Burton Strauss III wrote:
If you read way back in the list, this is a known item.
The various NICs report different things for the counters (some total, some
# since last read). ntop tries to figure out which way the NIC is
reporting, but can be fooled (esp. if the counts are low (and of
I have small issue with Ntop 3.3.11-dev that I wonder if anyone else
sees. Basically at some point the Libpcap Dropped Packet counter starts
to go crazy increamenting way to fast, basically the more you refresh
the page the higher the stats go. I noticed it a few weeks ago when I
was
Gary Gatten wrote:
Try not to run the dev releases unless you must, who knows what
condition they're in at any given time.
Do you think it's actually dropping packets, just the decimal is off
by 3 (or more) places? Or, is this bug just in the way the stats are
collected and displayed and
Mike Tremaine wrote:
Luca Deri wrote:
Can you please use 1 interface only (e.g. eth1) and see if the
problem is here?
Luca
Just an update on the ntop instance with only 1 interface, it has been
up 22 hours now and handled
Too early to tell for sure but it seems like the dual interface
Luca Deri wrote:
Can you please use 1 interface only (e.g. eth1) and see if the problem
is here?
Luca
Just an update on the ntop instance with only 1 interface, it has been
up 22 hours now and handled
Peak120.2 Mbit/s13653.9 Pkt/s
Dropped (libpcap)1.2%3,888,799
Dropped
Luca Deri wrote:
Hi all,
In fact, what happens if you disable sessions at all? Do you see any
problem?
Luca
As you suggested yesterday I disbaled sessions [-z] it still died within
an hour.
Resolved to./usr/local/bin/ntop -d -L -u ntop -w 3000 -W 0 -P
/usr/local/var/ntop -i
Will do.
Sent from my iPod
On Jul 24, 2009, at 8:17 AM, Luca Deri d...@ntop.org wrote:
Can you please use 1 interface only (e.g. eth1) and see if the
problem is here?
Luca
On Jul 24, 2009, at 4:57 PM, Mike Tremaine wrote:
Luca Deri wrote:
Hi all,
In fact, what happens if you disable
Gary Gatten wrote:
Running 3.3.10 / 3.3.11 on RHEL 2.6.18-128.1.16.el5 #1 SMP
I have –K and –t 5, no errors in log. Gdb captures the faults so I
guess I can run in gdb all the time – or not! Any ideas why nothing is
spewed to the log and how it can be fixed?
TIA!
Gary
I get these with
Anyone able to build PF_Ring with the newest Centos 5 kernel? It's
possible I'm making a mistake but the rpm build dies on the rt73usb.c
driver which seems pretty unrelated to the PF_RING module patch.
drivers/net/wireless/rt2x00/rt73usb.c:1493: warning: unused variable
'macbuf'
+ exit 1
put in on the Ntop lists.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
On Fri, 2005-02-25 at 13:36, Adam M. Towarnyckyj wrote:
Burton,
I dont appreciate the short attitude you gave me on the
response to my question. Im in need of assistance and you feel the
need to give me some sort of attitude.
.
.
.
I work for an ISP with about 5000
See the link at the bottom of this page? Follow it and unsubscribe
yourself.
On Wed, 2004-09-08 at 04:15, ing lolo wrote:
Hello ntop.org
Please I would like to be removed from this mailing list.
I don't read the mailings so ...
Thank you and have a nice day
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
--
Mike Tremaine
) All about NTOP and memory (and why 256MB is not going to get you very
far.)
5) How to submit a good call for help to the list. (What info to
include).
Maybe I'm just smoking crack again :/...
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
.
(Ntop version is 3.0 built from CVS)
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
CHART_FORMAT
?col=3\ alt=\Current 30day throughput chart\BR\n);
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
it seem like they are the producers of
these solutions.
Check out there webmin page which is better worded and contains a link
to webmin
https://www.raqport.com/store/merchant.mvc?Screen=PRODStore_Code=RProduct_Code=WebminCategory_Code=RaQ3soft
--
Mike Tremaine
[EMAIL PROTECTED]
http
on the switch). Plus it is very cheap. 4 port hubs are
generally less then $20.
That should at least allow you (your boss) to get a better idea of whats
going on and evaluate if it is worth getting a better switch.
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
just fine, ntop started up no
problems, its currently running well. My test box is hardly under any
load so I'll give 2.2.99 a try under production next week.
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL
file is from 'www.ntopsupport.com'
Jan 24 10:35:14 xray ntop[3103]: [ID 702911 daemon.error] CHKVER: as
of date is '2004-01-20T11:49'
Jan 24 10:35:14 xray ntop[3103]: [ID 702911 daemon.error] CHKVER: This
version of ntop is the current DEVELOPMENT version - Expect the
unexpected!
--
Mike
the source.
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
was much more stable then 2.2c under Solaris 8, but
expect to do some hacking to get it installed and running. (Please read
the back-traffic on this list regarding Solaris before posting any
questions)
Mike Tremaine
[EMAIL PROTECTED]
___
Ntop mailing
search at
http://www.gmane.org/ and find more info on Burton's site
http://www.ntopsupport.com )
Linux is usually the easiest platform to get Ntop running on.
Mike Tremaine
[EMAIL PROTECTED]
On Mon, 2003-11-24 at 11:25, Jennifer Fountain wrote:
Hi Guys,
I am new to using NTOP and trying
);
With these changes I see nothing stopping generic ./configure; make;
make install under Solaris 8 and 9.
Mike Tremaine
[EMAIL PROTECTED]
On Sun, 2003-11-23 at 07:50, Mike Tremaine wrote:
My bad, that was the case (SMCgd but no SMCliconv).
Just to carry this excerise out I removed the gd package
% to about 70/80% for ntop
periodically.
If the web page seems to refresh during this time the web page loads very
slow.
Any ideas/pointers?
Thanks for your assistance.
Steve Rudolph, CCSA, CCSE
Network Security Engineer
Internet Operations Center
--
Mike Tremaine
[EMAIL PROTECTED]
http
not an expert on this, I only figured out that if I passed the -liconv
flag to NTOP compile it worked for me.
The GNU site for this LIB is http://www.gnu.org/software/libiconv/
Thanks,
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
person who built by hand
has this problem also soI'll poke around at it again when I have
sometime but at least we know that 2.2.96 works with a few small tweaks.
-Burton
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop
. SO I'd
suggest adding in the -u username and then double check your
/usr/local/share/ntop dir to make sure its owned by that user.
Any suggestions?
Steve Rudolph, CCSA, CCSE
Network Security Engineer
Internet Operations Center
Mike Tremaine
[EMAIL PROTECTED
it running fine under Solaris
9 (sparc). If I have a chance later I'll try Solaris 8.
Hope this helps anyone out there with Solaris Sparc. At least it shows
that it does still run (and looks damn good if I may say.)
Mike Tremaine
[EMAIL PROTECTED]
On Wed, 2003-11-12 at 09:58, Burton M. Strauss III
works fine. (At least as
far as I can tell it works fine.)
Change that and then just make make install again and give it a try.
Mike Tremaine
[EMAIL PROTECTED]
On Mon, 2003-10-27 at 07:43, Leonardo Valcamonici wrote:
Sorry,
can anyone help out there ?
Thanks,
Leonardo
Leonardo
Don't bother with 2.2 get 2.2.96 from CVS.
Mike
On Wed, 2003-11-12 at 11:58, Michael Krause wrote:
Hello,
I have run configure successfully for my Solaris 9 Sparc system
however when I run a make it dies with the following
In file included from address.c:21:
ntop.h:399:17: rrd.h: No
revision 2.246
diff -r2.246 webInterface.c
4785c4785
if((*sock = 0) || (errno != 0) ) {
---
if((*sock 0) || (errno != 0) ) {
Good Luck
Mike Tremaine
[EMAIL PROTECTED]
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman
my configureextra files.. ;)
-Burton
Mike Tremaine
[EMAIL PROTECTED]
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
I thought that patch got in already in... (I'll take a crack at installing
the CVS version on Solaris 8 and 9 next week when things slow down)
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Burton M. Strauss III [EMAIL PROTECTED]
To: [EMAIL
in the last 3 months might
apply.)
Mike Tremaine
[EMAIL PROTECTED]
- Original Message -
From: Paul van der Zel [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, September 25, 2003 3:47 AM
Subject: Re: [Ntop] ntop 2.2 - netflow and 100% CPU lock-up
Mike Tremaine wrote:
This is most likely
://lists.ntop.org/pipermail/ntop/2003-June/005815.html
I did this at one point for 2.2c Ntop install.
config.h
/* Define to 1 if you have the zlib.h header file. */
/* #define HAVE_ZLIB_H 1 */
and
/* ZLIB is available */
/* #define MAKE_WITH_ZLIB 1 */
Good Luck..
Mike Tremaine
On Mon, 2003-09
and was happy someone else saw they same (and more) problems I kept running
into. Please apply as many as you can Burton it would make the Solaris (sparc
since I know you never saw any of this on x86) users happy.
--
Mike Tremaine
[EMAIL PROTECTED]
___
Ntop
to be tracked.
Mike Tremaine
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
0x7f81c104 in processPacket (_deviceId=0x0, h=0x7e77fcf0, p=0x7e77dcc8
) at pbuf.c:2494
#2 0x7f81a404 in dequeuePacket (notUsed=0x7f8467d8) at pbuf.c:1719
PS - I know this should go to dev list but my mails never get through to
that list :(
Mike Tremaine
[EMAIL PROTECTED]
http
on but at least there is a solution and it is not a show
stopper.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
for them as
well.
Again the pbuf.c edit is
Line 961 pbuf.c
u_char *tcp_data =3D (u_char *)((int)tcp + tp.th_off * 4);
(The report.c and reportUtils.c edits can be seen at
http://lists.ntop.org/pipermail/ntop/2003-May/005373.html )
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
Here are the patches I used all in one place (and hopefully without the
silly 3D 's that seem to get inserted
Index: pbuf.c
===
RCS file: /export/home/ntop/ntop/pbuf.c,v
retrieving revision 2.131
diff -r2.131 pbuf.c
961c961
with http://search.gmane.org/ ...
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Jean-Bapriste Vicaire [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, July 08, 2003 2:03 AM
Subject: Re: [Ntop] Help installing NTOP on Solaris 8
I had
On Thu, 3 Jul 2003, ES wrote:
I've had the same problem for weeks across several platforms. I sent a
note to the development list but seems my mails never get through..:(
Glad to see I'm not alone.
Mike Tremaine
I get the following error when trying to build ntop on a RH 8.0 system with 256
output bugs.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Burton M. Strauss III [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Saturday, June 28, 2003 6:31 AM
Subject: RE: [Ntop] re: Problems with libcrypto and libssl on RedHat 9.0
Attached
it... volunteers??
-Burton
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
that the whole bit of logic, using a global variable in http.c
for the gzip fd seems problematic.
-Burton
-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mike
Tremaine
Sent: Thursday, June 19, 2003 11:41 AM
To: [EMAIL PROTECTED]
Subject: Re: [Ntop
to post from this problem but I need more
time.
Also check your /tmp directory and see if you have a whole bunch of
gzip.PID.ntop files. I think that these get left behind by the looping but
I'm not sure yet.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From
back to hacking at it. I will say the 2.2.2
Install is running like a champ on Solaris 9. No more GDChart errors.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Igal Baevsky [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 17, 2003 4:38 AM
I never had any trouble with Ntop+Snort under Linux, never tried it on
Solaris yet.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: John Hally [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Tuesday, June 17, 2003 12:58 PM
Subject: [Ntop] ntop running
On Monday 16 June 2003 04:01 pm, Mike Tremaine wrote:
So following my old post from 2.2_patches
http://lists.ntop.org/pipermail/ntop/2003-May/005373.html
I was able to patch report.c and reportUtils.c and now have a full working (as
far as I can tell) Ntop 2.2.2 on Solaris 9 (I'm going to now
can plug in if it's a hub the
everything is fine, if it is a switch then you need to mirror.
I'm sure others could add better information..
Mike Tremaine
[EMAIL PROTECTED]
___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman
to other gateways, in which case you as long as the probe was
behind the gateway the traffic would not be encrypted? )
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Dave Lugo [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, June 13, 2003 9:12 AM
environment.
--- Mike Tremaine [EMAIL PROTECTED] wrote:
Delete this line to the top before sending...
n t o p v e r s i o n '2.2.2' p r o b l e m r e p o r t
From: _Mike Tremaine_
EMail: [EMAIL PROTECTED]
Date: 2003-06-12 15:49:46 GMT
Problem Report Id
) at pbuf.c:2514
#2 0x7f81a0a8 in dequeuePacket (notUsed=0x7f846580) at pbuf.c:1645
If more information is needed I could attach the info form ntop 2.2 problem
report?
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
=0x7ef79f58
\b) at pbuf.c:2514
#2 0x7f8249ac in dequeuePacket (notUsed=0x7f86f120) at pbuf.c:1645
I'll poke at it again tomorrow.
--
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
___
Ntop mailing list
[EMAIL PROTECTED]
http
heavy load) But I'm not really sure so I thought I'd
pass it along
Mike Tremaine
On Wednesday 11 June 2003 12:29 pm, Burton Strauss wrote:
Nope... the other 2.2 problem (I forget the PR_) is the random failures
I've been working on with Dom / that's the 283 patch, not the 282 I sent
you
to the Ntop
interface (port 3000 or 3001 by default), Iptables under Linux are good for
controlling this.
Mike Tremaine
On Wednesday 11 June 2003 06:41 pm, Ramiro Pulgar wrote:
Hi
I want to know if is advisable install ntop in the firewall of my network.
Is there any security problem?. I want
Nothing to do but try itCompiling 283 up now.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Burton M. Strauss III [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Wednesday, June 11, 2003 3:49 PM
Subject: RE: [Ntop] Re: Problem report confirms
is freeing data fields just prior to their being
updated. This is a threading problem due to lack of mutex protection and
is unrelated to NPTL.
Status: Proposed patch,
NOTE: Call for volunteers to test this patch has resulted in zero response.
--
Mike Tremaine
[EMAIL PROTECTED
that but
Solaris doesn't) remade with autoconf and its seems fine.
I'm compiling now just to see if any of the other issues have cleared up.
Mike Tremaine
___
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
very large
networks)
As I mentioned when I was debugging the Solaris installs, I'm not a C
programmer but I'm willing to hack away with GDB and doing any test compiles
vs Solaris you need done.
Mike Tremaine
[EMAIL PROTECTED]
http://www.stellarcore.net
- Original Message -
From: Luca
62 matches
Mail list logo
