First off, the rrdtool version you 'use' is irrelevant.  ntop includes a
frozen version of 1.0.49 in the myrrd libraries.

Second, that message is commonly seen when ntop is seeing the same host
multiple times on the interface - if the host appears multiple times in the
reports, it will cause this issue.  

It's often a configuration error on your network, such as two machines
configured with the same IP (two MAC addresses = 2 separate host records).
It can also be due to switches which re-write packets - try the --no-mac
option.

You can run tcpdump on the ntop interface, filtering just for the offending
host and look at the frame level headers (read man tcpdump for the option).

You haven't given us any info on the ntop config, so beyond what it means,
it's hard to say why.


-----Burton


-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf
Of [EMAIL PROTECTED]
Sent: Tuesday, September 13, 2005 4:46 AM
To: [email protected]
Subject: [Ntop-dev] RRD plugin problem

Hi,
   I use ntop 3.1 and rrdtool 1.0.50 (also tryed 1.2) I have a 2.6 kernel
(fedora) and one ethernet card (eth0)

when I use ntop with RRD and dump data for Interfaces it works just fine.

but when I set rrd to dump data for Hosts I get error messedeg every 5 min.

the message consists of several messages like below.

Mon 12 Sep 2005 03:50:24 PM CEST  **WARNING** RRD:
rrd_update(/home/ntop/rrd/interfaces/eth0/hosts/172/16/94/11/pktSent.rrd)
error: illegal attempt to update using time 1126533023 when last update time
is 1126533023 (minimum one second step)

has anyone a idea what I can to to solve this problem?

Google has not realy given much relief.

Thanks
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to