Looks like you may be trying to start multiple instances of ntop without specifying a unique directory for each with "-P". Or maybe file system permissions.
From: Riccardo Bortolameotti [mailto:[email protected]] Sent: Friday, October 28, 2011 03:58 AM To: [email protected] <[email protected]> Subject: [Ntop] **ERROR** CHKVER: Unable to connect socket: Connection timed out(110) Hi, i've got a problem. When i try to start ntop from remote, i've problems with socket. I'm connected with this server with ssh. Is it a problem of the server (web connection)? [root@james ~]# ntop --skip-version-check yes -u root Fri Oct 28 12:45:43 2011 NOTE: Interface merge enabled by default Fri Oct 28 12:45:43 2011 Initializing gdbm databases Fri Oct 28 12:45:43 2011 **ERROR** ....open of /usr/local/var/ntop/prefsCache.db failed: Can't be writer Fri Oct 28 12:45:43 2011 Possible solution: please use '-P <directory>' Fri Oct 28 12:45:43 2011 **FATAL_ERROR** GDBM open failed, ntop shutting down... Fri Oct 28 12:45:43 2011 CLEANUP[t139672072771648]: ntop caught signal 2 [state=2] Fri Oct 28 12:45:43 2011 ntop is now quitting... [root@james ~]# ntop --skip-version-check yes -u root Fri Oct 28 12:46:03 2011 NOTE: Interface merge enabled by default Fri Oct 28 12:46:03 2011 Initializing gdbm databases Fri Oct 28 12:46:03 2011 ntop v.4.1.0 (64 bit) Fri Oct 28 12:46:03 2011 Configured on Oct 17 2011 18:05:05, built on Oct 17 2011 18:05:43. Fri Oct 28 12:46:03 2011 Copyright 1998-2011 by Luca Deri <[email protected]<mailto:[email protected]>> Fri Oct 28 12:46:03 2011 Get the freshest ntop from http://www.ntop.org/ Fri Oct 28 12:46:03 2011 NOTE: ntop is running from 'ntop' Fri Oct 28 12:46:03 2011 NOTE: (but see warning on man page for the --instance parameter) Fri Oct 28 12:46:03 2011 NOTE: ntop libraries are in '/usr/local/lib' Fri Oct 28 12:46:03 2011 Initializing ntop Fri Oct 28 12:46:04 2011 Checking eth0 for additional devices Fri Oct 28 12:46:04 2011 Resetting traffic statistics for device eth0 Fri Oct 28 12:46:04 2011 Initializing device eth0 (0) Fri Oct 28 12:46:04 2011 DLT: Device 0 [eth0] is 1, mtu 1514, header 14 Fri Oct 28 12:46:04 2011 Initialized events [mask: 0][path: ] Fri Oct 28 12:46:04 2011 Initializing gdbm databases Fri Oct 28 12:46:04 2011 VENDOR: Loading MAC address table. Fri Oct 28 12:46:04 2011 VENDOR: Checking for MAC address table file Fri Oct 28 12:46:04 2011 VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded Fri Oct 28 12:46:04 2011 VENDOR: ntop continues ok Fri Oct 28 12:46:04 2011 VENDOR: Checking for MAC address table file Fri Oct 28 12:46:04 2011 VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded Fri Oct 28 12:46:04 2011 VENDOR: ntop continues ok Fri Oct 28 12:46:04 2011 Fingerprint: Loading signature file Fri Oct 28 12:46:04 2011 Fingerprint: Checking for Fingerprint file... file Fri Oct 28 12:46:04 2011 Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz' Fri Oct 28 12:46:04 2011 Fingerprint: ...loaded 1765 records Fri Oct 28 12:46:04 2011 Initializing external applications Fri Oct 28 12:46:04 2011 THREADMGMT[t140648351217408]: SFP: Started thread for fingerprinting Fri Oct 28 12:46:04 2011 THREADMGMT[t140648351217408]: SFP: Fingerprint scan thread starting [p17859] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648340727552]: SIH: Started thread for idle hosts detection Fri Oct 28 12:46:04 2011 THREADMGMT[t140648340727552]: SIH: Idle host scan thread starting [p17859] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648330237696]: DNSAR(1): Address resolution thread running Fri Oct 28 12:46:04 2011 THREADMGMT[t140648330237696]: DNSAR(1): Started thread for DNS address resolution Fri Oct 28 12:46:04 2011 THREADMGMT[t140648319747840]: DNSAR(2): Started thread for DNS address resolution Fri Oct 28 12:46:04 2011 THREADMGMT[t140648099346176]: DNSAR(3): Started thread for DNS address resolution Fri Oct 28 12:46:04 2011 Calling plugin start functions (if any) Fri Oct 28 12:46:04 2011 THREADMGMT[t140648319747840]: DNSAR(2): Address resolution thread running Fri Oct 28 12:46:04 2011 GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat Fri Oct 28 12:46:04 2011 GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat Fri Oct 28 12:46:04 2011 INITWEB: Initializing web server Fri Oct 28 12:46:04 2011 INITWEB: Initializing TCP/IP socket connections for web server Fri Oct 28 12:46:04 2011 INITWEB: Initialized socket, port 3000, address (any) Fri Oct 28 12:46:04 2011 INITWEB: Waiting for HTTP connections on port 3000 Fri Oct 28 12:46:04 2011 INITWEB: Starting web server Fri Oct 28 12:46:04 2011 THREADMGMT[t140648088856320]: INITWEB: Started thread for web server Fri Oct 28 12:46:04 2011 Listening on [eth0] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648099346176]: DNSAR(3): Address resolution thread running Fri Oct 28 12:46:04 2011 THREADMGMT[t140648088856320]: WEB: Server connection thread starting [p17859] Fri Oct 28 12:46:04 2011 Loading Plugins Fri Oct 28 12:46:04 2011 Note: SIGPIPE handler set (ignore) Fri Oct 28 12:46:04 2011 THREADMGMT[t140648088856320]: WEB: Server connection thread running [p17859] Fri Oct 28 12:46:04 2011 Searching for plugins in /usr/local/lib/ntop/plugins Fri Oct 28 12:46:04 2011 WEB: ntop's web server is now processing requests Fri Oct 28 12:46:04 2011 SFLOW: Welcome to sFlow.(C) 2002-11 by Luca Deri Fri Oct 28 12:46:04 2011 CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri Fri Oct 28 12:46:04 2011 ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri Fri Oct 28 12:46:04 2011 NETFLOW: Welcome to NetFlow.(C) 2002-11 by Luca Deri Fri Oct 28 12:46:04 2011 RRD: Welcome to Round-Robin Database. (C) 2002-11 by Luca Deri. Fri Oct 28 12:46:04 2011 Calling plugin start functions (if any) Fri Oct 28 12:46:04 2011 RRD: Welcome to the RRD plugin Fri Oct 28 12:46:04 2011 RRD: Mask for new directories is 0700 Fri Oct 28 12:46:04 2011 RRD: Mask for new files is 0066 Fri Oct 28 12:46:04 2011 THREADMGMT: RRD: Started thread (t140648073967360) for data collection Fri Oct 28 12:46:04 2011 THREADMGMT[t140648073967360]: RRD: Data collection thread starting [p17859] Fri Oct 28 12:46:04 2011 INIT: Created pid file (/var/run/ntop.pid) Fri Oct 28 12:46:04 2011 Now running as requested user 'root' (0:0) Fri Oct 28 12:46:04 2011 Note: Reporting device initally set to 0 [eth0] (merged) Fri Oct 28 12:46:04 2011 THREADMGMT[t140648463988800]: ntop RUNSTATE: RUN(4) Fri Oct 28 12:46:04 2011 THREADMGMT[t140648063477504]: NPS(1): Started thread for network packet sniffing [eth0] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648063477504]: NPS(eth0): pcapDispatch thread starting [p17859] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648340727552]: SIH: Idle host scan thread running [p17859] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648351217408]: SFP: Fingerprint scan thread running [p17859] Fri Oct 28 12:46:04 2011 THREADMGMT[t140648063477504]: NPS(eth0): pcapDispatch thread running [p17859] Fri Oct 28 12:46:09 2011 CHKVER: Checking current ntop version at version.ntop.org/version.xml<http://version.ntop.org/version.xml> Fri Oct 28 12:46:14 2011 THREADMGMT[t140648050784000]: RRD: Started thread for throughput data collection Fri Oct 28 12:46:14 2011 THREADMGMT[t140648050784000]: RRD: Throughput data collection: Thread starting [p17859] Fri Oct 28 12:46:14 2011 THREADMGMT[t140648073967360]: RRD: Data collection thread running [p17859] Fri Oct 28 12:46:14 2011 THREADMGMT[t140648050784000]: RRD: Throughput data collection: Thread running [p17859] Fri Oct 28 12:46:30 2011 **ERROR** CHKVER: Unable to connect socket: Connection timed out(110) [root@james ~]# netstat -tulpn | grep :3000 tcp 0 0 0.0.0.0:3000<http://0.0.0.0:3000> 0.0.0.0:* LISTEN 17796/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
