First Crash: May 27 15:03:06 smc-netflow ntop[6921]: *** glibc detected *** /usr/local/bin/ntop: malloc(): smallbin double linked list corrupted: 0x00002aaaba860d70 ***
Second Crash: May 27 15:07:15 smc-netflow ntop[6950]: *** glibc detected *** /usr/local/bin/ntop: double free or corruption (fasttop): 0x000000000e96f380 *** Third Crash: May 27 15:33:57 smc-netflow ntop[7047]: *** glibc detected *** /usr/local/bin/ntop: double free or corruption (fasttop): 0x00002aaac7f4fb70 *** Fourth Crash: May 27 15:44:35 smc-netflow ntop[10123]: *** glibc detected *** /usr/local/bin/ntop: double free or corruption (fasttop): 0x00002aaab46fb4d0 *** I ran NTOP on a small test PC for a month or so without any problems. Of course I was only getting flows from 1 "NetFlow-device", and the PC was a 32bit machine. Is this possibly a 64bit bug? Did I need to do something special on the ./autogen.sh or make steps? I've included as much information as I can think of below, let me know if you need more info. mlh Startup options Command Line Started as.... /usr/local/bin/ntop @/etc/ntop.conf -d -L Resolved to.... /usr/local/bin/ntop --user=ntop --db-file-path=/usr/local/var/ntop --interface=eth1 --use-syslog=daemon --http-server=3000 --local-subnets=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 --domain=smccd.net --daemon -d -L Networks eth1 Local Network 10.0.90.0/24 NetFlow-device.2 Local Network 10.192.0.0/10 NetFlow-device.3 Local Network 10.128.0.0/10 NetFlow-device.4 Local Network 10.64.0.0/10 NetFlow-device.5 Local Network 10.0.0.0/10 Known Networks 10.0.90.0/24 Server is a Dell 2850 server running CentOS 5.5 x86_64 [root@smc-netflow ~]# uname -a Linux smc-netflow.smccd.net 2.6.18-238.9.1.el5 #1 SMP Tue Apr 12 18:10:13 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux NTOP v4.0.3, compiled from source No Errors. NTOP Starts just fine [root@smc-netflow ~]# service ntop start Starting ntop: Processing file /etc/ntop.conf for parameters... Fri May 27 14:20:30 2011 NOTE: Interface merge enabled by default Fri May 27 14:20:30 2011 Initializing gdbm databases /var/log/messages (for start) May 27 14:20:30 smc-netflow ntop[6661]: THREADMGMT[t47952017991104]: ntop RUNSTATE: PREINIT(1) May 27 14:20:30 smc-netflow ntop[6661]: THREADMGMT[t47952017991104]: ntop RUNSTATE: INIT(2) May 27 14:20:30 smc-netflow ntop[6661]: Setting administrator password... May 27 14:20:30 smc-netflow ntop[6661]: Admin password set... May 27 14:20:30 smc-netflow ntop[6661]: ntop v.4.0.3 (64 bit) May 27 14:20:30 smc-netflow ntop[6661]: Configured on May 26 2011 0:47:35, built on May 26 2011 00:49:51. May 27 14:20:30 smc-netflow ntop[6661]: Copyright 1998-2010 by Luca Deri <[email protected]> May 27 14:20:30 smc-netflow ntop[6661]: Get the freshest ntop from http://www.ntop.org/ May 27 14:20:30 smc-netflow ntop[6661]: NOTE: ntop is running from '/usr/local/bin' May 27 14:20:30 smc-netflow ntop[6661]: NOTE: (but see warning on man page for the --instance parameter) May 27 14:20:30 smc-netflow ntop[6661]: NOTE: ntop libraries are in '/usr/local/lib' May 27 14:20:30 smc-netflow ntop[6661]: Initializing ntop May 27 14:20:30 smc-netflow kernel: device eth1 entered promiscuous mode May 27 14:20:30 smc-netflow ntop[6661]: Checking eth1 for additional devices May 27 14:20:30 smc-netflow ntop[6661]: Resetting traffic statistics for device eth1 May 27 14:20:30 smc-netflow ntop[6661]: Initializing device eth1 (0) May 27 14:20:30 smc-netflow ntop[6661]: DLT: Device 0 [eth1] is 1, mtu 1514, header 14 May 27 14:20:30 smc-netflow ntop[6661]: Initialized events [mask: 0][path: ] May 27 14:20:30 smc-netflow ntop[6661]: Initializing gdbm databases May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: Loading MAC address table. May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: Checking for MAC address table file May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: ntop continues ok May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: Checking for MAC address table file May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded May 27 14:20:30 smc-netflow ntop[6661]: VENDOR: ntop continues ok May 27 14:20:30 smc-netflow ntop[6661]: Fingerprint: Loading signature file May 27 14:20:30 smc-netflow ntop[6661]: Fingerprint: Checking for Fingerprint file... file May 27 14:20:30 smc-netflow ntop[6661]: Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz' May 27 14:20:30 smc-netflow ntop[6661]: Fingerprint: ...loaded 1765 records May 27 14:20:30 smc-netflow ntop[6661]: INIT: Parent process is exiting (this is normal) May 27 14:20:30 smc-netflow ntop[6662]: INIT: Bye bye: I'm becoming a daemon... May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t47952017991104]: Now running as a daemon May 27 14:20:30 smc-netflow ntop[6662]: Database support not compiled into ntop May 27 14:20:30 smc-netflow ntop[6662]: Initializing external applications May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1092991296]: SFP: Started thread for fingerprinting May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1103481152]: SIH: Started thread for idle hosts detection May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1113971008]: DNSAR(1): Started thread for DNS address resolution May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1124460864]: DNSAR(2): Started thread for DNS address resolution May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1092991296]: SFP: Fingerprint scan thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1134950720]: DNSAR(3): Address resolution thread running May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1124460864]: DNSAR(2): Address resolution thread running May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1103481152]: SIH: Idle host scan thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1113971008]: DNSAR(1): Address resolution thread running May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1134950720]: DNSAR(3): Started thread for DNS address resolution May 27 14:20:30 smc-netflow ntop[6662]: Calling plugin start functions (if any) May 27 14:20:30 smc-netflow ntop[6662]: GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat May 27 14:20:30 smc-netflow ntop[6662]: GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat May 27 14:20:30 smc-netflow ntop[6662]: SSL is present but https is disabled: use -W <https port> for enabling it May 27 14:20:30 smc-netflow ntop[6662]: INITWEB: Initializing web server May 27 14:20:30 smc-netflow ntop[6662]: INITWEB: Initializing TCP/IP socket connections for web server May 27 14:20:30 smc-netflow ntop[6662]: INITWEB: Initialized socket, port 3000, address (any) May 27 14:20:30 smc-netflow ntop[6662]: INITWEB: Waiting for HTTP connections on port 3000 May 27 14:20:30 smc-netflow ntop[6662]: INITWEB: Starting web server May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1145440576]: INITWEB: Started thread for web server May 27 14:20:30 smc-netflow ntop[6662]: Listening on [eth1] May 27 14:20:30 smc-netflow ntop[6662]: Loading Plugins May 27 14:20:30 smc-netflow ntop[6662]: Searching for plugins in /usr/local/lib/ntop/plugins May 27 14:20:30 smc-netflow ntop[6662]: SFLOW: Welcome to sFlow.(C) 2002-10 by Luca Deri May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1145440576]: WEB: Server connection thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: Note: SIGPIPE handler set (ignore) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1145440576]: WEB: Server connection thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: WEB: ntop's web server is now processing requests May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Welcome to NetFlow.(C) 2002-10 by Luca Deri May 27 14:20:30 smc-netflow ntop[6662]: RRD: Welcome to Round-Robin Database. (C) 2002-10 by Luca Deri. May 27 14:20:30 smc-netflow ntop[6662]: CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri May 27 14:20:30 smc-netflow ntop[6662]: ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri May 27 14:20:30 smc-netflow ntop[6662]: Calling plugin start functions (if any) May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Welcome to the netFlow plugin May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: initializing ',2,3,4,5' devices May 27 14:20:30 smc-netflow ntop[6662]: Creating dummy interface, 'NetFlow-device.2' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: initializing deviceId=1 May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: White list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Black list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Created a UDP socket (9) May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Collector listening on port 9982 May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1155930432]: NETFLOW: Started thread for receiving flows on port 9982 May 27 14:20:30 smc-netflow ntop[6662]: Initializing device NetFlow-device.2 (1) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1155930432]: NETFLOW: thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: **WARNING** NETFLOW: Truncated network size(device NetFlow-device.2) to 1024 hosts(real netmask 255.192.0.0). May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: createNetFlowDevice created device 1 May 27 14:20:30 smc-netflow ntop[6662]: Creating dummy interface, 'NetFlow-device.3' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: initializing deviceId=2 May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: White list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Black list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Created a UDP socket (10) May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Collector listening on port 9983 May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1166420288]: NETFLOW: Started thread for receiving flows on port 9983 May 27 14:20:30 smc-netflow ntop[6662]: Initializing device NetFlow-device.3 (2) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1166420288]: NETFLOW: thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: **WARNING** NETFLOW: Truncated network size(device NetFlow-device.3) to 1024 hosts(real netmask 255.192.0.0). May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: createNetFlowDevice created device 2 May 27 14:20:30 smc-netflow ntop[6662]: Creating dummy interface, 'NetFlow-device.4' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: initializing deviceId=3 May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: White list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Black list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Created a UDP socket (11) May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Collector listening on port 9984 May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1176910144]: NETFLOW: Started thread for receiving flows on port 9984 May 27 14:20:30 smc-netflow ntop[6662]: Initializing device NetFlow-device.4 (3) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1176910144]: NETFLOW: thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: **WARNING** NETFLOW: Truncated network size(device NetFlow-device.4) to 1024 hosts(real netmask 255.192.0.0). May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: createNetFlowDevice created device 3 May 27 14:20:30 smc-netflow ntop[6662]: Creating dummy interface, 'NetFlow-device.5' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: initializing deviceId=4 May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: White list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Black list initialized to '' May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Created a UDP socket (12) May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: Collector listening on port 9981 May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1187400000]: NETFLOW: Started thread for receiving flows on port 9981 May 27 14:20:30 smc-netflow ntop[6662]: Initializing device NetFlow-device.5 (4) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1187400000]: NETFLOW: thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: **WARNING** NETFLOW: Truncated network size(device NetFlow-device.5) to 1024 hosts(real netmask 255.192.0.0). May 27 14:20:30 smc-netflow ntop[6662]: NETFLOW: createNetFlowDevice created device 4 May 27 14:20:30 smc-netflow ntop[6662]: RRD: Welcome to the RRD plugin May 27 14:20:30 smc-netflow ntop[6662]: RRD: Mask for new directories is 0700 May 27 14:20:30 smc-netflow ntop[6662]: RRD: Mask for new files is 0066 May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT: RRD: Started thread (t1197889856) for data collection May 27 14:20:30 smc-netflow ntop[6662]: INIT: Created pid file (/var/run/ntop.pid) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1197889856]: RRD: Data collection thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t47952017991104]: ntop RUNSTATE: INITNONROOT(3) May 27 14:20:30 smc-netflow ntop[6662]: Now running as requested user 'ntop' (103:105) May 27 14:20:30 smc-netflow ntop[6662]: Note: Reporting device initally set to 1 [2SKY] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t47952017991104]: ntop RUNSTATE: RUN(4) May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1208379712]: NPS(1): Started thread for network packet sniffing [eth1] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1208379712]: NPS(eth1): pcapDispatch thread starting [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1208379712]: NPS(eth1): pcapDispatch thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1103481152]: SIH: Idle host scan thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1166420288]: NETFLOW: (port 9983) thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1155930432]: NETFLOW: (port 9982) thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1187400000]: NETFLOW: (port 9981) thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1176910144]: NETFLOW: (port 9984) thread running [p6662] May 27 14:20:30 smc-netflow ntop[6662]: THREADMGMT[t1092991296]: SFP: Fingerprint scan thread running [p6662] May 27 14:20:35 smc-netflow ntop[6662]: CHKVER: Checking current ntop version at version.ntop.org/version.xml May 27 14:20:35 smc-netflow ntop[6662]: CHKVER: Version file is from 'version.ntop.org' May 27 14:20:35 smc-netflow ntop[6662]: CHKVER: as of date is '2010-10-06T01:12:25' May 27 14:20:35 smc-netflow ntop[6662]: CHKVER: This version of ntop is the CURRENT stable version May 27 14:20:40 smc-netflow ntop[6662]: THREADMGMT[t1218869568]: RRD: Started thread for throughput data collection May 27 14:20:40 smc-netflow ntop[6662]: THREADMGMT[t1197889856]: RRD: Data collection thread running [p6662] May 27 14:20:40 smc-netflow ntop[6662]: THREADMGMT[t1218869568]: RRD: Throughput data collection: Thread starting [p6662] May 27 14:20:40 smc-netflow ntop[6662]: THREADMGMT[t1218869568]: RRD: Throughput data collection: Thread running [p6662] --------------------------------------------------------------------- Michael L Hart Network Manager San Mateo County Community College District Information Technology Services voice:650.358.6709 mailto:[email protected] http://www.smccd.edu<http://www.smccd.edu/> 1700 W Hillsdale Blvd, Building 25 ITS San Mateo CA 94402
_______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
