Gents,

As requested by Luca, please open an issue for this case on the tracker so
development and debugging can be properly followed up with.
Thanks in advance for understanding.

Regards,

Lorenzo Mangani
[email protected]

NL: +31 20 8080468
US: +1 202 6327227
IT: +39 075 9696117


On Fri, Nov 27, 2015 at 5:05 PM, Bidwell, Christopher <[email protected]>
wrote:

> Some new developments in my dilemma -- Some background here:
>
> The four interfaces that I'm monitoring are on network taps.  My primary
> interface, I tested while disabling the other four, seemed to work with no
> packet loss at first just like the others but once again I got packet loss
> (100% over time).  I'm frustrated because this worked before.  Any help on
> troubleshooting this issue would be appreciated.
>
>
>
> On Tue, Nov 24, 2015 at 12:46 AM, Luca Deri <[email protected]> wrote:
>
>> Hi Aneip,
>> can you please move this discussion to github and specify how you have
>> started ntopng (exact command line )?
>>
>> Thanks Luca
>>
>> On 24 Nov 2015, at 03:17, aneip <[email protected]> wrote:
>>
>> Happen to me also on vmware. If I got to interface page, than the capture
>> will start. Then I upgrade to nightly build, then the problem disappear.
>>
>>
>>
>> On Tuesday, 24 November 2015, 2:57, "Bidwell, Christopher" <
>> [email protected]> wrote:
>>
>>
>> The console logs don't show anything out of the ordinary.  Here is my
>> interface info:
>>
>> p2p1: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
>>         inet6 fe80::210:18ff:fef5:5e88  prefixlen 64  scopeid 0x20<link>
>>         inet6 2001:49c8:8004:c:210:18ff:fef5:5e88  prefixlen 64  scopeid
>> 0x0<global>
>>         ether 00:10:18:f5:5e:88  txqueuelen 1000  (Ethernet)
>>         RX packets 472063327  bytes 459189177218 (427.6 GiB)
>>         RX errors 0  dropped 0  overruns 0  frame 0
>>         TX packets 390  bytes 39148 (38.2 KiB)
>>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>         device interrupt 48
>>
>> p2p2: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
>>         ether 00:10:18:f5:5e:89  txqueuelen 1000  (Ethernet)
>>         RX packets 331838275  bytes 71318212775 (66.4 GiB)
>>         RX errors 0  dropped 0  overruns 0  frame 0
>>         TX packets 0  bytes 0 (0.0 B)
>>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>         device interrupt 52
>>
>> p2p3: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
>>         ether 00:10:18:f5:5e:8a  txqueuelen 1000  (Ethernet)
>>         RX packets 711698467  bytes 373968329299 (348.2 GiB)
>>         RX errors 0  dropped 0  overruns 0  frame 0
>>         TX packets 0  bytes 0 (0.0 B)
>>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>         device interrupt 48
>>
>> p2p4: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST>  mtu 1500
>>         ether 00:10:18:f5:5e:8b  txqueuelen 1000  (Ethernet)
>>         RX packets 792712602  bytes 648435476003 (603.9 GiB)
>>         RX errors 0  dropped 0  overruns 0  frame 0
>>         TX packets 0  bytes 0 (0.0 B)
>>         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0
>>         device interrupt 52
>>
>> On Mon, Nov 23, 2015 at 11:23 AM, Simone Mainardi <[email protected]>
>> wrote:
>>
>> Could you please check ntopng console output? Do you notice any error?
>>
>> May I ask you the average load of these interfaces? thanks
>>
>> simone
>>
>> On Mon, Nov 23, 2015 at 7:19 PM, Bidwell, Christopher <[email protected]>
>> wrote:
>>
>> Thanks for the quick response.  I've narrowed it down to one host and
>> have disabled sticky hosts as well, restarted ntop and it worked for about
>> 15 seconds and then packet loss starts to build up again.  Hmmm...This used
>> to work with an older version of ntop.  I upgraded and am experiencing
>> these issues.
>>
>> I'm stumped.
>>
>> On Mon, Nov 23, 2015 at 11:14 AM, Simone Mainardi <[email protected]>
>> wrote:
>>
>> Chris, thanks for contacting us. I would suggest to follow up using the
>> issue tracker here https://github.com/ntop/ntopng/issues/266
>>
>> thanks
>> simone
>>
>> On Mon, Nov 23, 2015 at 7:08 PM, Bidwell, Christopher <[email protected]>
>> wrote:
>>
>> Hi all,
>>
>> I've submitted this as a bug but I'm not so sure it's a bug as it may be
>> something local that I haven't been able to figure out.
>>
>> I've got 4 interfaces running ntop and they all have 100% packet loss.
>> If I restart ntop, it works for a short while but then starts to lose
>> packets again.
>>
>> Does anyone have any ides?
>>
>> Here are all my version info and specs:
>>
>> Version 2.1.151120 - Professional Edition
>> Platform x86_64-unknown-linux-gnu (x86_64) - 64 bit
>> Built on CentOS Linux release 7.1.1503 (Core)
>> Currently Logged User cbidwell [Administrator]
>> Uptime 2 days, 23 h, 39 min, 28 sec
>>
>> nDPI 1.7.1-dev-248-ec034da
>>  Twitter Bootstrap 3.x
>>  Font Awesome 4.x
>> RRDtool 1.4.8
>> Redis Server 2.8.19
>> Mongoose web server 3.7
>> LuaJIT LuaJIT 2.0.3
>> ØMQ 4.0.5
>> GeoIP 1.5.0
>>
>> This product includes GeoLite data created by MaxMind.
>> Data-Driven Documents (d3js) 2.9.1 / 3.0
>>
>> Thanks,
>> Chris
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>>
>> --
>> Chris Bidwell, CISSP, CEH, CPT
>> National Earthquake Information Center
>> US Geological Survey
>> email: [email protected]
>> work: 303-273-8642
>> mobile: 303-435-6362
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>>
>>
>> _______________________________________________
>> Ntop mailing list
>> [email protected]
>> http://listgateway.unipi.it/mailman/listinfo/ntop
>>
>
>
>
> --
>
> Chris Bidwell, CISSP, CEH, CPT
> National Earthquake Information Center
> US Geological Survey
> email: [email protected]
> work: 303-273-8642
> mobile: 303-435-6362
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to