nprobe segfaults on ubuntu 20.04 with Fiberblaze card

[g1l3sp]

Hello ntop team,

I tried to upgrade nprobe and PF_RING to the latest stable versions on a collector host that runs Ubuntu 20.04, and now I'm getting a segfault almost immediately when I run it. The version of nprobe that was working on the host was v.10.4.240117, and the new version that is crashing is v.11.0.251230. The old version of PF_RING was v.8.6.1.231023, and the new one is v.9.2.0.251117. Unfortunately I don't have a way to reinstall the old versions as the packages are no longer in the apt cache on the host, and I don't know of any repository to get older versions from.

In trying to troubleshoot this issue, I've updated our Fiberblaze card (an FB2CG@KU15P-2.0464) to the latest firmware (Savona_01_ku15p_Augsburg_2x100G_2_13_4_0.bit) and driver (fbcapture_Ubuntu_20_04_LTS_gtpd_release_3_9_6_1.tar.gz) in case that was the issue, but it hasn't helped.

The kernel version on the host is 5.4.0-216-generic.

I'm using a more complex nprobe command line in production, but I'm still getting the segfault with this one:

~ # nprobe -i fbcard:0:a00 --dump-path /data/flow/test/ --collector none --dump-format t --dont-nest-dump-dirs --dont-drop-privileges
07/Jan/2026 10:23:26 [plugin.c:176] No plugins found in ./plugins
07/Jan/2026 10:23:26 [plugin.c:184] Loading 22 plugins [.so] from /usr/lib/nprobe/plugins
07/Jan/2026 10:23:26 [nprobe.c:8450] WARNING: The output interfaceId is set to 0: did you forget to use -Q perhaps ?
07/Jan/2026 10:23:26 [nprobe.c:8453] WARNING: The input interfaceId is set to 0: did you forget to use -u perhaps ?
07/Jan/2026 10:23:26 [nprobe.c:8556] Welcome to nProbe v.11.0.251230 for x86_64-pc-linux-gnu with native PF_RING acceleration
07/Jan/2026 10:23:26 [nprobe.c:8578] Enterprise L Edition built on Ubuntu 20.04.6 LTS
07/Jan/2026 10:23:26 [nprobe.c:8586] Current limits [32 ZMQ exporters][128 collector devices]
07/Jan/2026 10:23:26 [nprobe.c:8601] SystemId: [REDACTED]
07/Jan/2026 10:23:26 [nprobe.c:8638] Dumping flow files every 60 sec into directory /u01/flow/tmp
07/Jan/2026 10:23:26 [nprobe.c:8694] Sample rate [packet: 1][flow collection/export: 1/1]
07/Jan/2026 10:23:26 [nprobe.c:8769] nProbe Source ID = 19334038 / UUID = FD4643F6-540F-8933-0706-FE3D6D94D991
07/Jan/2026 10:23:26 [nprobe.c:10804] Using template %IPV4_SRC_ADDR %IPV4_DST_ADDR %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS
07/Jan/2026 10:23:26 [nprobe.c:10806] Using NetFlow Packet Payload Len: 1472
07/Jan/2026 10:23:26 [plugin.c:1203] 0 plugin(s) enabled
07/Jan/2026 10:23:26 [nprobe.c:11376] Each flow is 71 bytes long
07/Jan/2026 10:23:26 [nprobe.c:11377] The # flows per packet has been set to 19
07/Jan/2026 10:23:26 [nprobe.c:11380] IP TOS is accounted
07/Jan/2026 10:23:26 [nprobe.c:11408] Non IPv4/v6 traffic is discarded according to the template
07/Jan/2026 10:23:26 [util.c:571] Loaded database /usr/share/ntopng/httpdocs/geoip/dbip-asn-lite.mmdb [ip_version: 6]
07/Jan/2026 10:23:26 [util.c:605] Loaded database /usr/share/ntopng/httpdocs/geoip/dbip-country-lite.mmdb [ip_version: 6]
07/Jan/2026 10:23:26 [nprobe.c:12452] Flow export type (-T): unidirectional flows
07/Jan/2026 10:23:26 [nprobe.c:12690] Flows will be exported in NetFlow 9 format
07/Jan/2026 10:23:26 [util.c:7528] ERROR: Cannot get hw addr for 0:a00
07/Jan/2026 10:23:26 [pf_ring.c:438] Initializing PF_RING socket on device fbcard:0:a00.. (promisc)
07/Jan/2026 10:23:26 [pf_ring.c:476] Dumping traffic statistics on /proc/net/pf_ring/stats/97348-none.28
07/Jan/2026 10:23:26 [pf_ring.c:556] PF_RING enabled on fbcard:0:a00
07/Jan/2026 10:23:26 [nprobe.c:12937] Capturing packets from PF_RING interface fbcard:0:a00
07/Jan/2026 10:23:26 [export.c:537] Using TLV as serialization format
07/Jan/2026 10:23:26 [nprobe.c:13258] nProbe started successfully
Segmentation fault (core dumped)
~ #

I can provide a core file, and any other details you need.

I don't know if you have an archive of old packages somewhere, but a mitigation would be to be able to install the older versions of the Ubuntu 20.04 packages which were working perfectly.

The working package versions:
nprobe : 10.4.240117-8178
pfring : 8.6.1-8820
pfring-dkms : 8.6.1.8820

If you can give me access to these old packages somehow, that would be very helpful as we are stuck running with only one collector now and any reboots or downtime for that host will result in data loss.

Thank you for your help,

• Peter