Hi all;
I have a problem on my fresh ntop 4.0 installation: Only one packet is 
processed. I am using sFlow plugin (no interface capture: "-i none" option) and 
it reports to be receiving a lot of sFlow packets, ntop receives them but only 
processes one packet. I ran some tests and discovered that, no matter the 
source (internal NIC or flow),  just one packet gets processed and all others 
are kept queued. I have downgraded ntop to 3.3.10, the last stable before 3.4, 
and everything looks to be working fine.
Changelog for 3.4 informs: "a partially rewritten ntop processing engine to 
address reliability and performance." Maybe this change in the processing 
engine have caused a bug in my setup, as the behavior that I see is that almost 
all the packets (besides the first), no matter the source (internal NIC or 
flow), is queued and never gets processed. Maybe that new processing engine is 
getting stuck somehow. I do not think it is a loop because my CPU does not get 
busy, ntop seems to run idle.

Some info from info.html:
Packets
Received             1,895
Processed Immediately 1 (0.1 %)
Queued               1,894 (99.9 %)
Current Queue (none)     0
Maximum Queue (none)               0 (Limit 2048)
Current Queue (sFlow-device.2) 1894
Maximum Queue (sFlow-device.2)            1894 (Limit 2048)



Ntop statistics for the sFlow device:
Traffic Report for 'sFlow-device.2' [switch]
Packets
Dropped (ntop)  0.0%      0
Total Received (ntop)     1,606
Total Packets Processed               1
Unicast 100.0% 1
Broadcast           0.0%      0
Multicast             0.0%      0

Here are the statistics from sFlow plugin:
Flow Statistics
Received Flows
Flow Senders      172.17.205.39 [2,362 pkts]

Number of sFlow Packets Rcvd   2,362
Number of sFlow Packets with Bad Version           0
Number of sFlow Packets Processed        2,362
Number of v2 Flows Rcvd             0
Number of v4 Flows Rcvd             0
Number of v5 Flows Rcvd             2,362

Discarded Flows
Number of Flows with Bad Data                0
Total Number of Flows Processed             0

Flow Analisys
Number of sFlow Samples Rcvd 1,615
Number of sFlow Counter Updates Rcvd                1,734

Thanks.

[cid:[email protected]]
        Rafael Sarres de Almeida
        Analista
        Departamento de Tecnologia da Informação
        Divisão de Administração de Redes
        Tel.:+55 (61) 3414-4148
        E-mail: [email protected]

<<inline: image001.gif>>

_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to