{"action":"created","issue":{"url":"https://api.github.com/repos/ntop/PF_RING/issues/178","repository_url":"https://api.github.com/repos/ntop/PF_RING","labels_url":"https://api.github.com/repos/ntop/PF_RING/issues/178/labels{/name}","comments_url":"https://api.github.com/repos/ntop/PF_RING/issues/178/comments","events_url":"https://api.github.com/repos/ntop/PF_RING/issues/178/events","html_url":"https://github.com/ntop/PF_RING/issues/178","id":202240945,"number":178,"title":"PF_RING/tcpdump Packets being mangled, then dropped continuously","user":{"login":"sonysouthbeach","id":13942607,"avatar_url":"https://avatars.githubusercontent.com/u/13942607?v=3","gravatar_id":"","url":"https://api.github.com/users/sonysouthbeach","html_url":"https://github.com/sonysouthbeach","followers_url":"https://api.github.com/users/sonysouthbeach/followers","following_url":"https://api.github.com/users/sonysouthbeach/following{/other_user}","gists_url":"https://api.github.com/users/sonysouthbeach/gists{/gist_id}","starred_url":"https://api.github.com/users/sonysouthbeach/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sonysouthbeach/subscriptions","organizations_url":"https://api.github.com/users/sonysouthbeach/orgs","repos_url":"https://api.github.com/users/sonysouthbeach/repos","events_url":"https://api.github.com/users/sonysouthbeach/events{/privacy}","received_events_url":"https://api.github.com/users/sonysouthbeach/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":8,"created_at":"2017-01-20T20:59:31Z","updated_at":"2017-01-23T14:49:28Z","closed_at":"2017-01-23T14:44:35Z","body":"We are encountering a problem capturing packets using PF_RING with tcpdump (and bro). We've compiled the latest PF_RING 6.5.0 (actually db4a15f4bcccf51e361d60960455b53a4d248f71), and are using the included libpcap and tcpdump. When we run tcpdump, it runs correctly for a moment, then displays one or two packets that appear to be mangled, and then just hangs. After it hangs, no more packets are captured, and after interrupting it we see a very high number of packets dropped.\r\n\r\n\r\nSystem info:\r\n```\r\nuser@ubuntu:~$ uname -a\r\nLinux ubuntu 4.4.0-57-generic #78-Ubuntu SMP Fri Dec 9 23:50:32 UTC 2016 x86_64 x86_64 x86_64 GNU/Linux\r\nuser@ubuntu:~$ lsb_release -a\r\nNo LSB modules are available.\r\nDistributor ID: Ubuntu\r\nDescription:    Ubuntu 16.04.1 LTS\r\nRelease:        16.04\r\nCodename:       xenial\r\n```\r\n\r\nPF_RING info (version is unknown since the system does not have internet access, so we did not git clone the repository):\r\n```\r\nuser@ubuntu:~$ cat /proc/net/pf_ring/info\r\nPF_RING Version          : 6.5.0 (unknown)\r\nTotal rings              : 0\r\n\r\nStandard (non ZC) Options\r\nRing slots               : 32768\r\nSlot version             : 16\r\nCapture TX               : No [RX only]\r\nIP Defragment            : No\r\nSocket Mode              : Standard\r\nCluster Fragment Queue   : 0\r\nCluster Fragment Discard : 0\r\n```\r\n\r\nInterface driver:\r\n```\r\nuser@ubuntu:~$ ethtool -i eth3\r\ndriver: tg3\r\nversion: 3.137\r\nfirmware-version: FFV7.10.61 bc 5720-v1.36\r\nexpansion-rom-version:\r\nbus-info: 0000:02:00.1\r\nsupports-statistics: yes\r\nsupports-test: yes\r\nsupports-eeprom-access: yes\r\nsupports-register-dump: yes\r\nsupports-priv-flags: no\r\n```\r\n\r\ntcpdump output:\r\n```\r\nuser@ubuntu:~$ sudo tcpdump -i eth3 -ttttt\r\ntcpdump: verbose output suppressed, use -v or -vv for full protocol decode\r\nlistening on eth3, link-type EN10MB (Ethernet), capture size 262144 bytes\r\n...\r\n6 normal packets omitted\r\n...\r\n00:00:00.000538 [|ether]\r\n00:00:00.000540 [|ether]\r\n^C\r\n8 packets captured\r\n8 packets received by filter\r\n83726 packets dropped by kernel\r\n```\r\n\r\nCorresponding PF_RING process info:\r\n```\r\nuser@ubuntu:~$ cat /proc/net/pf_ring/4106-eth3.52\r\nBound Device(s)    : eth3\r\nActive             : 1\r\nBreed              : Standard\r\nAppl. Name         : <unknown>\r\nSocket Mode        : RX+TX\r\nCapture Direction  : RX+TX\r\nSampling Rate      : 1\r\nIP Defragment      : No\r\nBPF Filtering      : Disabled\r\nSw Filt Hash Rules : 0\r\nSw Filt WC Rules   : 0\r\nHw Filt Rules      : 0\r\nSw Filt Hash Match : 0\r\nSw Filt Hash Miss  : 0\r\nPoll Pkt Watermark : 1\r\nNum Poll Calls     : 42\r\nChannel Id Mask    : 0xFFFFFFFFFFFFFFFF\r\nCluster Id         : 0\r\nSlot Version       : 16 [6.5.0]\r\nMin Num Slots      : 32768\r\nBucket Len         : 65535\r\nSlot Len           : 65592 [bucket+header]\r\nTot Memory         : 2149330944\r\nTot Packets        : 77992\r\nTot Pkt Lost       : 77992\r\nTot Insert         : 8\r\nTot Read           : 8\r\nInsert Offset      : 4984\r\nRemove Offset      : 5096\r\nNum Free Slots     : 32768\r\nTX: Send Ok        : 0\r\nTX: Send Errors    : 0\r\nReflect: Fwd Ok    : 0\r\nReflect: Fwd Errors: 0\r\n```"},"comment":{"url":"https://api.github.com/repos/ntop/PF_RING/issues/comments/274507061","html_url":"https://github.com/ntop/PF_RING/issues/178#issuecomment-274507061","issue_url":"https://api.github.com/repos/ntop/PF_RING/issues/178","id":274507061,"user":{"login":"cardigliano","id":7548711,"avatar_url":"https://avatars.githubusercontent.com/u/7548711?v=3","gravatar_id":"","url":"https://api.github.com/users/cardigliano","html_url":"https://github.com/cardigliano","followers_url":"https://api.github.com/users/cardigliano/followers","following_url":"https://api.github.com/users/cardigliano/following{/other_user}","gists_url":"https://api.github.com/users/cardigliano/gists{/gist_id}","starred_url":"https://api.github.com/users/cardigliano/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/cardigliano/subscriptions","organizations_url":"https://api.github.com/users/cardigliano/orgs","repos_url":"https://api.github.com/users/cardigliano/repos","events_url":"https://api.github.com/users/cardigliano/events{/privacy}","received_events_url":"https://api.github.com/users/cardigliano/received_events","type":"User","site_admin":false},"created_at":"2017-01-23T14:49:28Z","updated_at":"2017-01-23T14:49:28Z","body":"force_ring_lock it's an option I just added for this issue, don't worry about multiple processes etc, they will work: what this option does it's what exactly what the module should do itself but it doesn't on your card atm."}}
{"actor":{"display_login":"cardigliano"}}