Thank you for the help. the --no-mac solves the problem. The errors I got where only comming from 2 subnets so I suspect that the problem is at some switch(es).
sorry that I did not post any conf. data. I start ntop with #ntop -untop -P /home/ntop (I'm fairly new to ntop so I have not much of a configuration yet :) BTW from what version ntop uses a frozen version of rrd? The FC3 binar I got from dag complained that I should install rrd. Thanks again > First off, the rrdtool version you 'use' is irrelevant. ntop includes a > frozen version of 1.0.49 in the myrrd libraries. > > Second, that message is commonly seen when ntop is seeing the same host > multiple times on the interface - if the host appears multiple times in > the > reports, it will cause this issue. > > It's often a configuration error on your network, such as two machines > configured with the same IP (two MAC addresses = 2 separate host records). > It can also be due to switches which re-write packets - try the --no-mac > option. > > You can run tcpdump on the ntop interface, filtering just for the > offending > host and look at the frame level headers (read man tcpdump for the > option). > > You haven't given us any info on the ntop config, so beyond what it means, > it's hard to say why. > > > -----Burton > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf > Of [EMAIL PROTECTED] > Sent: Tuesday, September 13, 2005 4:46 AM > To: [email protected] > Subject: [Ntop-dev] RRD plugin problem > > Hi, > I use ntop 3.1 and rrdtool 1.0.50 (also tryed 1.2) I have a 2.6 kernel > (fedora) and one ethernet card (eth0) > > when I use ntop with RRD and dump data for Interfaces it works just fine. > > but when I set rrd to dump data for Hosts I get error messedeg every 5 > min. > > the message consists of several messages like below. > > Mon 12 Sep 2005 03:50:24 PM CEST **WARNING** RRD: > rrd_update(/home/ntop/rrd/interfaces/eth0/hosts/172/16/94/11/pktSent.rrd) > error: illegal attempt to update using time 1126533023 when last update > time > is 1126533023 (minimum one second step) > > has anyone a idea what I can to to solve this problem? > > Google has not realy given much relief. > > Thanks > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > > _______________________________________________ > Ntop-dev mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-dev > _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
