Comments (10)
Hi @unixbird the number of interfaces is bounded to the license, at most with a community license you can capture up to 8 interfaces. If you run ntopng with just --community ntopng automatically tries to capture from all interfaces (bringing the error you have).
I suggest on capturing the traffic only on the interfaces you want to capture by adding the -i option.
With the -i option it seems instead the problem could arise just in 2 cases:
- the interface you added does not exists in the container (so try to check out if you have that interface on the container)
- you do not have the sudo privileges to capture from that interface
So please add the interfaces you want to capture (up to 8) and check if you have the sudo privileges when running ntopng
from ntopng.
Hi @unixbird the number of interfaces is bounded to the license, at most with a community license you can capture up to 8 interfaces. If you run ntopng with just --community ntopng automatically tries to capture from all interfaces (bringing the error you have). I suggest on capturing the traffic only on the interfaces you want to capture by adding the -i option. With the -i option it seems instead the problem could arise just in 2 cases:
- the interface you added does not exists in the container (so try to check out if you have that interface on the container)
- you do not have the sudo privileges to capture from that interface
So please add the interfaces you want to capture (up to 8) and check if you have the sudo privileges when running ntopng
I gave the container full root access to test and whenever I let it find all interfaces it does find the vmbr0 interface but if i specify -i it no longer works which is what confuses me the most
from ntopng.
@unixbird what you are reporting is strange actually, are you able to ssh to the container and send the output of ifconfig to double check?
from ntopng.
@cardigliano running ifconfig returns all of the interfaces (which I didn't include) and it finds the vmbr0 interface.
from ntopng.
Made a mistake in the version of ntop. I use the stable tag not the latest.
from ntopng.
Could you check dmesg to see if there is any message?
Btw, please note you probably do not have PF_RING installed on the host system, as it is falling back to PCAP capture. Then ntopng is failing also in PCAP mode, it may be related to capabilities as the interface looks correct.
from ntopng.
This is all I see in dmesg. I also did install pf_ring on the host at one point and that didn't seem to do much.
To test I also ran the pfring container alongside this and got this:
(this is the parent interface of the bridge vmbr0 as I wanted to make sure but I get the same error whether its vmbr0 or eno1)
from ntopng.
[60943.867337] lo: entered promiscuous mode [60946.208993] vmbr0: entered promiscuous mode [60946.398590] tunl0: entered promiscuous mode [60946.535684] cali76d6ba151ab: entered promiscuous mode [60946.694038] calie6aae7e876d: entered promiscuous mode [60946.833376] calib35869b87ac: entered promiscuous mode [60946.971738] calic4f3d4005ab: entered promiscuous mode [60954.048668] calic4f3d4005ab: left promiscuous mode [60954.078416] calib35869b87ac: left promiscuous mode [60954.110035] calie6aae7e876d: left promiscuous mode [60954.143552] cali76d6ba151ab: left promiscuous mode [60954.168681] tunl0: left promiscuous mode [60954.218678] vmbr0: left promiscuous mode [60954.283540] lo: left promiscuous mode [60957.527776] lo: entered promiscuous mode [60959.828450] vmbr0: entered promiscuous mode [60960.035673] tunl0: entered promiscuous mode [60960.189290] cali76d6ba151ab: entered promiscuous mode [60960.346384] calie6aae7e876d: entered promiscuous mode [60960.484000] calib35869b87ac: entered promiscuous mode [60960.619047] calic4f3d4005ab: entered promiscuous mode [60966.965318] calic4f3d4005ab: left promiscuous mode [60966.991017] calib35869b87ac: left promiscuous mode [60967.016021] calie6aae7e876d: left promiscuous mode [60967.034143] cali76d6ba151ab: left promiscuous mode [60967.061154] tunl0: left promiscuous mode [60967.099107] vmbr0: left promiscuous mode [60967.169163] lo: left promiscuous mode [60985.826977] lo: entered promiscuous mode [60988.116496] vmbr0: entered promiscuous mode [60988.316308] tunl0: entered promiscuous mode [60988.448745] cali76d6ba151ab: entered promiscuous mode [60988.599693] calie6aae7e876d: entered promiscuous mode [60988.737185] calib35869b87ac: entered promiscuous mode [60988.876470] calic4f3d4005ab: entered promiscuous mode [60994.704923] calic4f3d4005ab: left promiscuous mode [60994.741262] calib35869b87ac: left promiscuous mode [60994.770290] calie6aae7e876d: left promiscuous mode [60994.796300] cali76d6ba151ab: left promiscuous mode [60994.828584] tunl0: left promiscuous mode [60994.899291] vmbr0: left promiscuous mode [60994.977306] lo: left promiscuous mode [61026.854268] lo: entered promiscuous mode [61029.154023] vmbr0: entered promiscuous mode [61029.355060] tunl0: entered promiscuous mode [61029.489778] cali76d6ba151ab: entered promiscuous mode [61029.646973] calie6aae7e876d: entered promiscuous mode [61029.785315] calib35869b87ac: entered promiscuous mode [61029.922191] calic4f3d4005ab: entered promiscuous mode [61036.556276] calic4f3d4005ab: left promiscuous mode [61036.575115] calib35869b87ac: left promiscuous mode [61036.599110] calie6aae7e876d: left promiscuous mode [61036.627084] cali76d6ba151ab: left promiscuous mode [61036.650043] tunl0: left promiscuous mode [61036.707084] vmbr0: left promiscuous mode [61036.769044] lo: left promiscuous mode [61084.875168] lo: entered promiscuous mode [61087.176258] vmbr0: entered promiscuous mode [61087.384066] tunl0: entered promiscuous mode [61087.516980] cali76d6ba151ab: entered promiscuous mode [61087.676431] calie6aae7e876d: entered promiscuous mode [61087.818332] calib35869b87ac: entered promiscuous mode [61087.961304] calic4f3d4005ab: entered promiscuous mode [61093.902097] calic4f3d4005ab: left promiscuous mode [61093.925374] calib35869b87ac: left promiscuous mode [61093.953456] calie6aae7e876d: left promiscuous mode [61093.982399] cali76d6ba151ab: left promiscuous mode [61094.007454] tunl0: left promiscuous mode [61094.055452] vmbr0: left promiscuous mode [61094.123447] lo: left promiscuous mode
I received a license for XL and I'm trying to see if this fixes anything but I haven't had any luck. Found some more stuff in my dmesg
@cardigliano
from ntopng.
I do not see any hint from dmesg, a joint session would be useful to debug this
from ntopng.
Addressed (pf_ring.ko was not loaded in the host)
from ntopng.
Related Issues (20)
- Empty client.ip and server.ip HOT 2
- ERR_CONNECTION_REFUSED - This site canβt be reached HOT 2
- [ts_utils_core.lua:230] ERROR Schema not found HOT 3
- elasticsearch missing mac HOT 3
- JA3 is Obsolete HOT 1
- Split Flow/nDPI Remediations HOT 1
- Flow remediations are incomplete
- Add Backup LDAP Server
- HTTP prefix not handled correctly on some links HOT 2
- Question: When can we get an official arm64 release published? HOT 2
- Unable to disable SNMP trap collection HOT 2
- Disconnection After Inactivity HOT 2
- User session with updatetime > stoptime
- Rework NTP/DNS/DHCP/SMTP Configuration Page
- Create Gateway Configuration Page
- Host Alias not on Top Local Hosts 1 Week Ago HOT 2
- Labels Broken in Some Checks HOT 1
- storage space is running out because of the suricata eve.json file HOT 1
- ntap on Windows documentation
- decompression buffer too short HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
π Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. πππ
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google β€οΈ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from ntopng.