Error with reader-pfring.so plugin

143 views
Skip to first unread message

Srinath Mantripragada

unread,
Sep 6, 2017, 11:02:42 AM9/6/17
to Moloch Full Packet Capture
Hi after install moloch and pfring on a Ubuntu 16.04, I'm getting the following error:

# /data/moloch/bin/moloch-capture -c /data/moloch/etc/config.ini
Sep  6 10:51:22 main.c:609 main(): THREAD 0x7fe3b8ec3780
Sep  6 10:51:22 main.c:168 parse_args(): WARNING: gethostname doesn't return a fully qualified name and getdomainname failed, this may cause issues when viewing pcaps - mtl01msp01
Sep  6 10:51:22 plugins.c:101
moloch_plugins_load(): ERROR - Couldn't load plugin reader-pfring.so from '/data/moloch/plugins/reader-pfring.so'
/data/moloch/plugins/reader-pfring.so: undefined symbol: pfring_breakloop
Sep  6 10:51:22 plugins.c:111 moloch_plugins_load(): WARNING - plugin 'reader-pfring.so' not found
Sep  6 10:51:22 readers.c:43 moloch_readers_set(): Couldn't find pcapReadMethod 'pfring' implementation

Here are the pkgs installed 

# dpkg -l moloch
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                                  Version                         Architecture                    Description
+++-=====================================================-===============================-===============================-================================================================================================================
ii  moloch                                                0.19.1-1                        amd64                           Moloch Full Packet System
# dpkg -l pfring
Desired=Unknown/Install/Remove/Purge/Hold
| Status=Not/Inst/Conf-files/Unpacked/halF-conf/Half-inst/trig-aWait/Trig-pend
|/ Err?=(none)/Reinst-required (Status,Err: uppercase=bad)
||/ Name                                                  Version                         Architecture                    Description
+++-=====================================================-===============================-===============================-================================================================================================================
ii  pfring                                                6.6.0-1396                      amd64                           PF_RING (http://www.ntop.org/pf_ring/) [6.6.0-stable:2531aa28851b3b8f89275c2143a328cfd3137e97 (Tue Aug 29 14:41:
# lsmod | grep pf_ring
pf_ring              1232896  0


Any help will be appreciated,

Thanks

Srinath

Andy

unread,
Sep 6, 2017, 11:14:33 AM9/6/17
to Moloch Full Packet Capture
I think it was fixed with 0.19.2, can you try that
Reply all
Reply to author
Forward
0 new messages