[Oisf-users] Myricom and Suricata

[Edgmand, Craig]

I have attached the results using --pcap=p1p1 utilizing a modified version of Michal's script.

________________________________
From: Oisf-users <oisf-users-bounces at lists.openinfosecfoundation.org> on behalf of Victor Julien <lists at inliniac.net>
Sent: Monday, August 27, 2018 4:00:17 PM
To: oisf-users at lists.openinfosecfoundation.org
Subject: Re: [Oisf-users] Myricom and Suricata

On 27-08-18 22:26, Edgmand, Craig wrote:
> I edited the pcap entry in suricata.yaml
>
> pcap:
>   - interface: p1p1
>     threads: 16
>     buffer-size: 2gb
>     promisc: no
>
> I ran variations of this command..
>
> # SNF_NUM_RINGS=16 SNF_DEBUG_MASK=3 SNF_DATARING_SIZE=4294967296
> SNF_DESCRING_SIZE=1073741824 /opt/suricata/bin/suricata -i p1p1 -c
> /opt/suricata/etc/suricata/suricata.yaml -v --runmode=workers
>
> After running these you look at myri_counters it shows no packets using
> the sniffer interface.
>
>                      SNF recv pkts:                    0
>                 SNF drop ring full:                    0
>
> If you try to run the tests using the snf0 interface, suricata dies.

How does it die? Any errors?


> Any thoughts?  I have reviewed the documentation from Myricom and
> Suricata as well.
>
> Thanks,

What happens if you replace -i p1p1 with --pcap=p1p1 ?



--
---------------------------------------------
Victor Julien
https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.inliniac.net%2F&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388911723&sdata=spY%2BvdP65JErcOQvjxy%2FJl5eqHoW1hisylGUt3IJRwc%3D&reserved=0
PGP: https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fwww.inliniac.net%2Fvictorjulien.asc&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388911723&sdata=2KSyZnz6%2FKk2dR07cAAe1RWoJmFtEgEXazKZHibRC1I%3D&reserved=0
---------------------------------------------

_______________________________________________
Suricata IDS Users mailing list: oisf-users at openinfosecfoundation.org
Site: https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsuricata-ids.org&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388911723&sdata=W2GAk%2Bhw5NklBFqQnRQF28XekU0a22lKj5uN9IN2AZw%3D&reserved=0 | Support: https://na01.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsuricata-ids.org%2Fsupport%2F&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388921728&sdata=z1vKDUdzzLKwL66I52wgMXngeU1j4pDrxWQh3ifmXLY%3D&reserved=0
List: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Flists.openinfosecfoundation.org%2Fmailman%2Flistinfo%2Foisf-users&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388921728&sdata=4dzGqPuW4HfCziBmWkThO19U%2F4CGEzWLAcnc979aiPA%3D&reserved=0

Conference: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsuricon.net&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388921728&sdata=B23x1fywCTG48bPdtuapSRuzj%2BIoOERK4MC6zefH5C4%3D&reserved=0
Trainings: https://na01.safelinks.protection.outlook.com/?url=https%3A%2F%2Fsuricata-ids.org%2Ftraining%2F&data=02%7C01%7Ccraig.edgmand%40okstate.edu%7C45b5a1b6273b4c27815a08d60c6023c8%7C2a69c91de8494e34a230cdf8b27e1964%7C0%7C0%7C636710004388921728&sdata=hBolBaPWnbONe70GkP3I6SGTfIp9IoH%2FOgIu0ugo%2FtU%3D&reserved=0
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20180828/72f50f07/attachment-0001.html>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: p1p1.out
Type: application/octet-stream
Size: 15593 bytes
Desc: p1p1.out
URL: <http://lists.openinfosecfoundation.org/pipermail/oisf-users/attachments/20180828/72f50f07/attachment-0001.obj>