Christian, looking at the figures below I see that ntop is growing too much. This could either - be a bug (eg. memory leak) or - you're configuring ntop in a not-so-perfect way
Since the beginning of the year I'm running ntop with a Juniper box and everything seems to be fine. However I have tuned ntop for my environment and I have avoided to use NetFlow as in our environment we use other tools. It might be that ntop needs some further tuning when used with NetFlow support. Could you please tell me more about your router (model, capabilities, etc.) and the environment where you're running it? NOTE: the serial cache will constantly and slowly grow until you restart ntop. This is an open, known issue. Thanks, Luca Christian Hammers wrote: > > Hello > > On Fri, May 03, 2002 at 11:14:49AM -0500, Burton M. Strauss III wrote: > > First off, I don't see the fix in the cvs... my .patch is still applying to > > 04May2002 snapshot and I still see the bad line in hash.c (it's now at 554, the > Ok, applied it. Made things very worse. The following top output was made > after 15min. The CPU was 0 in the first 10-12 minutes and then increased > in a short time period: > > top: > 6688 ntop 13 5 149M 147M 1140 S N 0.0 29.4 0:00 ntop1 > 6712 ntop 13 5 149M 147M 1140 S N 0.0 29.4 0:00 ntop1 > 6713 ntop 13 5 149M 147M 1140 S N 0.0 29.4 0:00 ntop1 > 6714 ntop 13 5 149M 147M 1140 S N 0.0 29.4 0:07 ntop1 > 6715 ntop 13 5 149M 147M 1140 S N 0.0 29.4 0:00 ntop1 > 6716 ntop 17 5 149M 147M 1140 R N 97.0 29.4 7:01 ntop1 > 409 root 9 0 49892 48M 1028 S 0.0 9.7 29:15 bgpd > 404 root 9 0 23172 22M 668 S 0.0 4.5 1:47 zebra > > -rw-r--r-- 1 root root 189186 May 6 12:31 serialCache.db > > I recompiled and put the following line (the on you deleted in patch BMS0063) > in again and ntop is quite stable again after 15min: > > 7667 ntop 13 5 13452 11M 1140 S N 0.0 2.2 0:00 ntop1 > 7668 ntop 13 5 13452 11M 1140 S N 0.0 2.2 0:02 ntop1 > 7669 ntop 13 5 13452 11M 1140 S N 0.0 2.2 0:00 ntop1 > 7670 ntop 16 5 13452 11M 1140 R N 0.9 2.2 0:07 ntop1 > > -rw-r--r-- 1 root root 98945 May 6 12:54 serialCache.db > > > Still, serialCache depends totally on how many IPs and MAC addresses ntop > > sees... > Before that over the weekend I had a 9MB serialCache file. If you think > that the 100K file I have now is not ok, then I will mail it to you. > Sadly, I didn't saved that 9MB :-( > > bye, > > -christian- > > -- > Christian Hammers WESTEND GmbH - Aachen und Dueren Tel 0241/701333-0 > [EMAIL PROTECTED] Internet & Security for Professionals Fax 0241/911879 > WESTEND ist CISCO Systems Partner - Authorized Reseller > > _______________________________________________ > Ntop-dev mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev -- Luca Deri NETikos S.p.A. Via Matteucci 34/B 56124 Pisa, Italy. Ph. +39/050/968.639 Fax. +39/050/968.626 Personal: [EMAIL PROTECTED] Business: [EMAIL PROTECTED] WWW: http://www.lucaderi.org/ ICQ: 68183632 Hacker: someone who loves to program and enjoys being clever about it - Richard Stallman _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
