nProbe
nProbe copied to clipboard
nProbe IPS failure on Rocky Linux 9
nProbe IPS fails on Rocky Linux 9 due to a double bind to two sockets tied to the same process pid. For some reason this is not allowed on RH kernels (this is working on Ubuntu/Debian). This should be addresses avoiding the creation of the second socket if possible.
Failure message:
[LinuxSocketMonitor.cpp:103] ERROR: Unable to bind socket
Commands to reproduce it:
- sudo ntopng -i tcp://127.0.0.1:1234
- sudo nprobe -i ens192 --zmq tcp://127.0.0.1:1234 --agent-mode