[Snort-users] Can't initialize DAQ dpdk (-3) - dpdk_daq_initialize: No ports found! -- [0] dpdk0

Qinwen Hu qhu009 at aucklanduni.ac.nz
Sat Feb 24 00:10:13 EST 2018


Hi All

Can anyone help me to configure a DPDK module in Snort 3.0. When I run
the Snort instance, I got the following error meesages.


~/snort_src/snort3-master$ sudo snort --daq-dir /usr/local/lib/daq/ --daq
dpdk --daq-var dpdk_args="-c 1" -i dpdk0
--------------------------------------------------
o")~   Snort++ 3.0.0-243
--------------------------------------------------
--------------------------------------------------
dpdk DAQ configured to passive.
Commencing packet processing
++ [0] dpdk0
EAL: Detected 24 lcore(s)
EAL: No free hugepages reported in hugepages-1048576kB
EAL: Probing VFIO support...
PMD: bnxt_rte_pmd_init() called for (null)
EAL: PCI device 0000:01:00.0 on NUMA socket 0
EAL:   probe driver: 8086:1521 rte_igb_pmd
EAL: PCI device 0000:01:00.1 on NUMA socket 0
EAL:   probe driver: 8086:1521 rte_igb_pmd
EAL: PCI device 0000:18:00.0 on NUMA socket 0
EAL:   probe driver: 8086:1572 rte_i40e_pmd
EAL: PCI device 0000:18:00.1 on NUMA socket 0
EAL:   probe driver: 8086:1572 rte_i40e_pmd
Can't initialize DAQ dpdk (-3) - dpdk_daq_initialize: No ports found!
-- [0] dpdk0
--------------------------------------------------
Packet Statistics
--------------------------------------------------
Module Statistics
--------------------------------------------------
Summary Statistics
--------------------------------------------------
timing
                  runtime: 00:00:00
                  seconds: 0.436049
                  packets: 0
                 pkts/sec: 0
o")~   Snort exiting

I am wondering if anyone has configured the DPDK module in Snort 3.0, could
you please help me, what is the right configuration to enable the DPDK in
Snort 3.0

Here are our software versions:

DPDK 16.07
DAQ 2.2.2
Snort3.0

Thank you very much.

Best regards,

Steven



Dr. Qinwen Hu

Computer Science, University of Auckland
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.snort.org/pipermail/snort-users/attachments/20180224/c70de936/attachment.html>


More information about the Snort-users mailing list