I sent two pcap files directly to Luca. In the meantime I compiled and installed ntop on another server to verify that there isn't a problem if the recording of the probe and the analysis of the flow takes place on the same server. Unfortunately there was the same behavior as before: After some seconds, ntop crashes...
In /var/log/messages I found to following information: Feb 9 12:24:59 dtsmo1 kernel: [ 2858.708801] ntop[4279]: segfault at 19e ip 00007fae8933de8e sp 00007fae7ff58310 error 4 in libntopreport-4.1.2.so[7fae8930e000+7f000] Feb 9 12:25:07 dtsmo1 kernel: [ 2866.394141] ntop[4267]: segfault at 18 ip 00007fae8893b76c sp 00007fae7ccc38b0 error 4 in libc-2.11.1.so[7fae888c4000+17a000] nProbe was started with the following parameters on the existing server: sudo /usr/local/bin/nprobe -V 9 -i eth0 -n 192.168.1.97:2055 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %L7_PROTO %L7_PROTO_NAME" -b 1 Is there a list of all dependencies for ntop and nProbe? I just want to make sure that I don't forget anything and this is the reason for the problem. Thanks. Stefan -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Luca Deri Sent: Mittwoch, 8. Februar 2012 21:04 To: [email protected] Subject: Re: [Ntop] ntop crashes (segfault error) Stefan are you able to capture enough packets sent by nProbe to ntop (full packets please) and send them to me on a pcap file so I can reproduce the bug? Thanks Luca On Feb 8, 2012, at 8:34 PM, Graber Stefan wrote: > Hi, > > My employer decided to analyze the network traffic with NetFlow. But I hit on > problems while using the today's SVN version of ntop in combination with > nProbe Pro 6.9.1. The recording of the probe and the analysis of the flow > takes place on the same server. > > If I start ntop, I can use the service without any problems. But as soon as I > start nProbe for generating the flow, I takes about some seconds and ntop > crashes. Within the /var/log/messages I found the following information: > > Feb 8 19:46:33 dtsmo2 kernel: [90342.148238] ntop[15366]: segfault at be5 ip > 00007f2f2a62173a sp 00007f2f1e8a7680 error 4 in > libc-2.11.1.so[7f2f2a5aa000+17a000] > > Unfortunately I was not able to find out why ntop crashes. There are a lot of > search results for 'segfault libc-2.11.1.so' in Google, but no one with a > solution - at least I didn't found it ;) Are there any other logs (maybe from > ntop itself) which probably give me additional information? What could be the > problem? > > As this is my first installation of ntop / nProbe, I'll describe shortly my > procedure. As a first step I installed a dedicated server with Ubuntu Linux > x64 10.04.3 with the latest updates. Afterwards I compiled and installed > nProbe Pro and ntopl. Attached you'll a list with each step and the > corresponding commands - maybe I forgot an important one? > > Additionally vou'll find my ntop configuration as a second attachment. > > Thanks for your support. > > Stefan _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
