Hi Luca;
Just to add more info to my previous mail:
I gdb the code in the first packet, seems like that the releaseMutex
(2538,pbuf.c) is not releasing. I followed the code, it calls the realeaseMutex
function after it processes the first packet, but on the next loop, the
tryLockMutex (2510,pbuf.c) fails, so the program thinks the mutex is not
released. Here is the debug:
Breakpoint 4, queuePacket (_deviceId=<value optimized out>, h=0x45007050,
p=0x2aaaad590042 "") at pbuf.c:2510
2510 if(tryLockMutex(&myGlobals.device[deviceId].packetProcessMutex,
"queuePacket") == 0) {
*********** It is going to process first packet if Mutex is not locked.
(gdb) step
Mon Aug 30 18:09:35 2010 THREADMGMT[t1094719808]: SIH: Idle host scan thread
running [p12154]
_tryLockMutex (mutexId=0x2aaaab7e1150, where=0x2aaaaad8d59d "queuePacket",
fileName=0x2aaaaad8d41a "pbuf.c", fileLine=2510)
at util.c:2078
2078 return(pthread_rwlock_trywrlock(&mutexId->mutex));
(gdb)
[New Thread 0x45a08940 (LWP 12189)]
Mon Aug 30 18:09:42 2010 THREADMGMT[t1168148800]: RRD: Started thread for
throughput data collection
Mon Aug 30 18:09:42 2010 THREADMGMT[t1147169088]: RRD: Data collection thread
running [p12154]
Mon Aug 30 18:09:42 2010 THREADMGMT[t1168148800]: RRD: Throughput data
collection: Thread starting [p12154]
Mon Aug 30 18:09:42 2010 THREADMGMT[t1168148800]: RRD: Throughput data
collection: Thread running [p12154]
0x000000304fa0a760 in pthread_rwlock_trywrlock () from /lib64/libpthread.so.0
(gdb)
Single stepping until exit from function pthread_rwlock_trywrlock,
which has no line number information.
queuePacket (_deviceId=<value optimized out>, h=0x45007050, p=0x2aaaad590042
"") at pbuf.c:2514
2514 myGlobals.receivedPacketsProcessed++;
(gdb) break 2538
Breakpoint 5 at 0x2aaaaad595a7: file pbuf.c, line 2538.
(gdb) continue
Continuing.
Breakpoint 5, queuePacket (_deviceId=<value optimized out>, h=0x45007050,
p=0x2aaaad590042 "") at pbuf.c:2538
2538 releaseMutex(&myGlobals.device[deviceId].packetProcessMutex);
***************Releasing MUTEX
(gdb) step
_releaseMutex (mutexId=0x2aaaab7e1150, fileName=0x2aaaaad8d41a "pbuf.c",
fileLine=2538) at util.c:2156
2156 return(pthread_rwlock_unlock(&mutexId->mutex));
(gdb)
0x000000304eedfa10 in pthread_mutex_unlock () from /lib64/libc.so.6
(gdb)
Single stepping until exit from function pthread_mutex_unlock,
which has no line number information.
0x000000304fa0a020 in pthread_mutex_unlock () from /lib64/libpthread.so.0
(gdb)
Single stepping until exit from function pthread_mutex_unlock,
which has no line number information.
0x000000304fa0a0d8 in _L_unlock_766 () from /lib64/libpthread.so.0
(gdb)
Single stepping until exit from function _L_unlock_766,
which has no line number information.
0x000000304fa0d5e0 in __lll_unlock_wake () from /lib64/libpthread.so.0
(gdb)
Single stepping until exit from function __lll_unlock_wake,
which has no line number information.
0x000000304fa0a0e7 in _L_unlock_766 () from /lib64/libpthread.so.0
(gdb)
Single stepping until exit from function _L_unlock_766,
which has no line number information.
0x000000304fa0a04e in pthread_mutex_unlock () from /lib64/libpthread.so.0
(gdb)
Any ideas?
Rafael Sarres de Almeida
-----Mensagem original-----
De: [email protected]
[mailto:[email protected]] Em nome de Luca Deri
Enviada em: sexta-feira, 20 de agosto de 2010 17:52
Para: [email protected]
Assunto: Re: [Ntop-dev] RES: Ntop processing only one packet
Rafael
can you gdb ntop to see why packets are not dequed. Can you also try to add -t
6 and see if there's something interesting in logs?
Thanks Luca
On Aug 20, 2010, at 10:27 PM, Rafael Sarres de Almeida wrote:
> Hi Luca;
> Same problem.
> Dropped (libpcap) 583.9% 12,466
> Dropped (ntop) 4.0% 86
> Total Received (ntop) 2,135
> Total Packets Processed 1
> Unicast 100.0% 1
> Broadcast 0.0% 0
> Multicast 0.0% 0
>
>
> Here is the info.html, just in case:
> ntop Configuration
>
> Basic Information
>
> ntop Version.....x86_64-redhat-linux-gnu (64 bit)
> Running as user.....root
> Configured on.....Aug 20 2010 17:10:59
> Built on.....Aug 20 2010 17:15:04
> OS.....x86_64-redhat-linux-gnu
> libpcap Version.....??
> RRD Version.....1.2023
> GeoIP Version.....GEO-533LITE 20090701 Build 1 Copyright (c) 2007 MaxMind LLC
> All Rights Reserved
> GeoIP AS Version.....GEO-117 20090321 Build 1 Copyright (c) 2007 MaxMind LLC
> All Rights Reserved
> Running from...../usr/local/bin
> Libraries in...../usr/local/lib
> Library path.....(nil)
> Process Id.....28282
> Run State.....Run
>
>
> Command Line
>
> Started as........./usr/local/bin/ntop -P /var/ntop -u root -i eth0 -C 1 -t 6
> -M
> Resolved to........./usr/local/bin/ntop -P /var/ntop -u root -i eth0 -C 1 -t
> 6 -M
>
>
> Preferences Used
>
> -a | --access-log-file.....(default) (nil)
> -b | --disable-decoders.....(default) No
> -c | --sticky-hosts.....(default) No
> -d | --daemon.....No
> -e | --max-table-rows.....(default) 128
> -g | --track-local-hosts.....(default) Track all hosts
> -i | --interface (effective).....eth0
> -j | --create-other-packets.....(default) Disabled
> -l | --pcap-log.....(default) (nil)
> -m | --local-subnets (effective).....(default) (nil)
> -n | --numeric-ip-addresses.....(default) No
> -o | --no-mac.....(default) Trust MAC Addresses
> -p | --protocols.....(default) internal list
> -q | --create-suspicious-packets.....(default) Disabled
> -r | --refresh-time.....(default) 120
> -s | --no-promiscuous.....(default) No
> -t | --trace-level.....6
> -u | --user.....root (uid=0, gid=0)
> -w | --http-server.....(default) Active, all interfaces, port 3000
> -z | --disable-sessions.....(default) No
> -B | --filter-expression.....(default) none
> -D | --domain.....bc
> -F | --flow-spec.....(default) none
> -K | --enable-debug.....(default) No
> -L | --use-syslog.....daemon
> -M | --no-interface-merge (effective).....(parameter -M set, Interfaces
> separate) No
> -O | --pcap-file-path.....(default) /usr/local/var/ntop
> -P | --db-file-path...../var/ntop
> -Q | --spool-file-path...../var/ntop
> -U | --mapper.....(default) http://geotool.servehttp.com/
> -X.....32768
> --disable-instantsessionpurge.....(default) No
> --disable-mutexextrainfo.....Yes
> --disable-stopcap.....Yes
> --fc-only.....(default) No
> --instance.....(default) (nil)
> --no-fc.....(default) No
> --no-invalid-lun.....(default) No
> --p3p-cp.....(default) none
> --p3p-uri.....(default) none
> --skip-version-check.....Yes
> --w3c.....Yes
>
>
> Run time/Internal
>
> Web server URL.....http://any:3000
> GDBM version.....GDBM version 1.8.3. 10/15/2002 (built Dec 9 2009 14:09:49)
> Embedded Python.....Not present
> zlib version.....1.2.3
> Protocol Decoders.....Enabled
> Fragment Handling.....Enabled
> Tracking only local hosts.....No
> # IP Protocols Being Monitored.....18
> # Protocol slots.....18316
> # IP Ports Being Monitored.....171
> # IP Ports slots.....342
> WebServer Request Queue.....10
> DNS Resolution Request Queue.....[current: 0][max: 2][drops: 0]
> DNS Resolved Addresses.....[resolved: 3][failed: 1]
> Devices (Network Interfaces).....2
> Domain name (short).....bc
> Total Hash Collisions (Vendor/Special) (lookup).....0
> Database (MySQL) Support Enabled.....No
>
>
> Networks
>
> eth0 Local Network.....172.17.204.0/22
> sFlow-device.2 Local Network.....172.17.204.0/22
> Known Networks.....172.17.204.0/22
>
>
>
> ntop Web Server
>
> Item..................http://...................https://# Handled
> Requests.....362.....-
> # Successful requests (200).....361.....-
> # Bad (We don't want to talk with you) requests.....0.....-
> # Invalid requests - 403 FORBIDDEN.....0.....-
> # Invalid requests - 404 NOT FOUND.....0.....-
> # SSI Requests.....0
> # Bad SSI Requests.....0
> # Handled SSI Requests.....0
> # Handled SIGPIPE Errors.....0
>
>
> Memory Usage
>
> IPX/SAP Hash Size (bytes).....2989
>
>
> Host Memory Cache
>
> Limit.....#define MAX_HOSTS_CACHE_LEN 512
> Current Size.....0
> Maximum Size.....0
> # Entries Reused.....0
>
>
> MAC/IPX Hash tables
>
> IPX/SAP Hash Size (entries).....179
> IPX/SAP Hash Collisions (load).....0
> IPX/SAP Hash Collisions (use).....0
>
>
> Packets
>
> Received.....2,125
> Processed Immediately.....2 (0.1 %)
> Queued.....2,049 (96.4 %)
> Lost in ntop queue.....74
> Current Queue (eth0).....2048
> Maximum Queue (eth0).....2048 (Limit 2048)
> Current Queue (sFlow-device.2).....1
> Maximum Queue (sFlow-device.2).....1 (Limit 2048)
>
>
> Host/Session counts - global
>
> Purged Hosts.....0
> Terminated Sessions.....0
>
>
> Host/Session counts - Device 0 (eth0)
>
> Hash Bucket Size.....2.4 KBytes
> Actual Host Hash Size.....32768
> Stored hosts.....4
> Host Bucket List Length.....[min 1][max 1][avg 1.0]
> Max host lookup.....0
> Session Bucket Size.....432
> Session Actual Hash Size.....65535
> Sessions.....1
> Max Num. Sessions.....1
> Session Bucket List Length.....[min 1][max 1][avg 1.0]
>
>
> Host/Session counts - Device 1 (sFlow-device.2)
>
> Hash Bucket Size.....2.4 KBytes
> Actual Host Hash Size.....32768
> Stored hosts.....3
> Host Bucket List Length.....[min 1][max 1][avg 1.0]
> Max host lookup.....0
> Session Bucket Size.....432
> Session Actual Hash Size.....65535
>
>
> ----- Address Resolution -----
>
>
>
> DNS Sniffing (other hosts requests)
>
> DNS Packets sniffed.....0
> less 'requests'.....0
> less 'failed'.....0
> less 'reverse dns' (in-addr.arpa).....0
> DNS Packets processed.....0
> Stored in cache (includes aliases).....0
>
>
> Vendor Lookup Table
>
> Input lines read.....0
> Records added total.....0
> .....includes special records.....0
> getVendorInfo() calls.....0
> getSpecialVendorInfo() calls.....2
> Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
> Found 24bit (xx:xx:xx) match.....2
> Found multicast bit set.....0
> Found LAA (Locally assigned address) bit set.....0
>
>
> Thread counts
>
> Active.....10
> Children (active).....37
>
>
> Directory (search) order
>
> Data Files......
> /usr/local/share/ntop
> /usr/local/share/ntop
> Config Files......
> /usr/local/etc/ntop
> /usr/local/etc/ntop
> /etc
> Plugins....../plugins
> /usr/local/lib/ntop/plugins
> /usr/local/lib/ntop/plugins
>
>
> Compile Time: ./configure
>
> ./configure parameters.....
> Built on (Host).....x86_64-redhat-linux-gnu
> Built for(Target).....x86_64-redhat-linux-gnu
> preprocessor (CPPFLAGS).....gcc -E -DLINUX -I/usr/local/include
> -I/opt/local/include
> compiler (CFLAGS).....gcc -g -O2 -I/usr/local/include -I/opt/local/include
> -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations
> -Wnested-externs -fPIC -DPIC -DHAVE_CONFIG_H
> include path.....-I/usr/local/include
> system libraries.....-L/usr/local/lib -L/opt/local/lib -lpthread -lm -ldl
> -lcrypt -lc -lgdbm -lz -lGeoIP
> install path...../usr/local
> GNU C (gcc) version.....4.1.2 20080704 (Red Hat 4.1.2-48) (4.1.2)
> uname data.....sysname(Linux) release(2.6.18-194.3.1.el5xen) version(#1 SMP
> Sun May 2 04:26:43 EDT 2010) machine(x86_64)
>
>
> Internationalization (i18n)
>
>
>
> Compile Time: Debug settings in globals-defines.h
>
> DEBUG.....no
> ADDRESS_DEBUG.....no
> CHKVER_DEBUG.....no
> CMPFCTN_DEBUG.....no
> DNS_DEBUG.....no
> DNS_SNIFF_DEBUG.....no
> FC_DEBUG.....no
> FINGERPRINT_DEBUG.....no
> FRAGMENT_DEBUG.....no
> FTP_DEBUG.....no
> GDBM_DEBUG.....no
> HASH_DEBUG.....no
> HOST_FREE_DEBUG.....no
> HTTP_DEBUG.....no
> IDLE_PURGE_DEBUG.....no
> INITWEB_DEBUG.....no
> LATENCY_DEBUG.....no
> MEMORY_DEBUG.....no
> MUTEX_DEBUG.....no
> NETFLOW_DEBUG.....no
> P2P_DEBUG.....no
> PACKET_DEBUG.....no
> PARAM_DEBUG.....no
> PLUGIN_DEBUG.....no
> PROBLEMREPORTID_DEBUG.....no
> SESSION_TRACE_DEBUG.....no
> STORAGE_DEBUG.....no
> UNKNOWN_PACKET_DEBUG.....no
> URL_DEBUG.....no
> VENDOR_DEBUG.....no
>
>
> Compile Time: config.h
>
> CFG_ETHER_HEADER_HAS_EA.....no
> HAVE_ALARM.....yes
> HAVE_ARPA_INET_H.....yes
> HAVE_ARPA_NAMESER_H.....yes
> HAVE_BACKTRACE.....yes
> HAVE_CRYPTGETFORMAT.....no
> HAVE_CRYPT_H.....yes
> HAVE_DIRENT_H.....yes
> HAVE_DLADDR.....yes
> HAVE_DLFCN_H.....yes
> HAVE_DL_H.....no
> HAVE_DOPRNT.....no
> HAVE_ENDPWENT.....yes
> HAVE_ERRNO_H.....yes
> HAVE_FACILITYNAMES.....yes
> HAVE_FCNTL_H.....yes
> HAVE_FINITE.....yes
> HAVE_FLOAT_H.....yes
> HAVE_FORK.....yes
> HAVE_GDBM_H.....yes
> HAVE_GD_H.....no
> HAVE_GDOME_H.....no
> HAVE_GETHOSTBYNAME.....yes
> HAVE_GETHOSTNAME.....yes
> HAVE_GETOPT_H.....yes
> HAVE_GETPASS.....yes
> HAVE_GETTIMEOFDAY.....yes
> HAVE_GLIBCONFIG_H.....no
> HAVE_GLIB_H.....no
> HAVE_ICMP6_H.....no
> HAVE_IEEEFP_H.....no
> HAVE_IF_H.....no
> HAVE_IFLIST_SYSCTL.....no
> HAVE_IN6_ADDR.....yes
> HAVE_INT16_T.....yes
> HAVE_INT32_T.....yes
> HAVE_INT64_T.....yes
> HAVE_INT8_T.....yes
> HAVE_INTTYPES_H.....yes
> HAVE_IP6_H.....no
> HAVE_ISFINITE.....no
> HAVE_ISINF.....yes
> HAVE_LANGINFO_H.....no
> HAVE_LIBC.....yes
> HAVE_LIBC_R.....no
> HAVE_LIBCRYPT.....yes
> HAVE_LIBCRYPTO.....no
> HAVE_LIBDL.....yes
> HAVE_LIBGD.....no
> HAVE_LIBGDBM.....yes
> HAVE_LIBGDOME.....no
> HAVE_LIBGLIB.....no
> HAVE_LIBM.....yes
> HAVE_LIBNSL.....no
> HAVE_LIBPCAP.....no
> HAVE_LIBPOSIX4.....no
> HAVE_LIBPTHREAD.....yes
> HAVE_LIBPTHREADS.....no
> HAVE_LIBRESOLV.....no
> HAVE_LIBSOCKET.....no
> HAVE_LIBSSL.....no
> HAVE_LIBXML2.....no
> HAVE_LIBXNET.....no
> HAVE_LIBZ.....yes
> HAVE_LIMITS_H.....yes
> HAVE_LINUX_IF_PPPOX_H.....yes
> HAVE_LOCALE_H.....no
> HAVE_LOCALTIME_R.....yes
> HAVE_LONG_DOUBLE.....yes
> HAVE_MALLINFO_MALLOC_H.....no
> HAVE_MALLOC_H.....no
> HAVE_MATH_H.....yes
> HAVE_MEMCHR.....yes
> HAVE_MEMORY_H.....yes
> HAVE_MEMSET.....yes
> HAVE_NDIR_H.....no
> HAVE_NET_BPF_H.....no
> HAVE_NET_ETHERNET_H.....yes
> HAVE_NET_IF_DL_H.....no
> HAVE_NET_IF_H.....yes
> HAVE_NETINET_ICMP6_H.....yes
> HAVE_NETINET_IF_ETHER_H.....yes
> HAVE_NETINET_IN_H.....yes
> HAVE_NETINET_IN_SYSTM_H.....yes
> HAVE_NETINET_IP6_H.....yes
> HAVE_NETINET_IP_H.....yes
> HAVE_NETINET_TCP_H.....yes
> HAVE_NETINET_UDP_H.....yes
> HAVE_NET_PPP_DEFS_H.....yes
> HAVE_NET_ROUTE_H.....yes
> HAVE_NET_SNMP_NET_SNMP_CONFIG_H.....no
> HAVE_OPENSSL.....no
> HAVE_OPENSSL_CRYPTO_H.....no
> HAVE_OPENSSL_ERR_H.....no
> HAVE_OPENSSL_PEM_H.....no
> HAVE_OPENSSL_RSA_H.....no
> HAVE_OPENSSL_SSL_H.....no
> HAVE_OPENSSL_X509_H.....no
> HAVE_PTHREAD_ATFORK.....yes
> HAVE_PTHREAD_H.....yes
> HAVE_PUTENV.....yes
> HAVE_PWD_H.....yes
> HAVE_SCHED_H.....no
> HAVE_SCTP.....no
> HAVE_SECURITY_PAM_APPL_H.....no
> HAVE_SELECT.....yes
> HAVE_SETJMP_H.....yes
> HAVE_SHADOW_H.....yes
> HAVE_SIGNAL_H.....yes
> HAVE_SNMP.....no
> HAVE_SNPRINTF.....yes
> HAVE_SOCKET.....yes
> HAVE_SQRT.....no
> HAVE_STAT_EMPTY_STRING_BUG.....no
> HAVE_STDARG_H.....yes
> HAVE_STDDEF_H.....yes
> HAVE_STDINT_H.....yes
> HAVE_STDIO_H.....yes
> HAVE_STDLIB_H.....yes
> HAVE_STRCASECMP.....yes
> HAVE_STRCHR.....yes
> HAVE_STRCSPN.....yes
> HAVE_STRDUP.....yes
> HAVE_STRERROR.....yes
> HAVE_STRFTIME.....yes
> HAVE_STRING_H.....yes
> HAVE_STRINGS_H.....yes
> HAVE_STRNCASECMP.....yes
> HAVE_STRPBRK.....yes
> HAVE_STRRCHR.....yes
> HAVE_STRSIGNAL.....yes
> HAVE_STRSPN.....yes
> HAVE_STRSTR.....yes
> HAVE_STRTOK_R.....yes
> HAVE_STRTOUL.....yes
> HAVE_STRUCT_TM_TM_ZONE.....yes
> HAVE_SYSCTL.....yes
> HAVE_SYS_DIR_H.....no
> HAVE_SYS_IOCTL_H.....yes
> HAVE_SYS_LDR_H.....no
> HAVE_SYSLOG_H.....yes
> HAVE_SYS_NDIR_H.....no
> HAVE_SYS_PARAM_H.....yes
> HAVE_SYS_RESOURCE_H.....no
> HAVE_SYS_SCHED_H.....no
> HAVE_SYS_SELECT_H.....yes
> HAVE_SYS_SOCKET_H.....yes
> HAVE_SYS_SOCKIO_H.....no
> HAVE_SYS_STAT_H.....yes
> HAVE_SYS_SYSCTL_H.....yes
> HAVE_SYS_SYSLOG_H.....yes
> HAVE_SYS_TIME_H.....yes
> HAVE_SYS_TYPES_H.....yes
> HAVE_SYS_UN_H.....yes
> HAVE_SYS_UTSNAME_H.....yes
> HAVE_SYS_WAIT_H.....yes
> HAVE_TCPD_H.....no
> HAVE_TM_ZONE.....yes
> HAVE_TZNAME.....no
> HAVE_U_INT16_T.....yes
> HAVE_U_INT32_T.....yes
> HAVE_U_INT64_T.....yes
> HAVE_u_int64_T.....no
> HAVE_U_INT8_T.....yes
> HAVE_UNAME.....yes
> HAVE_UNISTD_H.....yes
> HAVE_VFORK.....yes
> HAVE_VFORK_H.....no
> HAVE_VPRINTF.....no
> HAVE_WORKING_FORK.....no
> HAVE_WORKING_VFORK.....yes
> HAVE_ZLIB_H.....yes
> INET6.....yes
> LSTAT_FOLLOWS_SLASHED_SYMLINK.....no
> MAKE_STATIC_PLUGIN.....no
> MAKE_WITH_JUMBO_FRAMES.....no
> MAKE_WITH_SNMP.....no
> MAKE_WITH_ZLIB.....yes
> SETVBUF_REVERSED.....no
> STDC_HEADERS.....yes
> TIME_WITH_SYS_TIME.....yes
> TM_IN_SYS_TIME.....no
> CFG_CONFIGFILE_DIR - config file directory...../usr/local/etc/ntop
> CFG_DATAFILE_DIR - data file directory...../usr/local/share/ntop
> CFG_DBFILE_DIR - database file directory...../usr/local/var/ntop
> CFG_PLUGIN_DIR - plugin file directory...../usr/local/lib/ntop/plugins
> CFG_RUN_DIR - run file directory...../usr/local/var/ntop
> CFG_xxxxxx_ENDIAN (Hardware Endian).....little
>
>
> Compile Time: globals-defines.h
>
> CONST_ABTNTOP_HTML.....aboutNtop.html
> CONST_ACTIVE_TCP_SESSIONS_HTML.....NetNetstat.html
> CONST_ADD_URLS_HTML.....addURLs.html
> CONST_ADD_USERS_HTML.....addUsers.html
> CONST_ADMINPW_QUESTION.....ntop startup - waiting for user response!
> Please enter the password for the admin user:
> CONST_APACHELOG_TIMESPEC.....%d/%b/%Y:%H:%M:%S
> CONST_ASLIST_FILE.....AS-list.txt
> CONST_AS_LIST_HTML.....undefined
> CONST_BAR_ALLPROTO_DIST.....allProtoDistribution
> CONST_BAR_FC_PROTO_DIST.....fcProtoDistribution
> CONST_BAR_HOST_DISTANCE.....hostsDistanceChart
> CONST_BAR_LUNSTATS_DIST.....ScsiBytesLunDistribution
> CONST_BAR_VSAN_TRAF_DIST_RCVD.....vsanDomainTrafficDistribRcvd
> CONST_BAR_VSAN_TRAF_DIST_SENT.....vsanDomainTrafficDistribSent
> CONST_BROADCAST_ENTRY.....2
> CONST_CGI_HEADER.....ntop-bin/
> CONST_CHANGE_FILTER_HTML.....changeFilter.html
> CONST_CLUSTER_STATS_HTML.....undefined
> CONST_COLOR_1.....#CCCCFF
> CONST_COLOR_2.....#FFCCCC
> CONST_CONFIG_NTOP_HTML.....configNtop.html
> CONST_CONST_PCTG_LOW_COLOR.....BGCOLOR=#C6EEF7
> CONST_CONST_PCTG_MID_COLOR.....BGCOLOR=#C6EFC8
> CONST_CREDITS_HTML.....Credits.html
> CONST_CRYPT_SALT.....99
> CONST_DAEMONNAME.....ntop
> CONST_DELETE_URL.....deleteURL
> CONST_DELETE_USER.....deleteUser
> CONST_DNSCACHE_LIFETIME.....undefined
> CONST_DNSCACHE_PERMITTED_AGE.....undefined
> CONST_DO_ADD_URL.....doAddURL
> CONST_DO_ADD_USER.....doAddUser
> CONST_DO_CHANGE_FILTER.....doChangeFilter
> CONST_DOMAIN_STATS_HTML.....domainStats.html
> CONST_DOUBLE_TWO_MSL_TIMEOUT.....240
> CONST_DUMP_DATA_HTML.....dumpData.html
> CONST_DUMP_HOSTS_INDEXES_HTML.....dumpDataIndexes.html
> CONST_DUMP_NTOP_FLOWS_HTML.....dumpFlows.html
> CONST_DUMP_NTOP_HOSTS_MATRIX_HTML.....dumpHostsMatrix.html
> CONST_DUMP_NTOP_XML.....dump.xml
> CONST_DUMP_TRAFFIC_DATA_HTML.....dumpTrafficData.html
> CONST_EDIT_PREFS.....editPrefs.html
> CONST_ETTERCAP_FINGERPRINT.....fingerprint.php
> CONST_ETTERCAP_HOMEPAGE.....http://ettercap.sourceforge.net/
> CONST_FAVICON_ICO.....favicon.ico
> CONST_FC_ACTIVITY_HTML.....fcActivity.html
> CONST_FC_DATA_HTML.....fcData.html
> CONST_FC_HOSTS_INFO_HTML.....fcHostsInfo.html
> CONST_FC_SESSIONS_HTML.....FcSessions.html
> CONST_FC_THPT_HTML.....fcThpt.html
> CONST_FC_TRAFFIC_HTML.....fcShowStats.html
> CONST_FILTER_INFO_HTML.....filterInfo.html
> CONST_FINGERPRINT_LOOP_INTERVAL.....150
> CONST_FTPDATA.....20
> CONST_GRE_PROTOCOL_TYPE.....47
> CONST_HANDLEADDRESSLISTS_CLUSTERS.....undefined
> CONST_HANDLEADDRESSLISTS_MAIN.....0
> CONST_HANDLEADDRESSLISTS_NETFLOW.....2
> CONST_HANDLEADDRESSLISTS_RRD.....yes
> CONST_HASH_INITIAL_SIZE.....32768
> CONST_HOME_HTML.....home.html
> CONST_HOME_UNDERSCORE_HTML.....home_.html
> CONST_HOST_HTML.....host.html
> CONST_HOSTS_INFO_HTML.....hostsInfo.html
> CONST_HOSTS_LOCAL_CHARACT_HTML.....localHostsCharacterization.html
> CONST_HOSTS_LOCAL_FINGERPRINT_HTML.....localHostsFingerprint.html
> CONST_HOST_SORT_NOTE_HTML.....hostSortNote.html
> CONST_HOSTS_REMOTE_FINGERPRINT_HTML.....remoteHostsFingerprint.html
> CONST_HTTP_ACCEPT_ALL.....*/*
> CONST_IMG_ARROW_DOWN.....Descending order, click to reverse
> CONST_IMG_ARROW_UP.....Ascending order, click to reverse
> CONST_IMG_BRIDGE.....Bridge
> CONST_IMG_DHCP_CLIENT.....DHCP Client
> CONST_IMG_DHCP_SERVER.....DHCP Server
> CONST_IMG_DIRECTORY_SERVER.....(nil)
> CONST_IMG_DNS_SERVER.....DNS
> CONST_IMG_FC_VEN_BROCADE.....Brocade Communications Systems, Inc.
> CONST_IMG_FC_VEN_EMULEX.....Emulex Corporation
> CONST_IMG_FC_VEN_SEAGATE.....Seagate Technology
> CONST_IMG_FIBRECHANNEL_SWITCH.....FibreChannel Switch
> CONST_IMG_FTP_SERVER.....(nil)
> CONST_IMG_HAS_P2P.....P2P Server
> CONST_IMG_HAS_USERS.....Users
> CONST_IMG_HIGH_RISK..... High Risk
> CONST_IMG_HTTP_SERVER.....HTTP Server
> CONST_IMG_IMAP_SERVER.....(nil)
> CONST_IMG_LOCK.....Secured URL
> CONST_IMG_LOW_RISK..... Low Risk
> CONST_IMG_MEDIUM_RISK..... Medium Risk
> CONST_IMG_MULTIHOMED.....Multihomed
> CONST_IMG_MULTIVLANED.....Multivlaned
> CONST_IMG_NIC_CARD.....Network Card
> CONST_IMG_NTP_SERVER.....NTP Server
> CONST_IMG_OS_AIX.....OS: AIX
> CONST_IMG_OS_BERKELEY.....OS: BSD Unix
> CONST_IMG_OS_BSD.....OS: BSD Unix
> CONST_IMG_OS_CISCO.....OS: Cisco
> CONST_IMG_OS_HP_JETDIRET.....OS: HP/JetDirect
> CONST_IMG_OS_HP_UX.....OS: HP-UX
> CONST_IMG_OS_IRIX.....OS: Irix
> CONST_IMG_OS_LINUX.....OS: Linux
> CONST_IMG_OS_MAC.....OS: Apple Mac
> CONST_IMG_OS_NOVELL.....OS: Novell
> CONST_IMG_OS_SOLARIS.....OS: Solaris
> CONST_IMG_OS_SUNOS.....OS: SunOS
> CONST_IMG_OS_UNIX.....OS: BSD Unix
> CONST_IMG_OS_WINDOWS.....OS: Windows
> CONST_IMG_POP_SERVER.....(nil)
> CONST_IMG_PRINTER.....Printer
> CONST_IMG_ROUTER.....Router
> CONST_IMG_SCSI_DISK.....SCSI Block Device (disk)
> CONST_IMG_SCSI_INITIATOR.....SCSI Initiator
> CONST_IMG_SMTP_SERVER.....Mail (SMTP)
> CONST_IMG_VOIP_HOST.....VoIP
> CONST_INDEX_HTML.....index.html
> CONST_INDEX_INNER_HTML.....index_inner.html
> CONST_INFOHTML_COL1_WIDTH.....250
> CONST_INFOHTML_COL23_WIDTH.....350
> CONST_INFOHTML_COL2_WIDTH.....175
> CONST_INFOHTML_COL3_WIDTH.....175
> CONST_INFOHTML_WIDTH.....undefined
> CONST_INFO_NTOP_HTML.....info.html
> CONST_INVALIDNETMASK.....-1
> CONST_IP_L_2_L_HTML.....ipL2L.html
> CONST_IP_L_2_R_HTML.....ipL2R.html
> CONST_IP_PROTO_DISTRIB_HTML.....ipProtoDistrib.html
> CONST_IP_PROTO_USAGE_HTML.....ipProtoUsage.html
> CONST_IP_R_2_L_HTML.....ipR2L.html
> CONST_IP_R_2_R_HTML.....ipR2R.html
> CONST_IP_TRAFFIC_MATRIX_HTML.....ipTrafficMatrix.html
> CONST_ISO8601_TIMESPEC.....%Y-%m-%dT%H:%M:%S
> CONST_LEFTMENU_HTML.....leftmenu.html
> CONST_LEFTMENU_NOJS_HTML.....leftmenu-nojs.html
> CONST_LEGEND_BOX_SIZE.....7
> CONST_LOCALE_TIMESPEC.....%c
> CONST_LOCAL_ROUTERS_LIST_HTML.....localRoutersList.html
> CONST_LOG_VIEW_BUFFER_SIZE.....50
> CONST_MAGIC_NUMBER.....1968
> CONST_UNMAGIC_NUMBER.....1290
> CONST_MAILTO_ABDELKADER.....Abdelkader Lahmadi
> CONST_MAILTO_BURTON.....Burton Strauss
> CONST_MAILTO_DINESH.....Dinesh G. Dutt
> CONST_MAILTO_LIST.....mailing list
> CONST_MAILTO_LUCA.....Luca Deri
> CONST_MAILTO_OLIVIER.....Olivier Festor
> CONST_MAILTO_STEFANO.....Stefano Suin
> CONST_MAN_NTOP_HTML.....ntop.html
> CONST_MODIFY_URL.....modifyURL
> CONST_MODIFY_USERS.....modifyUsers
> CONST_MULTICAST_MASK.....-536870912
> CONST_MULTICAST_STATS_HTML.....multicastStats.html
> CONST_NET_FLOWS_HTML.....NetFlows.html
> CONST_NETMASK_ENTRY.....1
> CONST_NETWORK_ENTRY.....0
> CONST_NETWORK_IMAGE_MAP.....network_map.png
> CONST_NETWORK_MAP_HTML.....networkMap.html
> CONST_NTOP_HELP_HTML.....help.html
> CONST_NTOP_LOGO.....ntop_logo.png
> CONST_NTOP_P3P.....ntop.p3p
> CONST_NULL_HDRLEN.....4
> CONST_NUM_TABLE_ROWS_PER_PAGE.....128
> CONST_NUM_TRANSACTION_ENTRIES.....256
> CONST_OSFINGERPRINT_FILE.....etter.finger.os
> CONST_P2C_FILE.....undefined
> CONST_PACKET_QUEUE_LENGTH.....2048
> CONST_PATH_SEP.....47
> CONST_PCAP_NW_INTERFACE_FILE.....pcap file
> CONST_PCTG_HIGH_COLOR.....BGCOLOR=#FF3118
> CONST_PCTG_LOW.....25
> CONST_PCTG_MID.....75
> CONST_PIE_FC_PKT_SZ_DIST.....fcPktSizeDistribPie
> CONST_PIE_INTERFACE_DIST.....interfaceTrafficPie
> CONST_PIE_IP_TRAFFIC.....ipTrafficPie
> CONST_PIE_PKT_CAST_DIST.....pktCastDistribPie
> CONST_PIE_PKT_SIZE_DIST.....pktSizeDistribPie
> CONST_PIE_TTL_DIST.....pktTTLDistribPie
> CONST_PIE_VSAN_CNTL_TRAF_DIST.....vsanControlTrafficDistribPie
> CONST_PLUGIN_ENTRY_FCTN_NAME.....PluginEntryFctn
> CONST_PLUGIN_EXTENSION......so
> CONST_PLUGINS_HEADER.....plugins/
> CONST_PPP_HDRLEN.....4
> CONST_PPP_PROTOCOL_TYPE.....34827
> CONST_PRIVACYCLEAR_HTML.....privacyFlagClear.html
> CONST_PRIVACYFORCE_HTML.....privacyFlagForce.html
> CONST_PRIVACYNOTICE_HTML.....privacyNotice.html
> CONST_PROBLEMRPT_HTML.....ntopProblemReport.html
> CONST_PURGE_HOST.....purgeHost.html
> CONST_REPORT_ITS_DEFAULT.....(default)
> CONST_REPORT_ITS_EFFECTIVE..... (effective)
> CONST_RESET_STATS_HTML.....resetStats.html
> CONST_RFC1945_TIMESPEC.....%a, %d %b %Y %H:%M:%S GMT
> CONST_RRD_EXTENSION......rrd
> CONST_SCSI_BYTES_HTML.....ScsiBytes.html
> CONST_SCSI_STATUS_HTML.....ScsiStatus.html
> CONST_SCSI_TIMES_HTML.....ScsiTimes.html
> CONST_SCSI_TM_HTML.....ScsiTMInfo.html
> CONST_SFLOW_TCPDUMP_MAGIC.....-1582119980
> CONST_SHOW_MUTEX_HTML.....showMutex.html
> CONST_SHOW_PLUGINS_HTML.....showPlugins.html
> CONST_SHOW_PORT_TRAFFIC_HTML.....showPortTraffic.html
> CONST_SHOW_URLS_HTML.....showURLs.html
> CONST_SHOW_USERS_HTML.....showUsers.html
> CONST_SHUTDOWNNOW_NTOP_IMG.....shutdown.gif
> CONST_SHUTDOWN_NTOP_HTML.....shutdown.html
> CONST_SIZE_PCAP_ERR_BUF.....512
> CONST_SORT_DATA_HOST_TRAFFIC_HTML.....dataHostTraffic.html
> CONST_SORT_DATA_IP_HTML.....sortDataIP.html
> CONST_SORT_DATA_PROTOS_HTML.....sortDataProtos.html
> CONST_SORT_DATA_RCVD_HOST_TRAFFIC_HTML.....dataRcvdHostTraffic.html
> CONST_SORT_DATA_SENT_HOST_TRAFFIC_HTML.....dataSentHostTraffic.html
> CONST_SORT_DATA_THPT_HTML.....sortDataThpt.html
> CONST_SORT_DATA_THPT_STATS_HTML.....thptStats.html
> CONST_SSI_MENUBODY_HTML.....menuBody.html
> CONST_SSI_MENUHEAD_HTML.....menuHead.html
> CONST_SSL_CERTF_FILENAME.....undefined
> CONST_SWITCH_NIC_HTML.....switch.html
> CONST_TEXT_INFO_NTOP_HTML.....textinfo.html
> CONST_THPTLABEL_TIMESPEC.....%d/%m
> CONST_THPT_STATS_MATRIX_HTML.....thptStatsMatrix.html
> CONST_TOD_HOUR_TIMESPEC.....%H
> CONST_TOD_NOSEC_TIMESPEC.....%H:%M
> CONST_TOD_WSEC_TIMESPEC.....%H:%M:%S
> CONST_TRAFFIC_STATS_HTML.....trafficStats.html
> CONST_TRAFFIC_SUMMARY_HTML.....trafficSummary.html
> CONST_TRMTU.....2000
> CONST_TWO_MSL_TIMEOUT.....120
> CONST_UNKNOWN_MTU.....65355
> CONST_VIEW_LOG_HTML.....viewLog.html
> CONST_VLAN_LIST_HTML.....vlanList.html
> CONST_VSAN_DETAIL_HTML.....vsanDetail.html
> CONST_VSAN_DISTRIB_HTML.....vsanDistrib.html
> CONST_VSAN_LIST_HTML.....vsanList.html
> CONST_W3C_CHARTYPE_LINE.....
> CONST_W3C_DOCTYPE_LINE_32.....
> CONST_W3C_DOCTYPE_LINE.....
> CONST_W3C_P3P_XML.....w3c/p3p.xml
> CONST_WIN32_PATH_NETWORKS.....networks
> CONST_XML_DOCTYPE_NAME.....ntop_dump
> CONST_XML_DTD_NAME.....ntopdump.dtd
> CONST_XMLDUMP_PLUGIN_NAME.....xmldump
> CONST_XML_TMP_NAME...../tmp/ntop-xml
> CONTACTED_PEERS_THRESHOLD.....1024
> DEFAULT_AS_LOOKUP_URL.....http://ws.arin.net/cgi-bin/whois.pl?queryinput=AS
> DEFAULT_NETFLOW_PORT_STR.....2055
> DEFAULT_NTOP_ACCESS_LOG_FILE.....(null)
> DEFAULT_NTOP_AUTOREFRESH_INTERVAL.....120
> DEFAULT_NTOP_DAEMON_MODE.....0
> DEFAULT_NTOP_DEBUG.....0
> DEFAULT_NTOP_DEBUG_MODE.....0
> DEFAULT_NTOP_DEVICES.....(null)
> DEFAULT_NTOP_DISABLE_PROMISCUOUS.....0
> DEFAULT_NTOP_DOMAIN_NAME.....(nil)
> DEFAULT_NTOP_DONT_TRUST_MAC_ADDR.....0
> DEFAULT_NTOP_ENABLE_SESSIONHANDLE.....yes
> DEFAULT_NTOP_FAMILY.....0
> DEFAULT_NTOP_FCNS_FILE.....(null)
> DEFAULT_NTOP_FILTER_EXPRESSION.....(null)
> DEFAULT_NTOP_FLOW_SPECS.....(null)
> DEFAULT_NTOP_LOCAL_SUBNETS.....(null)
> DEFAULT_NTOP_MAX_HASH_ENTRIES.....8192
> DEFAULT_NTOP_MAX_NUM_SESSIONS.....32768
> DEFAULT_NTOP_MERGE_INTERFACES.....yes
> DEFAULT_NTOP_NUMERIC_IP_ADDRESSES.....0
> DEFAULT_NTOP_OTHER_PKT_DUMP.....0
> DEFAULT_NTOP_P3PCP.....(null)
> DEFAULT_NTOP_P3PURI.....(null)
> DEFAULT_NTOP_PACKET_DECODING.....yes
> DEFAULT_NTOP_PCAP_LOG_FILENAME.....(null)
> DEFAULT_NTOP_PID_DIRECTORY...../var/run
> DEFAULT_NTOP_PIDFILE.....ntop.pid
> DEFAULT_NTOP_PROTO_SPECS.....(null)
> DEFAULT_NTOP_SAMPLING.....yes
> DEFAULT_NTOP_STICKY_HOSTS.....0
> DEFAULT_NTOP_SUSPICIOUS_PKT_DUMP.....0
> DEFAULT_NTOP_TRACK_ONLY_LOCAL.....0
> DEFAULT_NTOP_TRAFFICDUMP_FILENAME.....(null)
> DEFAULT_NTOP_WEB_ADDR.....(null)
> DEFAULT_NTOP_WEB_PORT.....3000
> DEFAULT_SFLOW_PORT_STR.....6343
> DEFAULT_SFLOW_SAMPLING_RATE.....400
> DEFAULT_SNAPLEN.....384
> DEFAULT_SYSLOG_FACILITY.....24
> DEFAULT_TCPWRAP_ALLOW.....undefined
> DEFAULT_TCPWRAP_DENY.....undefined
> DEFAULT_TRACE_LEVEL.....3
> DEFAULT_VSAN.....yes
> DEFAULT_WEBSERVER_REQUEST_QUEUE_LEN.....10
> EMSGSIZE.....90
> ETHERMTU.....1500
> IP_L4_PORT_CHARGEN.....19
> IP_L4_PORT_DAYTIME.....13
> IP_L4_PORT_DISCARD.....9
> IP_L4_PORT_ECHO.....7
> IP_TCP_PORT_FTP.....21
> IP_TCP_PORT_GNUTELLA1.....6346
> IP_TCP_PORT_GNUTELLA2.....6347
> IP_TCP_PORT_GNUTELLA3.....6348
> IP_TCP_PORT_HTTP.....80
> IP_TCP_PORT_HTTPS.....443
> IP_TCP_PORT_IMAP.....143
> IP_TCP_PORT_JETDIRECT.....9100
> IP_TCP_PORT_KAZAA.....1214
> IP_TCP_PORT_MSMSGR.....1863
> IP_TCP_PORT_NTOP.....3000
> IP_TCP_PORT_POP2.....109
> IP_TCP_PORT_POP3.....110
> IP_TCP_PORT_PRINTER.....515
> IP_TCP_PORT_SCCP.....2000
> IP_TCP_PORT_SKYPE.....54045
> IP_TCP_PORT_SMTP.....25
> IP_TCP_PORT_SQUID.....3128
> IP_TCP_PORT_SSH.....22
> IP_TCP_PORT_WINMX.....6699
> IP_UDP_PORT_SIP.....5060
> LEN_ADDRESS_BUFFER.....44
> LEN_CMDLINE_BUFFER.....4096
> LEN_ETHERNET_ADDRESS_DISPLAY.....18
> LEN_ETHERNET_ADDRESS.....6
> LEN_ETHERNET_VENDOR_DISPLAY.....9
> LEN_ETHERNET_VENDOR.....3
> LEN_FC_ADDRESS_DISPLAY.....9
> LEN_FC_ADDRESS.....3
> LEN_FGETS_BUFFER.....512
> LEN_GENERAL_WORK_BUFFER.....1024
> LEN_HUGE_WORK_BUFFER.....4096
> LEN_MEDIUM_WORK_BUFFER.....128
> LEN_SMALL_WORK_BUFFER.....24
> LEN_TIMEFORMAT_BUFFER.....48
> LEN_WWN_ADDRESS_DISPLAY.....24
> LEN_WWN_ADDRESS.....8
> MAKE_NTOP_PACKETSZ_DECLARATIONS.....no
> MAKE_WITH_FORK_COPYONWRITE.....yes
> MAKE_WITH_HTTPSIGTRAP.....no
> MAKE_WITH_LOG_XXXXXX.....no
> MAKE_WITH_NETFLOWSIGTRAP.....no
> MAKE_WITH_SYSLOG.....yes
> MAX_ADDRESSES.....35
> MAX_ALIASES.....35
> MAX_ASSIGNED_IP_PORTS.....1024
> MAXCDNAME.....255
> MAX_DEVICE_NAME_LEN.....64
> MAX_DLT_ARRAY.....123
> MAXDNAME.....1025
> MAX_ELEMENT_HASH.....4096
> MAX_FC_DOMAINS.....240
> MAX_HASHDUMP_ENTRY.....65535
> MAXHOSTNAMELEN.....64
> MAX_HOSTS_CACHE_LEN.....512
> MAX_HOSTS_PURGE_PER_CYCLE.....undefined
> MAX_IP_PORT.....65534
> MAXLABEL.....63
> MAX_LANGUAGES_REQUESTED.....4
> MAX_LANGUAGES_SUPPORTED.....8
> MAX_LASTSEEN_TABLE_SIZE.....4096
> MAX_LEN_SYM_HOST_NAME_HTML.....256
> MAX_LEN_SYM_HOST_NAME.....64
> MAX_LEN_URL.....512
> MAX_LEN_VENDOR_NAME.....64
> MAX_MULTIPLE_VLAN_WARNINGS.....10
> MAX_NFS_NAME_HASH.....12288
> MAX_NODE_TYPES.....8
> MAX_NUM_BAD_IP_ADDRESSES.....3
> MAX_NUM_CONTACTED_PEERS.....8
> MAX_NUM_DEQUEUE_THREADS.....undefined
> MAX_NUM_DEVICES.....32
> MAX_NUM_DEVICES_VIRTUAL.....7
> MAX_NUM_DHCP_MSG.....8
> MAX_NUM_FIN.....4
> MAX_NUM_IGNOREDFLOWS.....32
> MAX_NUM_LIST_ENTRIES.....32
> MAX_NUM_NETWORKS.....64
> MAX_NUM_OS.....256
> MAX_NUM_PROBES.....16
> MAX_NUM_PROTOS.....64
> MAX_NUM_PURGED_SESSIONS.....512
> MAX_NUM_PWFILE_ENTRIES.....64
> MAX_NUM_QUEUED_ADDRESSES.....16384
> MAX_NUM_RECENT_PORTS.....5
> MAX_NUM_ROUTERS.....512
> MAX_NUM_STORED_FLAGS.....4
> MAX_NUM_UNKNOWN_PROTOS.....5
> MAX_PACKET_LEN.....8232
> MAX_PASSIVE_FTP_SESSION_TRACKER.....2048
> MAX_PDA_HOST_TABLE.....4096
> MAX_PER_DEVICE_HASH_LIST.....65535
> MAX_PROCESS_BUFFER.....1024
> MAX_NETFLOW_FLOW_BUFFER.....undefined
> MAX_NETFLOW_RECORD_BUFFER.....undefined
> MAX_RRD_CYCLE_BUFFER.....undefined
> MAX_RRD_PROCESS_BUFFER.....undefined
> MAX_SESSIONS_CACHE_LEN.....512
> MAX_SSL_CONNECTIONS.....undefined
> MAX_SUBNET_HOSTS.....1024
> MAX_TOT_NUM_SESSIONS.....65535
> MAX_USER_VSAN.....1001
> MAX_VLAN.....4096
> MAX_VSANS_GRAPHED.....10
> MAX_VSANS.....4095
> MAX_WEBSERVER_REQUEST_QUEUE_LEN.....20
> MAX_WIN32_NET_ALIASES.....35
> MIN_SLICE_PERCENTAGE.....0
> MIN_WEBSERVER_REQUEST_QUEUE_LEN.....2
> NAME_MAX.....255
> NETFLOW_DEVICE_NAME.....NetFlow-device
> NS_CMPRSFLGS.....192
> NS_MAXCDNAME.....255
> NTOP_PREF_ACCESS_LOG.....ntop.accessLogFile
> NTOP_PREF_DAEMON.....ntop.daemonMode
> NTOP_PREF_DBG_MODE.....ntop.debugMode
> NTOP_PREF_DEVICES.....ntop.devices
> NTOP_PREF_DOMAINNAME.....ntop.domainName
> NTOP_PREF_DUMP_OTHER.....ntop.enableOtherPacketDump
> NTOP_PREF_DUMP_SUSP.....ntop.enableSuspiciousPacketDump
> NTOP_PREF_EN_PROTO_DECODE.....ntop.enablePacketDecoding
> NTOP_PREF_EN_SESSION.....ntop.enableSessionHandling
> NTOP_PREF_FILTER.....ntop.currentFilterExpression
> NTOP_PREF_FLOWSPECS.....ntop.flowSpecs
> NTOP_PREF_IPV4.....ntop.ipv4
> NTOP_PREF_IPV4V6.....ntop.ipv4orv6
> NTOP_PREF_IPV6.....ntop.ipv6
> NTOP_PREF_LOCALADDR.....ntop.localAddresses
> NTOP_PREF_KNOWNADDR.....undefined
> NTOP_PREF_MAPPERURL.....undefined
> NTOP_PREF_MAXHASH.....ntop.maxNumHashEntries
> NTOP_PREF_MAXLINES.....ntop.maxNumLines
> NTOP_PREF_MAXSESSIONS.....ntop.maxNumSessions
> NTOP_PREF_MERGEIF.....ntop.mergeInterfaces
> NTOP_PREF_NOBLOCK.....undefined
> NTOP_PREF_NO_INVLUN.....undefined
> NTOP_PREF_NO_ISESS_PURGE.....ntop.disableInstantSessionPurge
> NTOP_PREF_NO_MUTEX_EXTRA.....ntop.disableMutexExtraInfo
> NTOP_PREF_NO_PROMISC.....ntop.disablePromiscuousMode
> NTOP_PREF_NO_SCHEDYLD.....undefined
> NTOP_PREF_NO_STOPCAP.....undefined
> NTOP_PREF_NO_TRUST_MAC.....ntop.dontTrustMACaddr
> NTOP_PREF_NUMERIC_IP.....ntop.numericFlag
> NTOP_PREF_P3PCP.....ntop.P3Pcp
> NTOP_PREF_P3PURI.....ntop.P3Puri
> NTOP_PREF_PCAP_LOGBASE.....ntop.pcapLogBasePath
> NTOP_PREF_PCAP_LOG.....ntop.pcapLog
> NTOP_PREF_PRINT_FCORIP.....undefined
> NTOP_PREF_PROTOSPECS.....ntop.protoSpecs
> NTOP_PREF_REFRESH_RATE.....ntop.refreshRate
> NTOP_PREF_SAMPLING.....ntop.sampleRate
> NTOP_PREF_SPOOLPATH.....ntop.spoolPath
> NTOP_PREF_SSLPORT.....ntop.sslPort
> NTOP_PREF_STICKY_HOSTS.....ntop.stickyHosts
> NTOP_PREF_TRACE_LVL.....ntop.traceLevel
> NTOP_PREF_TRACK_LOCAL.....ntop.trackOnlyLocalHosts
> NTOP_PREF_USE_SSLWATCH.....undefined
> NTOP_PREF_USE_SYSLOG.....ntop.useSyslog
> NTOP_PREF_VALUE_AF_BOTH.....0
> NTOP_PREF_VALUE_AF_INET6.....10
> NTOP_PREF_VALUE_AF_INET.....2
> NTOP_PREF_VALUE_PRINT_BOTH.....3
> NTOP_PREF_VALUE_PRINT_FCONLY.....2
> NTOP_PREF_VALUE_PRINT_IPONLY.....yes
> NTOP_PREF_W3C.....ntop.w3c
> NTOP_PREF_WEBPORT.....ntop.webPort
> NTOP_PREF_WWN_MAP.....undefined
> NULL_VALUE.....(null)
> PACKETSZ.....512
> PARM_ENABLE_EXPERIMENTAL.....no
> PARM_FORK_CHILD_PROCESS.....yes
> PARM_HOST_PURGE_INTERVAL.....120
> PARM_HOST_PURGE_MINIMUM_IDLE_ACTVSES.....1800
> PARM_HOST_PURGE_MINIMUM_IDLE_NOACTVSES.....600
> PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
> PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
> PARM_PRINT_ALL_SESSIONS.....no
> PARM_SESSION_PURGE_MINIMUM_IDLE.....600
> PARM_SLEEP_LIMIT.....10
> PARM_THROUGHPUT_REFRESH_INTERVAL.....30
> PARM_USE_COLOR.....no
> PARM_USE_HOST.....no
> PARM_USE_MACHASH_INVERT.....yes
> PARM_USE_SESSIONS_CACHE.....no
> PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
> SFLOW_DEVICE_NAME.....sFlow-device
> UNKNOWN_P2P_FILE.....<unknown file>
>
>
> Compile Time: globals-report.h
>
> BASE_PROTOS_IDX.....30
> CHART_FORMAT......png
> DARK_BG.....BGCOLOR="#F3F3F3"
> DISPLAY_FC_ALIAS.....2
> DISPLAY_FC_DEFAULT.....2
> DISPLAY_FC_FCID.....0
> DISPLAY_FC_WWN.....1
> SORT_DATA_HOST_TRAFFIC.....12
> SORT_DATA_IP.....10
> SORT_DATA_PROTOS.....9
> SORT_DATA_RCVD_HOST_TRAFFIC.....4
> SORT_DATA_RECEIVED_IP.....2
> SORT_DATA_RECEIVED_PROTOS.....1
> SORT_DATA_RECEIVED_THPT.....3
> SORT_DATA_SENT_HOST_TRAFFIC.....8
> SORT_DATA_SENT_IP.....6
> SORT_DATA_SENT_PROTOS.....5
> SORT_DATA_SENT_THPT.....7
> SORT_DATA_THPT.....11
> SORT_FC_ACTIVITY.....15
> SORT_FC_DATA.....13
> SORT_FC_THPT.....14
> TABLE_DEFAULTS..... CELLSPACING=0 CELLPADDING=2
> TABLE_OFF.....(nil)
> TABLE_ON.....(nil)
> TD_BG.....(nil)
> TH_BG.....(nil)
> TRAFFIC_STATS.....0
> TR_ON.....onMouseOver="this.bgColor = '#EDF3FE'" onMouseOut ="this.bgColor =
> '#FFFFFF'"
> WHEAT_BG.....undefined
>
>
> PLUGINS:
>
> RRD:
> RRD path...../var/ntop/rrd
> New directory permissions.....0700
> New file umask.....0066
>
>
>
>
>
>
> Rafael Sarres de Almeida
> Analista
> Departamento de Tecnologia da Informação
> Divisão de Administração de Redes
> Tel.:+55 (61) 3414-4148
> E-mail: [email protected]
>
>
> -----Mensagem original-----
> De: [email protected]
> [mailto:[email protected]] Em nome de Luca Deri
> Enviada em: sexta-feira, 20 de agosto de 2010 15:22
> Para: [email protected]
> Assunto: Re: [Ntop-dev] Ntop processing only one packet
>
> Rafael
> please update to 4.0.1 and report me if it works
>
> Thanks Luca
>
> On Aug 20, 2010, at 7:51 PM, Rafael Sarres de Almeida wrote:
>
>> Hi all;
>> I have a problem on my fresh ntop 4.0 installation: Only one packet is
>> processed. I am using sFlow plugin (no interface capture: "-i none" option)
>> and it reports to be receiving a lot of sFlow packets, ntop receives them
>> but only processes one packet. I ran some tests and discovered that, no
>> matter the source (internal NIC or flow), just one packet gets processed
>> and all others are kept queued. I have downgraded ntop to 3.3.10, the last
>> stable before 3.4, and everything looks to be working fine.
>> Changelog for 3.4 informs: "a partially rewritten ntop processing engine to
>> address reliability and performance." Maybe this change in the processing
>> engine have caused a bug in my setup, as the behavior that I see is that
>> almost all the packets (besides the first), no matter the source (internal
>> NIC or flow), is queued and never gets processed. Maybe that new processing
>> engine is getting stuck somehow. I do not think it is a loop because my CPU
>> does not get busy, ntop seems to run idle.
>>
>> Some info from info.html:
>> Packets
>> Received 1,895
>> Processed Immediately 1 (0.1 %)
>> Queued 1,894 (99.9 %)
>> Current Queue (none) 0
>> Maximum Queue (none) 0 (Limit 2048)
>> Current Queue (sFlow-device.2) 1894
>> Maximum Queue (sFlow-device.2) 1894 (Limit 2048)
>>
>>
>>
>> Ntop statistics for the sFlow device:
>> Traffic Report for 'sFlow-device.2' [switch]
>> Packets
>> Dropped (ntop) 0.0% 0
>> Total Received (ntop) 1,606
>> Total Packets Processed 1
>> Unicast 100.0% 1
>> Broadcast 0.0% 0
>> Multicast 0.0% 0
>>
>> Here are the statistics from sFlow plugin:
>> Flow Statistics
>> Received Flows
>> Flow Senders 172.17.205.39 [2,362 pkts]
>>
>> Number of sFlow Packets Rcvd 2,362
>> Number of sFlow Packets with Bad Version 0
>> Number of sFlow Packets Processed 2,362
>> Number of v2 Flows Rcvd 0
>> Number of v4 Flows Rcvd 0
>> Number of v5 Flows Rcvd 2,362
>>
>> Discarded Flows
>> Number of Flows with Bad Data 0
>> Total Number of Flows Processed 0
>>
>> Flow Analisys
>> Number of sFlow Samples Rcvd 1,615
>> Number of sFlow Counter Updates Rcvd 1,734
>>
>> Thanks.
>>
>> <image001.gif>
>> Rafael Sarres de Almeida
>> Analista
>> Departamento de Tecnologia da Informação
>> Divisão de Administração de Redes
>> Tel.:+55 (61) 3414-4148
>> E-mail: [email protected]
>> _______________________________________________
>> Ntop-dev mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
>
> ---
>
> "Debugging is twice as hard as writing the code in the first place.
> Therefore, if you write the code as cleverly as possible, you are, by
> definition, not smart enough to debug it. - Brian W. Kernighan
>
> _______________________________________________
> Ntop-dev mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
> _______________________________________________
> Ntop-dev mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
---
We can't solve problems by using the same kind of thinking we used when we
created them - Albert Einstein
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
