Rafael
can you gdb ntop to see why packets are not dequed. Can you also try to add -t 
6 and see if there's something interesting in logs?

Thanks Luca

On Aug 20, 2010, at 10:27 PM, Rafael Sarres de Almeida wrote:

> Hi Luca;
> Same problem.
> Dropped (libpcap)       583.9%  12,466
> Dropped (ntop)  4.0%    86
> Total Received (ntop)   2,135
> Total Packets Processed 1
> Unicast 100.0%  1
> Broadcast       0.0%    0
> Multicast       0.0%    0
> 
> 
> Here is the info.html, just in case:
> ntop Configuration
> 
> Basic Information
> 
> ntop Version.....x86_64-redhat-linux-gnu (64 bit)
> Running as user.....root
> Configured on.....Aug 20 2010 17:10:59
> Built on.....Aug 20 2010 17:15:04
> OS.....x86_64-redhat-linux-gnu
> libpcap Version.....??
> RRD Version.....1.2023
> GeoIP Version.....GEO-533LITE 20090701 Build 1 Copyright (c) 2007 MaxMind LLC 
> All Rights Reserved
> GeoIP AS Version.....GEO-117 20090321 Build 1 Copyright (c) 2007 MaxMind LLC 
> All Rights Reserved
> Running from...../usr/local/bin
> Libraries in...../usr/local/lib
> Library path.....(nil)
> Process Id.....28282
> Run State.....Run
> 
> 
> Command Line
> 
> Started as........./usr/local/bin/ntop -P /var/ntop -u root -i eth0 -C 1 -t 6 
> -M
> Resolved to........./usr/local/bin/ntop -P /var/ntop -u root -i eth0 -C 1 -t 
> 6 -M
> 
> 
> Preferences Used
> 
> -a | --access-log-file.....(default)   (nil)
> -b | --disable-decoders.....(default)   No
> -c | --sticky-hosts.....(default)   No
> -d | --daemon.....No
> -e | --max-table-rows.....(default)   128
> -g | --track-local-hosts.....(default)   Track all hosts
> -i | --interface   (effective).....eth0
> -j | --create-other-packets.....(default)   Disabled
> -l | --pcap-log.....(default)   (nil)
> -m | --local-subnets   (effective).....(default)   (nil)
> -n | --numeric-ip-addresses.....(default)   No
> -o | --no-mac.....(default)   Trust MAC Addresses
> -p | --protocols.....(default)   internal list
> -q | --create-suspicious-packets.....(default)   Disabled
> -r | --refresh-time.....(default)   120
> -s | --no-promiscuous.....(default)   No
> -t | --trace-level.....6
> -u | --user.....root (uid=0, gid=0)
> -w | --http-server.....(default)   Active, all interfaces, port 3000
> -z | --disable-sessions.....(default)   No
> -B | --filter-expression.....(default)   none
> -D | --domain.....bc
> -F | --flow-spec.....(default)   none
> -K | --enable-debug.....(default)   No
> -L | --use-syslog.....daemon
> -M | --no-interface-merge   (effective).....(parameter -M set, Interfaces 
> separate) No
> -O | --pcap-file-path.....(default)   /usr/local/var/ntop
> -P | --db-file-path...../var/ntop
> -Q | --spool-file-path...../var/ntop
> -U | --mapper.....(default)   http://geotool.servehttp.com/
> -X.....32768
> --disable-instantsessionpurge.....(default)   No
> --disable-mutexextrainfo.....Yes
> --disable-stopcap.....Yes
> --fc-only.....(default)   No
> --instance.....(default)   (nil)
> --no-fc.....(default)   No
> --no-invalid-lun.....(default)   No
> --p3p-cp.....(default)   none
> --p3p-uri.....(default)   none
> --skip-version-check.....Yes
> --w3c.....Yes
> 
> 
> Run time/Internal
> 
> Web server URL.....http://any:3000
> GDBM version.....GDBM version 1.8.3. 10/15/2002 (built Dec  9 2009 14:09:49)
> Embedded Python.....Not present
> zlib version.....1.2.3
> Protocol Decoders.....Enabled
> Fragment Handling.....Enabled
> Tracking only local hosts.....No
> # IP Protocols Being Monitored.....18
> # Protocol slots.....18316
> # IP Ports Being Monitored.....171
> # IP Ports slots.....342
> WebServer Request Queue.....10
> DNS Resolution Request Queue.....[current: 0][max: 2][drops: 0]
> DNS Resolved Addresses.....[resolved: 3][failed: 1]
> Devices (Network Interfaces).....2
> Domain name (short).....bc
> Total Hash Collisions (Vendor/Special) (lookup).....0
> Database (MySQL) Support Enabled.....No
> 
> 
> Networks
> 
> eth0 Local Network.....172.17.204.0/22
> sFlow-device.2 Local Network.....172.17.204.0/22
> Known Networks.....172.17.204.0/22
> 
> 
> 
> ntop Web Server
> 
> Item..................http://...................https://# Handled 
> Requests.....362.....-
> # Successful requests (200).....361.....-
> # Bad (We don't want to talk with you) requests.....0.....-
> # Invalid requests - 403 FORBIDDEN.....0.....-
> # Invalid requests - 404 NOT FOUND.....0.....-
> # SSI Requests.....0
> # Bad SSI Requests.....0
> # Handled SSI Requests.....0
> # Handled SIGPIPE Errors.....0
> 
> 
> Memory Usage
> 
> IPX/SAP Hash Size (bytes).....2989
> 
> 
> Host Memory Cache
> 
> Limit.....#define MAX_HOSTS_CACHE_LEN 512
> Current Size.....0
> Maximum Size.....0
> # Entries Reused.....0
> 
> 
> MAC/IPX Hash tables
> 
> IPX/SAP Hash Size (entries).....179
> IPX/SAP Hash Collisions (load).....0
> IPX/SAP Hash Collisions (use).....0
> 
> 
> Packets
> 
> Received.....2,125
> Processed Immediately.....2 (0.1 %)
> Queued.....2,049 (96.4 %)
> Lost in ntop queue.....74
> Current Queue (eth0).....2048
> Maximum Queue (eth0).....2048 (Limit 2048)
> Current Queue (sFlow-device.2).....1
> Maximum Queue (sFlow-device.2).....1 (Limit 2048)
> 
> 
> Host/Session counts - global
> 
> Purged Hosts.....0
> Terminated Sessions.....0
> 
> 
> Host/Session counts - Device 0 (eth0)
> 
> Hash Bucket Size.....2.4 KBytes
> Actual Host Hash Size.....32768
> Stored hosts.....4
> Host Bucket List Length.....[min 1][max 1][avg 1.0]
> Max host lookup.....0
> Session Bucket Size.....432
> Session Actual Hash Size.....65535
> Sessions.....1
> Max Num. Sessions.....1
> Session Bucket List Length.....[min 1][max 1][avg 1.0]
> 
> 
> Host/Session counts - Device 1 (sFlow-device.2)
> 
> Hash Bucket Size.....2.4 KBytes
> Actual Host Hash Size.....32768
> Stored hosts.....3
> Host Bucket List Length.....[min 1][max 1][avg 1.0]
> Max host lookup.....0
> Session Bucket Size.....432
> Session Actual Hash Size.....65535
> 
> 
> ----- Address Resolution -----
> 
> 
> 
> DNS Sniffing (other hosts requests)
> 
> DNS Packets sniffed.....0
>  less 'requests'.....0
>  less 'failed'.....0
>  less 'reverse dns' (in-addr.arpa).....0
> DNS Packets processed.....0
> Stored in cache (includes aliases).....0
> 
> 
> Vendor Lookup Table
> 
> Input lines read.....0
> Records added total.....0
> .....includes special records.....0
> getVendorInfo() calls.....0
> getSpecialVendorInfo() calls.....2
> Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
> Found 24bit (xx:xx:xx) match.....2
> Found multicast bit set.....0
> Found LAA (Locally assigned address) bit set.....0
> 
> 
> Thread counts
> 
> Active.....10
> Children (active).....37
> 
> 
> Directory (search) order
> 
> Data Files......
>                          /usr/local/share/ntop
>                          /usr/local/share/ntop
> Config Files......
>                            /usr/local/etc/ntop
>                            /usr/local/etc/ntop
>                            /etc
> Plugins....../plugins
>                       /usr/local/lib/ntop/plugins
>                       /usr/local/lib/ntop/plugins
> 
> 
> Compile Time: ./configure
> 
> ./configure parameters.....
> Built on (Host).....x86_64-redhat-linux-gnu
> Built for(Target).....x86_64-redhat-linux-gnu
> preprocessor (CPPFLAGS).....gcc -E -DLINUX -I/usr/local/include 
> -I/opt/local/include
> compiler (CFLAGS).....gcc -g -O2 -I/usr/local/include -I/opt/local/include 
> -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations 
> -Wnested-externs -fPIC -DPIC -DHAVE_CONFIG_H
> include path.....-I/usr/local/include
> system libraries.....-L/usr/local/lib -L/opt/local/lib -lpthread -lm -ldl 
> -lcrypt -lc -lgdbm -lz -lGeoIP
> install path...../usr/local
> GNU C (gcc) version.....4.1.2 20080704 (Red Hat 4.1.2-48) (4.1.2)
> uname data.....sysname(Linux) release(2.6.18-194.3.1.el5xen) version(#1 SMP 
> Sun May 2 04:26:43 EDT 2010) machine(x86_64)
> 
> 
> Internationalization (i18n)
> 
> 
> 
> Compile Time: Debug settings in globals-defines.h
> 
> DEBUG.....no
> ADDRESS_DEBUG.....no
> CHKVER_DEBUG.....no
> CMPFCTN_DEBUG.....no
> DNS_DEBUG.....no
> DNS_SNIFF_DEBUG.....no
> FC_DEBUG.....no
> FINGERPRINT_DEBUG.....no
> FRAGMENT_DEBUG.....no
> FTP_DEBUG.....no
> GDBM_DEBUG.....no
> HASH_DEBUG.....no
> HOST_FREE_DEBUG.....no
> HTTP_DEBUG.....no
> IDLE_PURGE_DEBUG.....no
> INITWEB_DEBUG.....no
> LATENCY_DEBUG.....no
> MEMORY_DEBUG.....no
> MUTEX_DEBUG.....no
> NETFLOW_DEBUG.....no
> P2P_DEBUG.....no
> PACKET_DEBUG.....no
> PARAM_DEBUG.....no
> PLUGIN_DEBUG.....no
> PROBLEMREPORTID_DEBUG.....no
> SESSION_TRACE_DEBUG.....no
> STORAGE_DEBUG.....no
> UNKNOWN_PACKET_DEBUG.....no
> URL_DEBUG.....no
> VENDOR_DEBUG.....no
> 
> 
> Compile Time: config.h
> 
> CFG_ETHER_HEADER_HAS_EA.....no
> HAVE_ALARM.....yes
> HAVE_ARPA_INET_H.....yes
> HAVE_ARPA_NAMESER_H.....yes
> HAVE_BACKTRACE.....yes
> HAVE_CRYPTGETFORMAT.....no
> HAVE_CRYPT_H.....yes
> HAVE_DIRENT_H.....yes
> HAVE_DLADDR.....yes
> HAVE_DLFCN_H.....yes
> HAVE_DL_H.....no
> HAVE_DOPRNT.....no
> HAVE_ENDPWENT.....yes
> HAVE_ERRNO_H.....yes
> HAVE_FACILITYNAMES.....yes
> HAVE_FCNTL_H.....yes
> HAVE_FINITE.....yes
> HAVE_FLOAT_H.....yes
> HAVE_FORK.....yes
> HAVE_GDBM_H.....yes
> HAVE_GD_H.....no
> HAVE_GDOME_H.....no
> HAVE_GETHOSTBYNAME.....yes
> HAVE_GETHOSTNAME.....yes
> HAVE_GETOPT_H.....yes
> HAVE_GETPASS.....yes
> HAVE_GETTIMEOFDAY.....yes
> HAVE_GLIBCONFIG_H.....no
> HAVE_GLIB_H.....no
> HAVE_ICMP6_H.....no
> HAVE_IEEEFP_H.....no
> HAVE_IF_H.....no
> HAVE_IFLIST_SYSCTL.....no
> HAVE_IN6_ADDR.....yes
> HAVE_INT16_T.....yes
> HAVE_INT32_T.....yes
> HAVE_INT64_T.....yes
> HAVE_INT8_T.....yes
> HAVE_INTTYPES_H.....yes
> HAVE_IP6_H.....no
> HAVE_ISFINITE.....no
> HAVE_ISINF.....yes
> HAVE_LANGINFO_H.....no
> HAVE_LIBC.....yes
> HAVE_LIBC_R.....no
> HAVE_LIBCRYPT.....yes
> HAVE_LIBCRYPTO.....no
> HAVE_LIBDL.....yes
> HAVE_LIBGD.....no
> HAVE_LIBGDBM.....yes
> HAVE_LIBGDOME.....no
> HAVE_LIBGLIB.....no
> HAVE_LIBM.....yes
> HAVE_LIBNSL.....no
> HAVE_LIBPCAP.....no
> HAVE_LIBPOSIX4.....no
> HAVE_LIBPTHREAD.....yes
> HAVE_LIBPTHREADS.....no
> HAVE_LIBRESOLV.....no
> HAVE_LIBSOCKET.....no
> HAVE_LIBSSL.....no
> HAVE_LIBXML2.....no
> HAVE_LIBXNET.....no
> HAVE_LIBZ.....yes
> HAVE_LIMITS_H.....yes
> HAVE_LINUX_IF_PPPOX_H.....yes
> HAVE_LOCALE_H.....no
> HAVE_LOCALTIME_R.....yes
> HAVE_LONG_DOUBLE.....yes
> HAVE_MALLINFO_MALLOC_H.....no
> HAVE_MALLOC_H.....no
> HAVE_MATH_H.....yes
> HAVE_MEMCHR.....yes
> HAVE_MEMORY_H.....yes
> HAVE_MEMSET.....yes
> HAVE_NDIR_H.....no
> HAVE_NET_BPF_H.....no
> HAVE_NET_ETHERNET_H.....yes
> HAVE_NET_IF_DL_H.....no
> HAVE_NET_IF_H.....yes
> HAVE_NETINET_ICMP6_H.....yes
> HAVE_NETINET_IF_ETHER_H.....yes
> HAVE_NETINET_IN_H.....yes
> HAVE_NETINET_IN_SYSTM_H.....yes
> HAVE_NETINET_IP6_H.....yes
> HAVE_NETINET_IP_H.....yes
> HAVE_NETINET_TCP_H.....yes
> HAVE_NETINET_UDP_H.....yes
> HAVE_NET_PPP_DEFS_H.....yes
> HAVE_NET_ROUTE_H.....yes
> HAVE_NET_SNMP_NET_SNMP_CONFIG_H.....no
> HAVE_OPENSSL.....no
> HAVE_OPENSSL_CRYPTO_H.....no
> HAVE_OPENSSL_ERR_H.....no
> HAVE_OPENSSL_PEM_H.....no
> HAVE_OPENSSL_RSA_H.....no
> HAVE_OPENSSL_SSL_H.....no
> HAVE_OPENSSL_X509_H.....no
> HAVE_PTHREAD_ATFORK.....yes
> HAVE_PTHREAD_H.....yes
> HAVE_PUTENV.....yes
> HAVE_PWD_H.....yes
> HAVE_SCHED_H.....no
> HAVE_SCTP.....no
> HAVE_SECURITY_PAM_APPL_H.....no
> HAVE_SELECT.....yes
> HAVE_SETJMP_H.....yes
> HAVE_SHADOW_H.....yes
> HAVE_SIGNAL_H.....yes
> HAVE_SNMP.....no
> HAVE_SNPRINTF.....yes
> HAVE_SOCKET.....yes
> HAVE_SQRT.....no
> HAVE_STAT_EMPTY_STRING_BUG.....no
> HAVE_STDARG_H.....yes
> HAVE_STDDEF_H.....yes
> HAVE_STDINT_H.....yes
> HAVE_STDIO_H.....yes
> HAVE_STDLIB_H.....yes
> HAVE_STRCASECMP.....yes
> HAVE_STRCHR.....yes
> HAVE_STRCSPN.....yes
> HAVE_STRDUP.....yes
> HAVE_STRERROR.....yes
> HAVE_STRFTIME.....yes
> HAVE_STRING_H.....yes
> HAVE_STRINGS_H.....yes
> HAVE_STRNCASECMP.....yes
> HAVE_STRPBRK.....yes
> HAVE_STRRCHR.....yes
> HAVE_STRSIGNAL.....yes
> HAVE_STRSPN.....yes
> HAVE_STRSTR.....yes
> HAVE_STRTOK_R.....yes
> HAVE_STRTOUL.....yes
> HAVE_STRUCT_TM_TM_ZONE.....yes
> HAVE_SYSCTL.....yes
> HAVE_SYS_DIR_H.....no
> HAVE_SYS_IOCTL_H.....yes
> HAVE_SYS_LDR_H.....no
> HAVE_SYSLOG_H.....yes
> HAVE_SYS_NDIR_H.....no
> HAVE_SYS_PARAM_H.....yes
> HAVE_SYS_RESOURCE_H.....no
> HAVE_SYS_SCHED_H.....no
> HAVE_SYS_SELECT_H.....yes
> HAVE_SYS_SOCKET_H.....yes
> HAVE_SYS_SOCKIO_H.....no
> HAVE_SYS_STAT_H.....yes
> HAVE_SYS_SYSCTL_H.....yes
> HAVE_SYS_SYSLOG_H.....yes
> HAVE_SYS_TIME_H.....yes
> HAVE_SYS_TYPES_H.....yes
> HAVE_SYS_UN_H.....yes
> HAVE_SYS_UTSNAME_H.....yes
> HAVE_SYS_WAIT_H.....yes
> HAVE_TCPD_H.....no
> HAVE_TM_ZONE.....yes
> HAVE_TZNAME.....no
> HAVE_U_INT16_T.....yes
> HAVE_U_INT32_T.....yes
> HAVE_U_INT64_T.....yes
> HAVE_u_int64_T.....no
> HAVE_U_INT8_T.....yes
> HAVE_UNAME.....yes
> HAVE_UNISTD_H.....yes
> HAVE_VFORK.....yes
> HAVE_VFORK_H.....no
> HAVE_VPRINTF.....no
> HAVE_WORKING_FORK.....no
> HAVE_WORKING_VFORK.....yes
> HAVE_ZLIB_H.....yes
> INET6.....yes
> LSTAT_FOLLOWS_SLASHED_SYMLINK.....no
> MAKE_STATIC_PLUGIN.....no
> MAKE_WITH_JUMBO_FRAMES.....no
> MAKE_WITH_SNMP.....no
> MAKE_WITH_ZLIB.....yes
> SETVBUF_REVERSED.....no
> STDC_HEADERS.....yes
> TIME_WITH_SYS_TIME.....yes
> TM_IN_SYS_TIME.....no
> CFG_CONFIGFILE_DIR - config file directory...../usr/local/etc/ntop
> CFG_DATAFILE_DIR - data file directory...../usr/local/share/ntop
> CFG_DBFILE_DIR - database file directory...../usr/local/var/ntop
> CFG_PLUGIN_DIR - plugin file directory...../usr/local/lib/ntop/plugins
> CFG_RUN_DIR - run file directory...../usr/local/var/ntop
> CFG_xxxxxx_ENDIAN (Hardware Endian).....little
> 
> 
> Compile Time: globals-defines.h
> 
> CONST_ABTNTOP_HTML.....aboutNtop.html
> CONST_ACTIVE_TCP_SESSIONS_HTML.....NetNetstat.html
> CONST_ADD_URLS_HTML.....addURLs.html
> CONST_ADD_USERS_HTML.....addUsers.html
> CONST_ADMINPW_QUESTION.....ntop startup - waiting for user response!
>          Please enter the password for the admin user:
> CONST_APACHELOG_TIMESPEC.....%d/%b/%Y:%H:%M:%S
> CONST_ASLIST_FILE.....AS-list.txt
> CONST_AS_LIST_HTML.....undefined
> CONST_BAR_ALLPROTO_DIST.....allProtoDistribution
> CONST_BAR_FC_PROTO_DIST.....fcProtoDistribution
> CONST_BAR_HOST_DISTANCE.....hostsDistanceChart
> CONST_BAR_LUNSTATS_DIST.....ScsiBytesLunDistribution
> CONST_BAR_VSAN_TRAF_DIST_RCVD.....vsanDomainTrafficDistribRcvd
> CONST_BAR_VSAN_TRAF_DIST_SENT.....vsanDomainTrafficDistribSent
> CONST_BROADCAST_ENTRY.....2
> CONST_CGI_HEADER.....ntop-bin/
> CONST_CHANGE_FILTER_HTML.....changeFilter.html
> CONST_CLUSTER_STATS_HTML.....undefined
> CONST_COLOR_1.....#CCCCFF
> CONST_COLOR_2.....#FFCCCC
> CONST_CONFIG_NTOP_HTML.....configNtop.html
> CONST_CONST_PCTG_LOW_COLOR.....BGCOLOR=#C6EEF7
> CONST_CONST_PCTG_MID_COLOR.....BGCOLOR=#C6EFC8
> CONST_CREDITS_HTML.....Credits.html
> CONST_CRYPT_SALT.....99
> CONST_DAEMONNAME.....ntop
> CONST_DELETE_URL.....deleteURL
> CONST_DELETE_USER.....deleteUser
> CONST_DNSCACHE_LIFETIME.....undefined
> CONST_DNSCACHE_PERMITTED_AGE.....undefined
> CONST_DO_ADD_URL.....doAddURL
> CONST_DO_ADD_USER.....doAddUser
> CONST_DO_CHANGE_FILTER.....doChangeFilter
> CONST_DOMAIN_STATS_HTML.....domainStats.html
> CONST_DOUBLE_TWO_MSL_TIMEOUT.....240
> CONST_DUMP_DATA_HTML.....dumpData.html
> CONST_DUMP_HOSTS_INDEXES_HTML.....dumpDataIndexes.html
> CONST_DUMP_NTOP_FLOWS_HTML.....dumpFlows.html
> CONST_DUMP_NTOP_HOSTS_MATRIX_HTML.....dumpHostsMatrix.html
> CONST_DUMP_NTOP_XML.....dump.xml
> CONST_DUMP_TRAFFIC_DATA_HTML.....dumpTrafficData.html
> CONST_EDIT_PREFS.....editPrefs.html
> CONST_ETTERCAP_FINGERPRINT.....fingerprint.php
> CONST_ETTERCAP_HOMEPAGE.....http://ettercap.sourceforge.net/
> CONST_FAVICON_ICO.....favicon.ico
> CONST_FC_ACTIVITY_HTML.....fcActivity.html
> CONST_FC_DATA_HTML.....fcData.html
> CONST_FC_HOSTS_INFO_HTML.....fcHostsInfo.html
> CONST_FC_SESSIONS_HTML.....FcSessions.html
> CONST_FC_THPT_HTML.....fcThpt.html
> CONST_FC_TRAFFIC_HTML.....fcShowStats.html
> CONST_FILTER_INFO_HTML.....filterInfo.html
> CONST_FINGERPRINT_LOOP_INTERVAL.....150
> CONST_FTPDATA.....20
> CONST_GRE_PROTOCOL_TYPE.....47
> CONST_HANDLEADDRESSLISTS_CLUSTERS.....undefined
> CONST_HANDLEADDRESSLISTS_MAIN.....0
> CONST_HANDLEADDRESSLISTS_NETFLOW.....2
> CONST_HANDLEADDRESSLISTS_RRD.....yes
> CONST_HASH_INITIAL_SIZE.....32768
> CONST_HOME_HTML.....home.html
> CONST_HOME_UNDERSCORE_HTML.....home_.html
> CONST_HOST_HTML.....host.html
> CONST_HOSTS_INFO_HTML.....hostsInfo.html
> CONST_HOSTS_LOCAL_CHARACT_HTML.....localHostsCharacterization.html
> CONST_HOSTS_LOCAL_FINGERPRINT_HTML.....localHostsFingerprint.html
> CONST_HOST_SORT_NOTE_HTML.....hostSortNote.html
> CONST_HOSTS_REMOTE_FINGERPRINT_HTML.....remoteHostsFingerprint.html
> CONST_HTTP_ACCEPT_ALL.....*/*
> CONST_IMG_ARROW_DOWN.....Descending order, click to reverse
> CONST_IMG_ARROW_UP.....Ascending order, click to reverse
> CONST_IMG_BRIDGE.....Bridge
> CONST_IMG_DHCP_CLIENT.....DHCP Client
> CONST_IMG_DHCP_SERVER.....DHCP Server
> CONST_IMG_DIRECTORY_SERVER.....(nil)
> CONST_IMG_DNS_SERVER.....DNS
> CONST_IMG_FC_VEN_BROCADE.....Brocade Communications Systems, Inc.
> CONST_IMG_FC_VEN_EMULEX.....Emulex Corporation
> CONST_IMG_FC_VEN_SEAGATE.....Seagate Technology
> CONST_IMG_FIBRECHANNEL_SWITCH.....FibreChannel Switch
> CONST_IMG_FTP_SERVER.....(nil)
> CONST_IMG_HAS_P2P.....P2P Server
> CONST_IMG_HAS_USERS.....Users
> CONST_IMG_HIGH_RISK..... High Risk
> CONST_IMG_HTTP_SERVER.....HTTP Server
> CONST_IMG_IMAP_SERVER.....(nil)
> CONST_IMG_LOCK.....Secured URL
> CONST_IMG_LOW_RISK..... Low Risk
> CONST_IMG_MEDIUM_RISK..... Medium Risk
> CONST_IMG_MULTIHOMED.....Multihomed
> CONST_IMG_MULTIVLANED.....Multivlaned
> CONST_IMG_NIC_CARD.....Network Card
> CONST_IMG_NTP_SERVER.....NTP Server
> CONST_IMG_OS_AIX.....OS: AIX
> CONST_IMG_OS_BERKELEY.....OS: BSD Unix
> CONST_IMG_OS_BSD.....OS: BSD Unix
> CONST_IMG_OS_CISCO.....OS: Cisco
> CONST_IMG_OS_HP_JETDIRET.....OS: HP/JetDirect
> CONST_IMG_OS_HP_UX.....OS: HP-UX
> CONST_IMG_OS_IRIX.....OS: Irix
> CONST_IMG_OS_LINUX.....OS: Linux
> CONST_IMG_OS_MAC.....OS: Apple Mac
> CONST_IMG_OS_NOVELL.....OS: Novell
> CONST_IMG_OS_SOLARIS.....OS: Solaris
> CONST_IMG_OS_SUNOS.....OS: SunOS
> CONST_IMG_OS_UNIX.....OS: BSD Unix
> CONST_IMG_OS_WINDOWS.....OS: Windows
> CONST_IMG_POP_SERVER.....(nil)
> CONST_IMG_PRINTER.....Printer
> CONST_IMG_ROUTER.....Router
> CONST_IMG_SCSI_DISK.....SCSI Block Device (disk)
> CONST_IMG_SCSI_INITIATOR.....SCSI Initiator
> CONST_IMG_SMTP_SERVER.....Mail (SMTP)
> CONST_IMG_VOIP_HOST.....VoIP
> CONST_INDEX_HTML.....index.html
> CONST_INDEX_INNER_HTML.....index_inner.html
> CONST_INFOHTML_COL1_WIDTH.....250
> CONST_INFOHTML_COL23_WIDTH.....350
> CONST_INFOHTML_COL2_WIDTH.....175
> CONST_INFOHTML_COL3_WIDTH.....175
> CONST_INFOHTML_WIDTH.....undefined
> CONST_INFO_NTOP_HTML.....info.html
> CONST_INVALIDNETMASK.....-1
> CONST_IP_L_2_L_HTML.....ipL2L.html
> CONST_IP_L_2_R_HTML.....ipL2R.html
> CONST_IP_PROTO_DISTRIB_HTML.....ipProtoDistrib.html
> CONST_IP_PROTO_USAGE_HTML.....ipProtoUsage.html
> CONST_IP_R_2_L_HTML.....ipR2L.html
> CONST_IP_R_2_R_HTML.....ipR2R.html
> CONST_IP_TRAFFIC_MATRIX_HTML.....ipTrafficMatrix.html
> CONST_ISO8601_TIMESPEC.....%Y-%m-%dT%H:%M:%S
> CONST_LEFTMENU_HTML.....leftmenu.html
> CONST_LEFTMENU_NOJS_HTML.....leftmenu-nojs.html
> CONST_LEGEND_BOX_SIZE.....7
> CONST_LOCALE_TIMESPEC.....%c
> CONST_LOCAL_ROUTERS_LIST_HTML.....localRoutersList.html
> CONST_LOG_VIEW_BUFFER_SIZE.....50
> CONST_MAGIC_NUMBER.....1968
> CONST_UNMAGIC_NUMBER.....1290
> CONST_MAILTO_ABDELKADER.....Abdelkader Lahmadi
> CONST_MAILTO_BURTON.....Burton Strauss
> CONST_MAILTO_DINESH.....Dinesh G. Dutt
> CONST_MAILTO_LIST.....mailing list
> CONST_MAILTO_LUCA.....Luca Deri
> CONST_MAILTO_OLIVIER.....Olivier Festor
> CONST_MAILTO_STEFANO.....Stefano Suin
> CONST_MAN_NTOP_HTML.....ntop.html
> CONST_MODIFY_URL.....modifyURL
> CONST_MODIFY_USERS.....modifyUsers
> CONST_MULTICAST_MASK.....-536870912
> CONST_MULTICAST_STATS_HTML.....multicastStats.html
> CONST_NET_FLOWS_HTML.....NetFlows.html
> CONST_NETMASK_ENTRY.....1
> CONST_NETWORK_ENTRY.....0
> CONST_NETWORK_IMAGE_MAP.....network_map.png
> CONST_NETWORK_MAP_HTML.....networkMap.html
> CONST_NTOP_HELP_HTML.....help.html
> CONST_NTOP_LOGO.....ntop_logo.png
> CONST_NTOP_P3P.....ntop.p3p
> CONST_NULL_HDRLEN.....4
> CONST_NUM_TABLE_ROWS_PER_PAGE.....128
> CONST_NUM_TRANSACTION_ENTRIES.....256
> CONST_OSFINGERPRINT_FILE.....etter.finger.os
> CONST_P2C_FILE.....undefined
> CONST_PACKET_QUEUE_LENGTH.....2048
> CONST_PATH_SEP.....47
> CONST_PCAP_NW_INTERFACE_FILE.....pcap file
> CONST_PCTG_HIGH_COLOR.....BGCOLOR=#FF3118
> CONST_PCTG_LOW.....25
> CONST_PCTG_MID.....75
> CONST_PIE_FC_PKT_SZ_DIST.....fcPktSizeDistribPie
> CONST_PIE_INTERFACE_DIST.....interfaceTrafficPie
> CONST_PIE_IP_TRAFFIC.....ipTrafficPie
> CONST_PIE_PKT_CAST_DIST.....pktCastDistribPie
> CONST_PIE_PKT_SIZE_DIST.....pktSizeDistribPie
> CONST_PIE_TTL_DIST.....pktTTLDistribPie
> CONST_PIE_VSAN_CNTL_TRAF_DIST.....vsanControlTrafficDistribPie
> CONST_PLUGIN_ENTRY_FCTN_NAME.....PluginEntryFctn
> CONST_PLUGIN_EXTENSION......so
> CONST_PLUGINS_HEADER.....plugins/
> CONST_PPP_HDRLEN.....4
> CONST_PPP_PROTOCOL_TYPE.....34827
> CONST_PRIVACYCLEAR_HTML.....privacyFlagClear.html
> CONST_PRIVACYFORCE_HTML.....privacyFlagForce.html
> CONST_PRIVACYNOTICE_HTML.....privacyNotice.html
> CONST_PROBLEMRPT_HTML.....ntopProblemReport.html
> CONST_PURGE_HOST.....purgeHost.html
> CONST_REPORT_ITS_DEFAULT.....(default)
> CONST_REPORT_ITS_EFFECTIVE.....   (effective)
> CONST_RESET_STATS_HTML.....resetStats.html
> CONST_RFC1945_TIMESPEC.....%a, %d %b %Y %H:%M:%S GMT
> CONST_RRD_EXTENSION......rrd
> CONST_SCSI_BYTES_HTML.....ScsiBytes.html
> CONST_SCSI_STATUS_HTML.....ScsiStatus.html
> CONST_SCSI_TIMES_HTML.....ScsiTimes.html
> CONST_SCSI_TM_HTML.....ScsiTMInfo.html
> CONST_SFLOW_TCPDUMP_MAGIC.....-1582119980
> CONST_SHOW_MUTEX_HTML.....showMutex.html
> CONST_SHOW_PLUGINS_HTML.....showPlugins.html
> CONST_SHOW_PORT_TRAFFIC_HTML.....showPortTraffic.html
> CONST_SHOW_URLS_HTML.....showURLs.html
> CONST_SHOW_USERS_HTML.....showUsers.html
> CONST_SHUTDOWNNOW_NTOP_IMG.....shutdown.gif
> CONST_SHUTDOWN_NTOP_HTML.....shutdown.html
> CONST_SIZE_PCAP_ERR_BUF.....512
> CONST_SORT_DATA_HOST_TRAFFIC_HTML.....dataHostTraffic.html
> CONST_SORT_DATA_IP_HTML.....sortDataIP.html
> CONST_SORT_DATA_PROTOS_HTML.....sortDataProtos.html
> CONST_SORT_DATA_RCVD_HOST_TRAFFIC_HTML.....dataRcvdHostTraffic.html
> CONST_SORT_DATA_SENT_HOST_TRAFFIC_HTML.....dataSentHostTraffic.html
> CONST_SORT_DATA_THPT_HTML.....sortDataThpt.html
> CONST_SORT_DATA_THPT_STATS_HTML.....thptStats.html
> CONST_SSI_MENUBODY_HTML.....menuBody.html
> CONST_SSI_MENUHEAD_HTML.....menuHead.html
> CONST_SSL_CERTF_FILENAME.....undefined
> CONST_SWITCH_NIC_HTML.....switch.html
> CONST_TEXT_INFO_NTOP_HTML.....textinfo.html
> CONST_THPTLABEL_TIMESPEC.....%d/%m
> CONST_THPT_STATS_MATRIX_HTML.....thptStatsMatrix.html
> CONST_TOD_HOUR_TIMESPEC.....%H
> CONST_TOD_NOSEC_TIMESPEC.....%H:%M
> CONST_TOD_WSEC_TIMESPEC.....%H:%M:%S
> CONST_TRAFFIC_STATS_HTML.....trafficStats.html
> CONST_TRAFFIC_SUMMARY_HTML.....trafficSummary.html
> CONST_TRMTU.....2000
> CONST_TWO_MSL_TIMEOUT.....120
> CONST_UNKNOWN_MTU.....65355
> CONST_VIEW_LOG_HTML.....viewLog.html
> CONST_VLAN_LIST_HTML.....vlanList.html
> CONST_VSAN_DETAIL_HTML.....vsanDetail.html
> CONST_VSAN_DISTRIB_HTML.....vsanDistrib.html
> CONST_VSAN_LIST_HTML.....vsanList.html
> CONST_W3C_CHARTYPE_LINE.....
> CONST_W3C_DOCTYPE_LINE_32.....
> CONST_W3C_DOCTYPE_LINE.....
> CONST_W3C_P3P_XML.....w3c/p3p.xml
> CONST_WIN32_PATH_NETWORKS.....networks
> CONST_XML_DOCTYPE_NAME.....ntop_dump
> CONST_XML_DTD_NAME.....ntopdump.dtd
> CONST_XMLDUMP_PLUGIN_NAME.....xmldump
> CONST_XML_TMP_NAME...../tmp/ntop-xml
> CONTACTED_PEERS_THRESHOLD.....1024
> DEFAULT_AS_LOOKUP_URL.....http://ws.arin.net/cgi-bin/whois.pl?queryinput=AS
> DEFAULT_NETFLOW_PORT_STR.....2055
> DEFAULT_NTOP_ACCESS_LOG_FILE.....(null)
> DEFAULT_NTOP_AUTOREFRESH_INTERVAL.....120
> DEFAULT_NTOP_DAEMON_MODE.....0
> DEFAULT_NTOP_DEBUG.....0
> DEFAULT_NTOP_DEBUG_MODE.....0
> DEFAULT_NTOP_DEVICES.....(null)
> DEFAULT_NTOP_DISABLE_PROMISCUOUS.....0
> DEFAULT_NTOP_DOMAIN_NAME.....(nil)
> DEFAULT_NTOP_DONT_TRUST_MAC_ADDR.....0
> DEFAULT_NTOP_ENABLE_SESSIONHANDLE.....yes
> DEFAULT_NTOP_FAMILY.....0
> DEFAULT_NTOP_FCNS_FILE.....(null)
> DEFAULT_NTOP_FILTER_EXPRESSION.....(null)
> DEFAULT_NTOP_FLOW_SPECS.....(null)
> DEFAULT_NTOP_LOCAL_SUBNETS.....(null)
> DEFAULT_NTOP_MAX_HASH_ENTRIES.....8192
> DEFAULT_NTOP_MAX_NUM_SESSIONS.....32768
> DEFAULT_NTOP_MERGE_INTERFACES.....yes
> DEFAULT_NTOP_NUMERIC_IP_ADDRESSES.....0
> DEFAULT_NTOP_OTHER_PKT_DUMP.....0
> DEFAULT_NTOP_P3PCP.....(null)
> DEFAULT_NTOP_P3PURI.....(null)
> DEFAULT_NTOP_PACKET_DECODING.....yes
> DEFAULT_NTOP_PCAP_LOG_FILENAME.....(null)
> DEFAULT_NTOP_PID_DIRECTORY...../var/run
> DEFAULT_NTOP_PIDFILE.....ntop.pid
> DEFAULT_NTOP_PROTO_SPECS.....(null)
> DEFAULT_NTOP_SAMPLING.....yes
> DEFAULT_NTOP_STICKY_HOSTS.....0
> DEFAULT_NTOP_SUSPICIOUS_PKT_DUMP.....0
> DEFAULT_NTOP_TRACK_ONLY_LOCAL.....0
> DEFAULT_NTOP_TRAFFICDUMP_FILENAME.....(null)
> DEFAULT_NTOP_WEB_ADDR.....(null)
> DEFAULT_NTOP_WEB_PORT.....3000
> DEFAULT_SFLOW_PORT_STR.....6343
> DEFAULT_SFLOW_SAMPLING_RATE.....400
> DEFAULT_SNAPLEN.....384
> DEFAULT_SYSLOG_FACILITY.....24
> DEFAULT_TCPWRAP_ALLOW.....undefined
> DEFAULT_TCPWRAP_DENY.....undefined
> DEFAULT_TRACE_LEVEL.....3
> DEFAULT_VSAN.....yes
> DEFAULT_WEBSERVER_REQUEST_QUEUE_LEN.....10
> EMSGSIZE.....90
> ETHERMTU.....1500
> IP_L4_PORT_CHARGEN.....19
> IP_L4_PORT_DAYTIME.....13
> IP_L4_PORT_DISCARD.....9
> IP_L4_PORT_ECHO.....7
> IP_TCP_PORT_FTP.....21
> IP_TCP_PORT_GNUTELLA1.....6346
> IP_TCP_PORT_GNUTELLA2.....6347
> IP_TCP_PORT_GNUTELLA3.....6348
> IP_TCP_PORT_HTTP.....80
> IP_TCP_PORT_HTTPS.....443
> IP_TCP_PORT_IMAP.....143
> IP_TCP_PORT_JETDIRECT.....9100
> IP_TCP_PORT_KAZAA.....1214
> IP_TCP_PORT_MSMSGR.....1863
> IP_TCP_PORT_NTOP.....3000
> IP_TCP_PORT_POP2.....109
> IP_TCP_PORT_POP3.....110
> IP_TCP_PORT_PRINTER.....515
> IP_TCP_PORT_SCCP.....2000
> IP_TCP_PORT_SKYPE.....54045
> IP_TCP_PORT_SMTP.....25
> IP_TCP_PORT_SQUID.....3128
> IP_TCP_PORT_SSH.....22
> IP_TCP_PORT_WINMX.....6699
> IP_UDP_PORT_SIP.....5060
> LEN_ADDRESS_BUFFER.....44
> LEN_CMDLINE_BUFFER.....4096
> LEN_ETHERNET_ADDRESS_DISPLAY.....18
> LEN_ETHERNET_ADDRESS.....6
> LEN_ETHERNET_VENDOR_DISPLAY.....9
> LEN_ETHERNET_VENDOR.....3
> LEN_FC_ADDRESS_DISPLAY.....9
> LEN_FC_ADDRESS.....3
> LEN_FGETS_BUFFER.....512
> LEN_GENERAL_WORK_BUFFER.....1024
> LEN_HUGE_WORK_BUFFER.....4096
> LEN_MEDIUM_WORK_BUFFER.....128
> LEN_SMALL_WORK_BUFFER.....24
> LEN_TIMEFORMAT_BUFFER.....48
> LEN_WWN_ADDRESS_DISPLAY.....24
> LEN_WWN_ADDRESS.....8
> MAKE_NTOP_PACKETSZ_DECLARATIONS.....no
> MAKE_WITH_FORK_COPYONWRITE.....yes
> MAKE_WITH_HTTPSIGTRAP.....no
> MAKE_WITH_LOG_XXXXXX.....no
> MAKE_WITH_NETFLOWSIGTRAP.....no
> MAKE_WITH_SYSLOG.....yes
> MAX_ADDRESSES.....35
> MAX_ALIASES.....35
> MAX_ASSIGNED_IP_PORTS.....1024
> MAXCDNAME.....255
> MAX_DEVICE_NAME_LEN.....64
> MAX_DLT_ARRAY.....123
> MAXDNAME.....1025
> MAX_ELEMENT_HASH.....4096
> MAX_FC_DOMAINS.....240
> MAX_HASHDUMP_ENTRY.....65535
> MAXHOSTNAMELEN.....64
> MAX_HOSTS_CACHE_LEN.....512
> MAX_HOSTS_PURGE_PER_CYCLE.....undefined
> MAX_IP_PORT.....65534
> MAXLABEL.....63
> MAX_LANGUAGES_REQUESTED.....4
> MAX_LANGUAGES_SUPPORTED.....8
> MAX_LASTSEEN_TABLE_SIZE.....4096
> MAX_LEN_SYM_HOST_NAME_HTML.....256
> MAX_LEN_SYM_HOST_NAME.....64
> MAX_LEN_URL.....512
> MAX_LEN_VENDOR_NAME.....64
> MAX_MULTIPLE_VLAN_WARNINGS.....10
> MAX_NFS_NAME_HASH.....12288
> MAX_NODE_TYPES.....8
> MAX_NUM_BAD_IP_ADDRESSES.....3
> MAX_NUM_CONTACTED_PEERS.....8
> MAX_NUM_DEQUEUE_THREADS.....undefined
> MAX_NUM_DEVICES.....32
> MAX_NUM_DEVICES_VIRTUAL.....7
> MAX_NUM_DHCP_MSG.....8
> MAX_NUM_FIN.....4
> MAX_NUM_IGNOREDFLOWS.....32
> MAX_NUM_LIST_ENTRIES.....32
> MAX_NUM_NETWORKS.....64
> MAX_NUM_OS.....256
> MAX_NUM_PROBES.....16
> MAX_NUM_PROTOS.....64
> MAX_NUM_PURGED_SESSIONS.....512
> MAX_NUM_PWFILE_ENTRIES.....64
> MAX_NUM_QUEUED_ADDRESSES.....16384
> MAX_NUM_RECENT_PORTS.....5
> MAX_NUM_ROUTERS.....512
> MAX_NUM_STORED_FLAGS.....4
> MAX_NUM_UNKNOWN_PROTOS.....5
> MAX_PACKET_LEN.....8232
> MAX_PASSIVE_FTP_SESSION_TRACKER.....2048
> MAX_PDA_HOST_TABLE.....4096
> MAX_PER_DEVICE_HASH_LIST.....65535
> MAX_PROCESS_BUFFER.....1024
> MAX_NETFLOW_FLOW_BUFFER.....undefined
> MAX_NETFLOW_RECORD_BUFFER.....undefined
> MAX_RRD_CYCLE_BUFFER.....undefined
> MAX_RRD_PROCESS_BUFFER.....undefined
> MAX_SESSIONS_CACHE_LEN.....512
> MAX_SSL_CONNECTIONS.....undefined
> MAX_SUBNET_HOSTS.....1024
> MAX_TOT_NUM_SESSIONS.....65535
> MAX_USER_VSAN.....1001
> MAX_VLAN.....4096
> MAX_VSANS_GRAPHED.....10
> MAX_VSANS.....4095
> MAX_WEBSERVER_REQUEST_QUEUE_LEN.....20
> MAX_WIN32_NET_ALIASES.....35
> MIN_SLICE_PERCENTAGE.....0
> MIN_WEBSERVER_REQUEST_QUEUE_LEN.....2
> NAME_MAX.....255
> NETFLOW_DEVICE_NAME.....NetFlow-device
> NS_CMPRSFLGS.....192
> NS_MAXCDNAME.....255
> NTOP_PREF_ACCESS_LOG.....ntop.accessLogFile
> NTOP_PREF_DAEMON.....ntop.daemonMode
> NTOP_PREF_DBG_MODE.....ntop.debugMode
> NTOP_PREF_DEVICES.....ntop.devices
> NTOP_PREF_DOMAINNAME.....ntop.domainName
> NTOP_PREF_DUMP_OTHER.....ntop.enableOtherPacketDump
> NTOP_PREF_DUMP_SUSP.....ntop.enableSuspiciousPacketDump
> NTOP_PREF_EN_PROTO_DECODE.....ntop.enablePacketDecoding
> NTOP_PREF_EN_SESSION.....ntop.enableSessionHandling
> NTOP_PREF_FILTER.....ntop.currentFilterExpression
> NTOP_PREF_FLOWSPECS.....ntop.flowSpecs
> NTOP_PREF_IPV4.....ntop.ipv4
> NTOP_PREF_IPV4V6.....ntop.ipv4orv6
> NTOP_PREF_IPV6.....ntop.ipv6
> NTOP_PREF_LOCALADDR.....ntop.localAddresses
> NTOP_PREF_KNOWNADDR.....undefined
> NTOP_PREF_MAPPERURL.....undefined
> NTOP_PREF_MAXHASH.....ntop.maxNumHashEntries
> NTOP_PREF_MAXLINES.....ntop.maxNumLines
> NTOP_PREF_MAXSESSIONS.....ntop.maxNumSessions
> NTOP_PREF_MERGEIF.....ntop.mergeInterfaces
> NTOP_PREF_NOBLOCK.....undefined
> NTOP_PREF_NO_INVLUN.....undefined
> NTOP_PREF_NO_ISESS_PURGE.....ntop.disableInstantSessionPurge
> NTOP_PREF_NO_MUTEX_EXTRA.....ntop.disableMutexExtraInfo
> NTOP_PREF_NO_PROMISC.....ntop.disablePromiscuousMode
> NTOP_PREF_NO_SCHEDYLD.....undefined
> NTOP_PREF_NO_STOPCAP.....undefined
> NTOP_PREF_NO_TRUST_MAC.....ntop.dontTrustMACaddr
> NTOP_PREF_NUMERIC_IP.....ntop.numericFlag
> NTOP_PREF_P3PCP.....ntop.P3Pcp
> NTOP_PREF_P3PURI.....ntop.P3Puri
> NTOP_PREF_PCAP_LOGBASE.....ntop.pcapLogBasePath
> NTOP_PREF_PCAP_LOG.....ntop.pcapLog
> NTOP_PREF_PRINT_FCORIP.....undefined
> NTOP_PREF_PROTOSPECS.....ntop.protoSpecs
> NTOP_PREF_REFRESH_RATE.....ntop.refreshRate
> NTOP_PREF_SAMPLING.....ntop.sampleRate
> NTOP_PREF_SPOOLPATH.....ntop.spoolPath
> NTOP_PREF_SSLPORT.....ntop.sslPort
> NTOP_PREF_STICKY_HOSTS.....ntop.stickyHosts
> NTOP_PREF_TRACE_LVL.....ntop.traceLevel
> NTOP_PREF_TRACK_LOCAL.....ntop.trackOnlyLocalHosts
> NTOP_PREF_USE_SSLWATCH.....undefined
> NTOP_PREF_USE_SYSLOG.....ntop.useSyslog
> NTOP_PREF_VALUE_AF_BOTH.....0
> NTOP_PREF_VALUE_AF_INET6.....10
> NTOP_PREF_VALUE_AF_INET.....2
> NTOP_PREF_VALUE_PRINT_BOTH.....3
> NTOP_PREF_VALUE_PRINT_FCONLY.....2
> NTOP_PREF_VALUE_PRINT_IPONLY.....yes
> NTOP_PREF_W3C.....ntop.w3c
> NTOP_PREF_WEBPORT.....ntop.webPort
> NTOP_PREF_WWN_MAP.....undefined
> NULL_VALUE.....(null)
> PACKETSZ.....512
> PARM_ENABLE_EXPERIMENTAL.....no
> PARM_FORK_CHILD_PROCESS.....yes
> PARM_HOST_PURGE_INTERVAL.....120
> PARM_HOST_PURGE_MINIMUM_IDLE_ACTVSES.....1800
> PARM_HOST_PURGE_MINIMUM_IDLE_NOACTVSES.....600
> PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
> PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
> PARM_PRINT_ALL_SESSIONS.....no
> PARM_SESSION_PURGE_MINIMUM_IDLE.....600
> PARM_SLEEP_LIMIT.....10
> PARM_THROUGHPUT_REFRESH_INTERVAL.....30
> PARM_USE_COLOR.....no
> PARM_USE_HOST.....no
> PARM_USE_MACHASH_INVERT.....yes
> PARM_USE_SESSIONS_CACHE.....no
> PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
> SFLOW_DEVICE_NAME.....sFlow-device
> UNKNOWN_P2P_FILE.....<unknown file>
> 
> 
> Compile Time: globals-report.h
> 
> BASE_PROTOS_IDX.....30
> CHART_FORMAT......png
> DARK_BG.....BGCOLOR="#F3F3F3"
> DISPLAY_FC_ALIAS.....2
> DISPLAY_FC_DEFAULT.....2
> DISPLAY_FC_FCID.....0
> DISPLAY_FC_WWN.....1
> SORT_DATA_HOST_TRAFFIC.....12
> SORT_DATA_IP.....10
> SORT_DATA_PROTOS.....9
> SORT_DATA_RCVD_HOST_TRAFFIC.....4
> SORT_DATA_RECEIVED_IP.....2
> SORT_DATA_RECEIVED_PROTOS.....1
> SORT_DATA_RECEIVED_THPT.....3
> SORT_DATA_SENT_HOST_TRAFFIC.....8
> SORT_DATA_SENT_IP.....6
> SORT_DATA_SENT_PROTOS.....5
> SORT_DATA_SENT_THPT.....7
> SORT_DATA_THPT.....11
> SORT_FC_ACTIVITY.....15
> SORT_FC_DATA.....13
> SORT_FC_THPT.....14
> TABLE_DEFAULTS..... CELLSPACING=0 CELLPADDING=2
> TABLE_OFF.....(nil)
> TABLE_ON.....(nil)
> TD_BG.....(nil)
> TH_BG.....(nil)
> TRAFFIC_STATS.....0
> TR_ON.....onMouseOver="this.bgColor = '#EDF3FE'" onMouseOut ="this.bgColor = 
> '#FFFFFF'"
> WHEAT_BG.....undefined
> 
> 
> PLUGINS:
> 
> RRD:
> RRD path...../var/ntop/rrd
> New directory permissions.....0700
> New file umask.....0066
> 
> 
> 
> 
> 
> 
>        Rafael Sarres de Almeida
>        Analista
>        Departamento de Tecnologia da Informação
>        Divisão de Administração de Redes
>        Tel.:+55 (61) 3414-4148
>        E-mail: [email protected]
> 
> 
> -----Mensagem original-----
> De: [email protected] 
> [mailto:[email protected]] Em nome de Luca Deri
> Enviada em: sexta-feira, 20 de agosto de 2010 15:22
> Para: [email protected]
> Assunto: Re: [Ntop-dev] Ntop processing only one packet
> 
> Rafael
> please update to 4.0.1 and report me if it works
> 
> Thanks Luca
> 
> On Aug 20, 2010, at 7:51 PM, Rafael Sarres de Almeida wrote:
> 
>> Hi all;
>> I have a problem on my fresh ntop 4.0 installation: Only one packet is 
>> processed. I am using sFlow plugin (no interface capture: "-i none" option) 
>> and it reports to be receiving a lot of sFlow packets, ntop receives them 
>> but only processes one packet. I ran some tests and discovered that, no 
>> matter the source (internal NIC or flow),  just one packet gets processed 
>> and all others are kept queued. I have downgraded ntop to 3.3.10, the last 
>> stable before 3.4, and everything looks to be working fine.
>> Changelog for 3.4 informs: "a partially rewritten ntop processing engine to 
>> address reliability and performance." Maybe this change in the processing 
>> engine have caused a bug in my setup, as the behavior that I see is that 
>> almost all the packets (besides the first), no matter the source (internal 
>> NIC or flow), is queued and never gets processed. Maybe that new processing 
>> engine is getting stuck somehow. I do not think it is a loop because my CPU 
>> does not get busy, ntop seems to run idle.
>> 
>> Some info from info.html:
>> Packets
>> Received             1,895
>> Processed Immediately 1 (0.1 %)
>> Queued               1,894 (99.9 %)
>> Current Queue (none)     0
>> Maximum Queue (none)               0 (Limit 2048)
>> Current Queue (sFlow-device.2) 1894
>> Maximum Queue (sFlow-device.2)            1894 (Limit 2048)
>> 
>> 
>> 
>> Ntop statistics for the sFlow device:
>> Traffic Report for 'sFlow-device.2' [switch]
>> Packets
>> Dropped (ntop)  0.0%      0
>> Total Received (ntop)     1,606
>> Total Packets Processed               1
>> Unicast 100.0% 1
>> Broadcast           0.0%      0
>> Multicast             0.0%      0
>> 
>> Here are the statistics from sFlow plugin:
>> Flow Statistics
>> Received Flows
>> Flow Senders      172.17.205.39 [2,362 pkts]
>> 
>> Number of sFlow Packets Rcvd   2,362
>> Number of sFlow Packets with Bad Version           0
>> Number of sFlow Packets Processed        2,362
>> Number of v2 Flows Rcvd             0
>> Number of v4 Flows Rcvd             0
>> Number of v5 Flows Rcvd             2,362
>> 
>> Discarded Flows
>> Number of Flows with Bad Data                0
>> Total Number of Flows Processed             0
>> 
>> Flow Analisys
>> Number of sFlow Samples Rcvd 1,615
>> Number of sFlow Counter Updates Rcvd                1,734
>> 
>> Thanks.
>> 
>> <image001.gif>
>>        Rafael Sarres de Almeida
>>        Analista
>>        Departamento de Tecnologia da Informação
>>        Divisão de Administração de Redes
>>        Tel.:+55 (61) 3414-4148
>>        E-mail: [email protected]
>> _______________________________________________
>> Ntop-dev mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
> 
> ---
> 
> "Debugging is twice as hard as writing the code in the first place. 
> Therefore, if you write the code as cleverly as possible, you are, by 
> definition, not smart enough to debug it. - Brian W. Kernighan
> 
> _______________________________________________
> Ntop-dev mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
> _______________________________________________
> Ntop-dev mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev

---
We can't solve problems by using the same kind of thinking we used when we 
created them - Albert Einstein

_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to