Mailing List Archive: NTop: Misc

[PF_RING] IPtraf and Trafshow compilation

Index | Next | Previous | View Threaded

jonschipp at gmail

Oct 10, 2011, 7:18 PM

Post #1 of 6 (396 views)
Permalink

[PF_RING] IPtraf and Trafshow compilation

I was just wondering if anyone has gotten IPTraf or Trafshow to compile with
the pf_ring libs.
These are two apps that I haven't been able to get working. They don't use
libpcap, so I'm not sure if it's possible
If it's possible and anyone has, could you share your compilation options?

http://iptraf.seul.org/
http://soft.risp.ru/trafshow/index_en.shtml

Thanks
--
- Jon
--
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs - http://www.bloominglabs.org
ISSA-Kentuckiana - http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB

jonschipp at gmail

Oct 12, 2011, 7:10 AM

Post #2 of 6 (380 views)
Permalink

Re: [PF_RING] IPtraf and Trafshow compilation [In reply to]

Update:
I do have Trashow working with PF_RING, though, I can't get IPTraf to work
with it.

On Mon, Oct 10, 2011 at 10:18 PM, Jon Schipp <jonschipp [at] gmail> wrote:

> I was just wondering if anyone has gotten IPTraf or Trafshow to compile
> with the pf_ring libs.
> These are two apps that I haven't been able to get working. They don't use
> libpcap, so I'm not sure if it's possible
> If it's possible and anyone has, could you share your compilation options?
>
> http://iptraf.seul.org/
> http://soft.risp.ru/trafshow/index_en.shtml
>
> Thanks
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
>

--
- Jon
--
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs - http://www.bloominglabs.org
ISSA-Kentuckiana - http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB

deri at ntop

Oct 13, 2011, 2:15 AM

Post #3 of 6 (379 views)
Permalink

Re: [PF_RING] IPtraf and Trafshow compilation [In reply to]

Jon
can you please describe the exact problem you experienced?

Luca

On Oct 12, 2011, at 4:10 PM, Jon Schipp wrote:

> Update:
> I do have Trashow working with PF_RING, though, I can't get IPTraf to work with it.
>
> On Mon, Oct 10, 2011 at 10:18 PM, Jon Schipp <jonschipp [at] gmail> wrote:
> I was just wondering if anyone has gotten IPTraf or Trafshow to compile with the pf_ring libs.
> These are two apps that I haven't been able to get working. They don't use libpcap, so I'm not sure if it's possible
> If it's possible and anyone has, could you share your compilation options?
>
> http://iptraf.seul.org/
> http://soft.risp.ru/trafshow/index_en.shtml
>
> Thanks
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
>
>
>
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

jonschipp at gmail

Oct 13, 2011, 6:27 AM

Post #4 of 6 (380 views)
Permalink

Re: [PF_RING] IPtraf and Trafshow compilation [In reply to]

Hello Luca,

* I use transparent mode 2, quick mode 0 *

I've been doing "make CPPFLAGS="-I/usr/local/include"
LDFLAGS="L/usr/local/lib -lpring -lpcap -lpthread" or passing the CPPFLAGS
and LDFLAGS values to configure for all my other apps without problems. FYI:
it's something I grabbed from the web.

When I apply it to IPTraf, it compiles successfully, but when I do "ldd
/usr/local/bin/iptraf" none of the libraries I added with make/configure are
used: pfring, pcap, pthread.

When I launch IPTraf, there isn't a resulting /proc/net/pf_ring file, so I
know it's not using PF_RING.

Since iptraf does not use libpcap, I removed it from my make command above
along with lpthread (is threading support?) and the same thing is
happening.

The INSTALL file in the iptraf directory says you can do the normal, "make
&& make install" to get it working.
There's no configure script in the directory.

Another thing I was wondering about is on interface bandwidth measuring
tools like slurm, ifstat, bmon, and bwm-ng, I can get them all to compile
with PF_RING and if I use ldd for each tool, it shows the pfring library,
but none of them will see any data. They don't show up in /proc/net/pf_ring.
IPTraf has an interface throughput statistic feature as well, I don't know
if that has anything to do with it.

Thanks

On Thu, Oct 13, 2011 at 5:15 AM, Luca Deri <deri [at] ntop> wrote:

> Jon
> can you please describe the exact problem you experienced?
>
> Luca
>
> On Oct 12, 2011, at 4:10 PM, Jon Schipp wrote:
>
> Update:
> I do have Trashow working with PF_RING, though, I can't get IPTraf to work
> with it.
>
> On Mon, Oct 10, 2011 at 10:18 PM, Jon Schipp <jonschipp [at] gmail> wrote:
>
>> I was just wondering if anyone has gotten IPTraf or Trafshow to compile
>> with the pf_ring libs.
>> These are two apps that I haven't been able to get working. They don't use
>> libpcap, so I'm not sure if it's possible
>> If it's possible and anyone has, could you share your compilation options?
>>
>>
>> http://iptraf.seul.org/
>> http://soft.risp.ru/trafshow/index_en.shtml
>>
>> Thanks
>> --
>> - Jon
>> --
>> ------------------------------------------------------------------
>>
>> VMB: 812-682-0231
>>
>> Dubois County Linux User Group - http://www.dclinux.org
>> Southern Indiana Computer Klub - http://sickbits.networklabs.org
>> Bloomington FOOLS - http://www.bloomingtonfools.org/
>> BloomingLabs - http://www.bloominglabs.org
>> ISSA-Kentuckiana - http://issa-kentuckiana.org
>>
>> GPG Key ID: 810903CB
>> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>>
>>
>
>
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>

--
- Jon
--
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs - http://www.bloominglabs.org
ISSA-Kentuckiana - http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB

deri at ntop

Oct 13, 2011, 6:46 AM

Post #5 of 6 (394 views)
Permalink

Re: [PF_RING] IPtraf and Trafshow compilation [In reply to]

Jon
it looks like iptraf is not using libpcap nor pf_ring and thus this should be the cause of your problems

The same applies to the other tools you mentioned.

Luca

On Oct 13, 2011, at 3:27 PM, Jon Schipp wrote:

> Hello Luca,
>
> * I use transparent mode 2, quick mode 0 *
>
> I've been doing "make CPPFLAGS="-I/usr/local/include" LDFLAGS="L/usr/local/lib -lpring -lpcap -lpthread" or passing the CPPFLAGS and LDFLAGS values to configure for all my other apps without problems. FYI: it's something I grabbed from the web.
>
> When I apply it to IPTraf, it compiles successfully, but when I do "ldd /usr/local/bin/iptraf" none of the libraries I added with make/configure are used: pfring, pcap, pthread.
>
> When I launch IPTraf, there isn't a resulting /proc/net/pf_ring file, so I know it's not using PF_RING.
>
> Since iptraf does not use libpcap, I removed it from my make command above along with lpthread (is threading support?) and the same thing is happening.
>
> The INSTALL file in the iptraf directory says you can do the normal, "make && make install" to get it working.
> There's no configure script in the directory.
>
> Another thing I was wondering about is on interface bandwidth measuring tools like slurm, ifstat, bmon, and bwm-ng, I can get them all to compile with PF_RING and if I use ldd for each tool, it shows the pfring library, but none of them will see any data. They don't show up in /proc/net/pf_ring. IPTraf has an interface throughput statistic feature as well, I don't know if that has anything to do with it.
>
> Thanks
>
> On Thu, Oct 13, 2011 at 5:15 AM, Luca Deri <deri [at] ntop> wrote:
> Jon
> can you please describe the exact problem you experienced?
>
> Luca
>
> On Oct 12, 2011, at 4:10 PM, Jon Schipp wrote:
>
>> Update:
>> I do have Trashow working with PF_RING, though, I can't get IPTraf to work with it.
>>
>> On Mon, Oct 10, 2011 at 10:18 PM, Jon Schipp <jonschipp [at] gmail> wrote:
>> I was just wondering if anyone has gotten IPTraf or Trafshow to compile with the pf_ring libs.
>> These are two apps that I haven't been able to get working. They don't use libpcap, so I'm not sure if it's possible
>> If it's possible and anyone has, could you share your compilation options?
>>
>> http://iptraf.seul.org/
>> http://soft.risp.ru/trafshow/index_en.shtml
>>
>> Thanks
>> --
>> - Jon
>> --
>> ------------------------------------------------------------------
>>
>> VMB: 812-682-0231
>>
>> Dubois County Linux User Group - http://www.dclinux.org
>> Southern Indiana Computer Klub - http://sickbits.networklabs.org
>> Bloomington FOOLS - http://www.bloomingtonfools.org/
>> BloomingLabs - http://www.bloominglabs.org
>> ISSA-Kentuckiana - http://issa-kentuckiana.org
>>
>> GPG Key ID: 810903CB
>> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>>
>>
>>
>>
>> --
>> - Jon
>> --
>> ------------------------------------------------------------------
>>
>> VMB: 812-682-0231
>>
>> Dubois County Linux User Group - http://www.dclinux.org
>> Southern Indiana Computer Klub - http://sickbits.networklabs.org
>> Bloomington FOOLS - http://www.bloomingtonfools.org/
>> BloomingLabs - http://www.bloominglabs.org
>> ISSA-Kentuckiana - http://issa-kentuckiana.org
>>
>> GPG Key ID: 810903CB
>> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
>
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc

jonschipp at gmail

Oct 13, 2011, 6:49 AM

Post #6 of 6 (382 views)
Permalink

Re: [PF_RING] IPtraf and Trafshow compilation [In reply to]

Is it safe to say that these tool simply cannot work with PF_RING?

Is libpcap required for tools to work with PF_RING?

I know of no other options to pass to make or configure.

On Thu, Oct 13, 2011 at 9:46 AM, Luca Deri <deri [at] ntop> wrote:

> Jon
> it looks like iptraf is not using libpcap nor pf_ring and thus this should
> be the cause of your problems
>
> The same applies to the other tools you mentioned.
>
> Luca
>
> On Oct 13, 2011, at 3:27 PM, Jon Schipp wrote:
>
> Hello Luca,
>
> * I use transparent mode 2, quick mode 0 *
>
> I've been doing "make CPPFLAGS="-I/usr/local/include"
> LDFLAGS="L/usr/local/lib -lpring -lpcap -lpthread" or passing the CPPFLAGS
> and LDFLAGS values to configure for all my other apps without problems. FYI:
> it's something I grabbed from the web.
>
> When I apply it to IPTraf, it compiles successfully, but when I do "ldd
> /usr/local/bin/iptraf" none of the libraries I added with make/configure are
> used: pfring, pcap, pthread.
>
> When I launch IPTraf, there isn't a resulting /proc/net/pf_ring file, so I
> know it's not using PF_RING.
>
> Since iptraf does not use libpcap, I removed it from my make command above
> along with lpthread (is threading support?) and the same thing is
> happening.
>
> The INSTALL file in the iptraf directory says you can do the normal, "make
> && make install" to get it working.
> There's no configure script in the directory.
>
> Another thing I was wondering about is on interface bandwidth measuring
> tools like slurm, ifstat, bmon, and bwm-ng, I can get them all to compile
> with PF_RING and if I use ldd for each tool, it shows the pfring library,
> but none of them will see any data. They don't show up in /proc/net/pf_ring.
> IPTraf has an interface throughput statistic feature as well, I don't know
> if that has anything to do with it.
>
> Thanks
>
> On Thu, Oct 13, 2011 at 5:15 AM, Luca Deri <deri [at] ntop> wrote:
>
>> Jon
>> can you please describe the exact problem you experienced?
>>
>> Luca
>>
>> On Oct 12, 2011, at 4:10 PM, Jon Schipp wrote:
>>
>> Update:
>> I do have Trashow working with PF_RING, though, I can't get IPTraf to work
>> with it.
>>
>> On Mon, Oct 10, 2011 at 10:18 PM, Jon Schipp <jonschipp [at] gmail> wrote:
>>
>>> I was just wondering if anyone has gotten IPTraf or Trafshow to compile
>>> with the pf_ring libs.
>>> These are two apps that I haven't been able to get working. They don't
>>> use libpcap, so I'm not sure if it's possible
>>> If it's possible and anyone has, could you share your compilation
>>> options?
>>>
>>> http://iptraf.seul.org/
>>> http://soft.risp.ru/trafshow/index_en.shtml
>>>
>>> Thanks
>>> --
>>> - Jon
>>> --
>>> ------------------------------------------------------------------
>>>
>>> VMB: 812-682-0231
>>>
>>> Dubois County Linux User Group - http://www.dclinux.org
>>> Southern Indiana Computer Klub - http://sickbits.networklabs.org
>>> Bloomington FOOLS - http://www.bloomingtonfools.org/
>>> BloomingLabs - http://www.bloominglabs.org
>>> ISSA-Kentuckiana - http://issa-kentuckiana.org
>>>
>>> GPG Key ID: 810903CB
>>> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>>>
>>>
>>
>>
>> --
>> - Jon
>> --
>> ------------------------------------------------------------------
>>
>> VMB: 812-682-0231
>>
>> Dubois County Linux User Group - http://www.dclinux.org
>> Southern Indiana Computer Klub - http://sickbits.networklabs.org
>> Bloomington FOOLS - http://www.bloomingtonfools.org/
>> BloomingLabs - http://www.bloominglabs.org
>> ISSA-Kentuckiana - http://issa-kentuckiana.org
>>
>> GPG Key ID: 810903CB
>> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>>
>>
>>
>> _______________________________________________
>> Ntop-misc mailing list
>> Ntop-misc [at] listgateway
>> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>>
>>
>
>
> --
> - Jon
> --
> ------------------------------------------------------------------
>
> VMB: 812-682-0231
>
> Dubois County Linux User Group - http://www.dclinux.org
> Southern Indiana Computer Klub - http://sickbits.networklabs.org
> Bloomington FOOLS - http://www.bloomingtonfools.org/
> BloomingLabs - http://www.bloominglabs.org
> ISSA-Kentuckiana - http://issa-kentuckiana.org
>
> GPG Key ID: 810903CB
> Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>
>
> _______________________________________________
> Ntop-misc mailing list
> Ntop-misc [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop-misc
>
>

--
- Jon
--
------------------------------------------------------------------

VMB: 812-682-0231

Dubois County Linux User Group - http://www.dclinux.org
Southern Indiana Computer Klub - http://sickbits.networklabs.org
Bloomington FOOLS - http://www.bloomingtonfools.org/
BloomingLabs - http://www.bloominglabs.org
ISSA-Kentuckiana - http://issa-kentuckiana.org

GPG Key ID: 810903CB
Key fingerprint = 0069 ED69 EABB DF84 5983 AD3C 6C20 BEFD 8109 03CB

Index | Next | Previous | View Threaded

Interested in having your list archived? Contact Gossamer Threads