I'm running 11 worker processes on each of my five clustered listeners, and each of them, like clockwork, spits out 290 apiece (i.e. every five minutes) of these three log entries every day (thank you, logwatch!):
Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: SNF rx attach: out of free rx rings. app_id=-1 pid=56578 rings_attached=0 rings_requested=0
Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: Failed to attach to ring -1 with err=16
Jun 29 14:25:08 bro01.serverfarm.cornell.edu kernel: myri_snf WARN: eth4: endpt 76, early enable failed
I'm getting oodles of traffic to both my Bro workers and the Snort instances running as SNF_APP_ID 2 ; are these logs anything I need to worry about, in anyone's experience?
Thanks,