Friday, July 31, 2015

Cookbook: Installing & Updating SolarCapture on CentOS

By: Justin Borland, Equifax

Below is a a document describing how to update/install Solarflare's SolarCapture drivers on the SolarFlare 71xx NICs for a CentOS system. Note this document was user created, and has not yet been reviewed by Solarflare's Technical Support.
 
Requirements:

First acquire the following software from Solarflare support:
Implementation steps:
SolarFlare SDK install:
# unzip <path-to>solar_capture_sdk-<scver>.zip
# rpm –Uvh sfutils-*.rpm
OpenOnload build:
# tar –xf openonload-<version>.tgz
# cd openonload-<version>
# onload_uninstall && ./scripts/onload_install

Note that if any capture processes are already running (i.e. Moloch, Bro, Snort or Suricata) kill them before reloading, and keep them off until the end of this install.
# onload_tool reload
# cd ..
SolarCapture Core installation:
# rpm –Uvh solar_capture-core-<version>.rpm
SolarCapture Python install:
# yum install rpm-build
# rpmbuild --rebuild solar_capture-python-<version>.src.rpm
# rpm –Uvh /root/rpmbuild/RPMS/x86_64/solar_capture-python-<version>.rpm
SolarCapture Pro installation:
# rpm –Uvh  --replacepkgs solar_capture-live-<version>.rpm solar_capture-pro-<version>.rpm
Update the NIC firmware
# sfupdate --write
Note that you should answer 'Y' for each NIC.

Restart capture services
# /wherever/your/capture/script/lives_start.sh
Verify Install:
Check installed packages
# rpm –qa | grep capture
You should now see this:
solar_capture-core-1.3.1.11-0.x86_64
solar_capture-pro-1.3.1.11-0.x86_64
solar_capture-python-1.3.1.11-0.x86_64
solar_capture-live-1.3.1.11-0.x86_64
Check NIC licensing
# sfkey
Which should then look like this:
2-interface adapter: eth4, eth6
Product name:        Solarflare SFN7122F SFP+ Flareon Ultra Server Adapter
Part number:         SFN7122F
Serial number:       712200210071141137100559
MAC addresses:       00-0F-53-xx-xx-xx, 00-0F-53-xx-xx-xx
Installed keys:      Onload
Active keys:         Onload
Blacklisted keys:    0
Invalid keys:        0
Unverifiable keys:   0
Inapplicable keys:   0
One final note, Solarflare Support has not yet validated the above steps so please use at your own risk. 

2 comments:

  1. I appreciate your great work. Thanks for sharing. Keep me more update in future.

    server support bristol
    home computer support bristol
    IT support bristol

    ReplyDelete
  2. Josh,

    You're very welcome. It's also possible that Justin may have a more advanced cookbook shortly that covers running both Bro and Moloch on the same capture server.

    --Scott

    ReplyDelete