Hi all; I have a problem on my fresh ntop 4.0 installation: Only one packet is processed. I am using sFlow plugin (no interface capture: "-i none" option) and it reports to be receiving a lot of sFlow packets, ntop receives them but only processes one packet. I tried running ntop with root user, --disable-stopcap, and other options with no luck. I did not see any problem in the ntop log, just the plugin Lastseen that fails to start with this message: LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni Wed Aug 18 15:27:19 2010 **ERROR** LASTSEEN: Unable to open LsWatch database ((null)/LsWatch.db)- the plugin will be disabled Wed Aug 18 15:27:19 2010 **WARNING** Plugin 'lastSeenPlugin.so' discarded: compiled for a different ntop version Wed Aug 18 15:27:19 2010 **WARNING** Expected ntop version '3.3.10', actual plugin ntop version '4.0'.
Some data: Ntop statistics for the sFlow device: Traffic Report for 'sFlow-device.2' [switch] Packets Dropped (ntop) 0.0% 0 Total Received (ntop) 1,606 Total Packets Processed 1 Unicast 100.0% 1 Broadcast 0.0% 0 Multicast 0.0% 0 Here are the statistics from sFlow plugin: Flow Statistics Received Flows Flow Senders 172.17.205.39 [2,362 pkts] Number of sFlow Packets Rcvd 2,362 Number of sFlow Packets with Bad Version 0 Number of sFlow Packets Processed 2,362 Number of v2 Flows Rcvd 0 Number of v4 Flows Rcvd 0 Number of v5 Flows Rcvd 2,362 Discarded Flows Number of Flows with Bad Data 0 Total Number of Flows Processed 0 Flow Analisys Number of sFlow Samples Rcvd 1,615 Number of sFlow Counter Updates Rcvd 1,734 Any help is greatly appreciated. Thanks. [cid:[email protected]] Rafael Sarres de Almeida Analista Departamento de Tecnologia da Informação Divisão de Administração de Redes Tel.:+55 (61) 3414-4148 E-mail: [email protected]
<<inline: image001.gif>>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
