca, Thank you. I have another question: is pfring_send thread-safe? I notice that pfring_open includes a re-entrant flag but I want to make sure</description>
<pubDate>13 Dec  2011 09:14:53 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28204</link>
</item><item>
<title>Re: Segfault after two days</title>
<description>Ahh,  I just did a compare between the two files and I have been experimenting with adding the network dot graphs back into ntop.  The correct line</description>
<pubDate>13 Dec  2011 08:14:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28202</link>
</item><item>
<title>Re: DNA: pfring_send returns -3</title>
<description>Scott #define NO_TX_SLOT_AVAILABLE  -3 means that there is no slot available, i.e. you try to send but the card is unable to send out the packet. Th</description>
<pubDate>13 Dec  2011 07:04:24 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28201</link>
</item><item>
<title>Re: Segfault after two days</title>
<description>On Dec 13, 2011, at 3:59 PM, Brian Behrens wrote: &amp;gt; This is the latest svn build. Not sure why the version server is throwing the August date when r</description>
<pubDate>13 Dec  2011 07:02:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28200</link>
</item><item>
<title>Re: Segfault after two days</title>
<description>This is the latest svn build. Not sure why the version server is throwing the August date when requested, but this is indeed the latest svn update.</description>
<pubDate>13 Dec  2011 06:59:41 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28199</link>
</item><item>
<title>Re: Segfault after two days</title>
<description>Brian I have just realized that this code is pretty old (august). Please resync before trying again Luca On Dec 12, 2011, at 1:19 PM, Brian Behrens</description>
<pubDate>13 Dec  2011 06:55:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28198</link>
</item><item>
<title>Re: Segfault after two days</title>
<description>Brian I need to check this (I see you use a 9k MTU). CAn you please try to debug the core if it happens again? Thanks Luca  On Dec 12, 2011, at 1:1</description>
<pubDate>13 Dec  2011 06:49:23 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28197</link>
</item><item>
<title>DNA: pfring_send returns -3</title>
<description>I&amp;#039;m using pf_ring with a Silicom NIC and am having a problem with pfring_send. Sometimes, I get into a situation where all attempts to call pfring_se</description>
<pubDate>12 Dec  2011 12:47:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28194</link>
</item><item>
<title>Re: nprobe ICMPv6 support</title>
<description>Hi, I check for protocol 58 and then ask for icmp type and code. Type and code then are 0 sometimes. I cannot send a dump because of privacy restricti</description>
<pubDate>12 Dec  2011 12:21:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28193</link>
</item><item>
<title>Segfault after two days</title>
<description>Luca, Looks like I made it two days before a segfault occurred, here is the logs: Dec 8 13:14:59 probe ntop[856]:  THREADMGMT[t140664941140320]:</description>
<pubDate>12 Dec  2011 04:19:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28192</link>
</item><item>
<title>Re: nprobe ICMPv6 support</title>
<description>Dominik in nprobe if you set the flow template that includes ICMP, then all flows (even non ICMP) will have such field (ICMP_TYPE in this case) set. A</description>
<pubDate>11 Dec  2011 08:29:30 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28191</link>
</item><item>
<title>Re: nprobe ICMPv6 support</title>
<description>Hi Luca, o.k. that looks good. Somehow i missed this help text. Sorry and thank you for your answer. But is there any explaination about type and fl</description>
<pubDate>11 Dec  2011 01:42:16 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28190</link>
</item><item>
<title>Re: nprobe ICMPv6 support</title>
<description>Dominik in nprobe deri@iMacLuca 58&amp;gt; ./nprobe -h|grep ICM [ 32] %ICMP_TYPE         %icmpTypeCodeIPv4      ICMP Type * 256 + ICMP code</description>
<pubDate>11 Dec  2011 00:36:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28189</link>
</item><item>
<title>nprobe ICMPv6 support</title>
<description>Hi I am using nprobe in version 6.5.0_052311_pro tying to analyse ICMPv6 traffic. But can&amp;#039;t explain to myself how icmpv6 flags and types are generate</description>
<pubDate>10 Dec  2011 03:57:09 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28187</link>
</item><item>
<title>Re: SSL issue</title>
<description>Brian I have committed the change. I hope it works now Thanks Luca On Dec 8, 2011, at 7:50 PM, Brian Behrens wrote: &amp;gt; Luca, &amp;gt; &amp;gt; Line 55 of ssl.c,</description>
<pubDate>08 Dec  2011 11:59:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28184</link>
</item><item>
<title>Re: SSL issue</title>
<description>Luca, Line 55 of ssl.c, removal of the &amp;quot;-&amp;quot; sign before &amp;quot;myGlobals.newSock&amp;quot; corrected the issue for me. I did browse the svn source, and made sure th</description>
<pubDate>08 Dec  2011 10:50:47 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28183</link>
</item><item>
<title>Re: SSL issue</title>
<description>Brian as soon as I find some time I need to migrate from opens to GnuTLS. I cannot reproduce this error if you can please debug it a bit so I can gues</description>
<pubDate>08 Dec  2011 08:40:58 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28181</link>
</item><item>
<title>SSL issue</title>
<description>Luca,  Just tried to get SSL going, and the server starts it, but when you go to access the site, it instantly segfaults out.  I just tried a test</description>
<pubDate>08 Dec  2011 06:57:12 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28180</link>
</item><item>
<title>Re: PF_RING plugin custom extended header</title>
<description>Yann Yes it is possible, your plugin function has to allocate a struct parse_buffer to be assigned to the parse_memory parameter, filling .mem and .m</description>
<pubDate>07 Dec  2011 07:18:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28179</link>
</item><item>
<title>PF_RING plugin custom extended header</title>
<description>Hello,   I wonder if there is a way to add a custom PF_RING extended packet header with field that can be filled by a PF_Ring plugin.   Yann</description>
<pubDate>07 Dec  2011 06:49:42 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28178</link>
</item><item>
<title>Re: Discarded Flows: Flows with Zero Byte Count</title>
<description>Fernando these flows are very badly formed as ASA is emitting a lot of j*nk. This said I have put a patch for this in the ntop SVN. Please update and</description>
<pubDate>07 Dec  2011 06:00:00 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28177</link>
</item><item>
<title>Discarded Flows: Flows with Zero Byte Count</title>
<description>Dear mailing lists, I have the follow problem: all my netflow traffic are discarted because: &amp;quot;Flows with Zero Byte Count&amp;quot; somebody knows the reason?</description>
<pubDate>07 Dec  2011 02:02:27 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28176</link>
</item><item>
<title>Re: Return of segfaults</title>
<description>Right. The forum just awaits a mail from you saying &amp;quot;ntop is no longer crashing&amp;quot;. Cheers Luca On Dec 5, 2011, at 3:59 PM, Brian Behrens wrote: &amp;gt; Lu</description>
<pubDate>05 Dec  2011 07:08:51 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28173</link>
</item><item>
<title>Re: Return of segfaults</title>
<description>Luca,  I will apply that update and send you the config file as well as a extended output of my logfile in case there is anything interesting in it.</description>
<pubDate>05 Dec  2011 06:59:07 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28172</link>
</item><item>
<title>Re: Return of segfaults</title>
<description>Brian 1. how do you start ntop (command line options)? 2. I have just made a small fix. Please resync from SVN and let me know. The short buffer mess</description>
<pubDate>05 Dec  2011 05:58:46 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28171</link>
</item><item>
<title>Return of segfaults</title>
<description>Luca, I am not sure what quite has happened. But the segfaults have returned. IE: Dec 3 13:13:43 probe ntop[882]:  **ERROR** Buffer too short @ r</description>
<pubDate>05 Dec  2011 04:50:59 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28170</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Alfredo, Let&amp;#039;s start with the debug DNA library. I&amp;#039;ll look into what it whether we can get you ssh access. =s= On Wed, Nov 30, 2011 at 10:51 AM,</description>
<pubDate>30 Nov  2011 09:58:33 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28157</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Scott I see and agree with you, PF_RING stops reading packets and we need to understand why. We have two choices: 1. I can put my hands directly on y</description>
<pubDate>30 Nov  2011 09:51:40 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28156</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Alfredo, At a high level, the results with pause behavior disabled is the same. However, we see a couple of interesting differences. First, the ban</description>
<pubDate>30 Nov  2011 09:39:02 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28155</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Scott please try following the order sudo ethtool -A dna0 autoneg off sudo ethtool -A dna0 rx off sudo ethtool -A dna0 tx off Alfredo On Nov 30, 201</description>
<pubDate>30 Nov  2011 06:11:14 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28152</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Alfredo, By simultaneously watching the switch&amp;#039;s statistics and pfcount, we see that initially the switch sees no pause frames and pfcount sees packe</description>
<pubDate>29 Nov  2011 17:28:43 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28150</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Scott it is possible that the flow control slows down a link, but in your case it just stops. If you want you can try with these commands to see if s</description>
<pubDate>29 Nov  2011 17:07:49 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28149</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Alfredo, We looked at the statistics produced by our switch and discovered that when pfcount stops reporting received packets, we start seeing Pause</description>
<pubDate>29 Nov  2011 16:07:39 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28148</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Scott actually we recommend kernels &amp;gt; 2.6.18 with vanilla PF_RING, not with DNA. However 2.6.31 should be fine. Upgrading to a newer version is not a</description>
<pubDate>29 Nov  2011 09:46:48 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28145</link>
</item><item>
<title>Re: Problems with pfcount</title>
<description>Alfredo, I noticed that our machine is running an older kernel (2.6.31.5-127). The PF_RING webpage states that it works with kernels 2.6.18 and newer</description>
<pubDate>29 Nov  2011 09:20:57 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28144</link>
</item><item>
<title>Re: nprobe 6.6.5_110111</title>
<description>Hello nprobe is already available for download, or you can get a binary demo in http://www.ntop.org/demo/ Regards Luca On 11/29/2011 10:22 AM, grar</description>
<pubDate>29 Nov  2011 02:31:45 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28140</link>
</item><item>
<title>Re: nprobe 6.6.5_110111</title>
<description>&amp;gt; If not installed in the system library &amp;quot;opendpi&amp;quot; should be added to this &amp;gt; nprobe.c: &amp;gt; diff nprobe_6.6.5_110111.1/nprobe.c nprobe_6.6.5_110111/nprob</description>
<pubDate>29 Nov  2011 01:22:19 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28139</link>
</item><item>
<title>Re: ixgbe-3.6.7 FlowDirector</title>
<description>Ryan we have implemented filtering in DNA, putting it on vanilla PF_RING is something we might do after we have completed some pending projects  Luca</description>
<pubDate>28 Nov  2011 22:09:31 -0800</pubDate>
<link>http://www.gossamer-threads.com/lists/ntop/misc/28137</link>
</item>
</channel>
</rss>

