Problem in loading PF_RING module on Redhat 9.4 VM

[ph-verdier]

Hello,
I am using PF_RING-9.0.0-stable for a Redhat 9.4 (5.14.0-427.13.1.el9_4.x86_64) running on a VM (WMWare). After executing the following command: 'insmod ./pf_ring.ko.xz enable_debug=1', I get the following error: 'insmod: ERROR: could not insert module ./pf_ring.ko.xz: Invalid module format'. In '/var/log/messges', I find: 'kernel: module: x86/modules: Invalid relocation target, existing value is nonzero for type 1, loc 000000002d971c07, val ffffffffc09b5608'.

uname -r: 5.14.0-427.13.1.el9_4.x86_64

modinfo ./pf_ring.ko.xz:
filename: /usr/local/lib/modules/./pf_ring.ko.xz
alias: net-pf-27
version: 9.0.0
description: Packet capture acceleration and analysis
author: ntop.org
license: GPL
rhelversion: 9.4
srcversion: 241F547CA29C6C1CCB7F55B
depends:
retpoline: Y
name: pf_ring
vermagic: 5.14.0-427.13.1.el9_4.x86_64 SMP preempt mod_unload modversions
parm: min_num_slots:Min number of ring slots (uint)
parm: perfect_rules_hash_size:Perfect rules hash size (uint)
parm: enable_tx_capture:Set to 1 to capture outgoing packets (uint)
parm: enable_frag_coherence:Set to 1 to handle fragments (flow coherence) in clusters (uint)
parm: enable_ip_defrag:Set to 1 to enable IP defragmentation(only rx traffic is defragmentead) (uint)
parm: keep_vlan_offload:Set to 1 to keep vlan stripping (do not reinsert vlan) (uint)
parm: quick_mode:Set to 1 to run at full speed but with upto one socket per interface (uint)
parm: force_ring_lock:Set to 1 to force ring locking (automatically enable with rss) (uint)
parm: enable_debug:Set to 1 to enable PF_RING debug tracing into the syslog, 2 for more verbosity (uint)
parm: transparent_mode:(deprecated) (uint)

What is the problem ? Do I have to use another version ?
Thanks a lot
Best regards

[cardigliano]

@ph-verdier could you try with modprobe? insmod may not support compressed modules.

[cardigliano]

I suggest using our scripts btw

[ph-verdier]

I used the 'load_driver.sh' script (ixgbe) which gave me this error. So I am trying the load the pf_ring module lonely for the moment. Compressed (ko.xz) or not compressed (ko) does not change anything to the problem (using insmod). I put the pf_ring.ko.xz module in '/lib/modules/5.14.0-427.13.1.el9_4.x86_64/kernel'. The answer to 'modprobe pf_ring' is 'modprobe: ERROR: could not insert 'pf_ring': Exec format error'. I am a bit lost. No relation with PIE mode ?

[cardigliano]

Did you compile it on the same machine? Did you try rebooting and recompiling the driver?

[ph-verdier]

I compile on the same machine (but I tried also on another one). I have rebooted and recompiled the driver. Same result...

[ph-verdier]

On the same machine, modprobe fails: modprobe: FATAL: Module pf_ring not found in directory /lib/modules/5.14.0-427.13.1.el9_4.x86_64

[cardigliano]

@ph-verdier please drop me an email (cardigliano at ntop.org), with your order id, and we will schedule a call to check this