This is what I am getting when running ntop with the -D switch: root@cetnik:~# ntop -d Wait please: ntop is coming up... 06/Jul/2002 10:28:50 SSL is present but https is disabled: use -W <https port> for enabling it 06/Jul/2002 10:28:50 Initializing IP services... 06/Jul/2002 10:28:50 Initializing SSL... 06/Jul/2002 10:28:50 Bye bye: I'm becoming a daemon... root@cetnik:~# ps axf | grep ntop 1589 pts/1 S 0:00 \_ grep ntop 1577 ? S 0:00 ntop -d 1578 ? S 0:00 \_ ntop -d 1579 ? S 0:00 \_ ntop -d 1580 ? S 0:00 \_ ntop -d 1581 ? S 0:00 \_ ntop -d 1582 ? S 0:00 \_ ntop -d 1583 ? S 0:00 \_ ntop -d 1584 ? S 0:00 \_ ntop -d 1585 ? S 0:00 \_ ntop -d 1586 ? S 0:00 \_ ntop -d 1587 ? S 0:00 \_ ntop -d
As Chris said now you should be able to visit ntop's site at http://127.0.0.1:3000 It that does not work then something is wrong with your setup I'd assume. You might want to give it a try running ntop as following: ntop <switches> & > /dev/null This will run ntop in the background and forward its messages to stdout to the null device. Cheers, Adrian >From: [EMAIL PROTECTED] >Reply-To: [EMAIL PROTECTED] >To: [EMAIL PROTECTED] >Subject: Ntop digest, Vol 1 #485 - 5 msgs >Date: Sat, 06 Jul 2002 12:00:01 +0200 >MIME-Version: 1.0 >Received: from [131.114.21.27] by hotmail.com (3.2) with ESMTP id >MHotMailBEF00AAE000C400431C98372151B0E4C0; Sat, 06 Jul 2002 03:00:16 -0700 >Received: (qmail 62542 invoked from network); 6 Jul 2002 10:01:01 -0000 >Received: from localhost (HELO fuji.unipi.it) (127.0.0.1) by 0 with SMTP; >6 Jul 2002 10:01:01 -0000 >From [EMAIL PROTECTED] Sat, 06 Jul 2002 03:01:44 -0700 >Message-ID: <[EMAIL PROTECTED]> >X-Mailer: Mailman v2.0.10 >Sender: [EMAIL PROTECTED] >Errors-To: [EMAIL PROTECTED] >X-BeenThere: [EMAIL PROTECTED] >X-Mailman-Version: 2.0.10 >Precedence: bulk >X-Reply-To: [EMAIL PROTECTED] >List-Unsubscribe: ><http://lists.ntop.org/mailman/listinfo/ntop>,<mailto:[EMAIL PROTECTED]?subject=unsubscribe> >List-Id: Ntop user's list <ntop.unipi.it> >List-Post: <mailto:[EMAIL PROTECTED]> >List-Help: <mailto:[EMAIL PROTECTED]?subject=help> >List-Subscribe: ><http://lists.ntop.org/mailman/listinfo/ntop>,<mailto:[EMAIL PROTECTED]?subject=subscribe> >List-Archive: <http://lists.ntop.org/pipermail/ntop/> > >Send Ntop mailing list submissions to > [EMAIL PROTECTED] > >To subscribe or unsubscribe via the World Wide Web, visit > http://lists.ntop.org/mailman/listinfo/ntop >or, via email, send a message with subject or body 'help' to > [EMAIL PROTECTED] > >You can reach the person managing the list at > [EMAIL PROTECTED] > >When replying, please edit your Subject line so it is more specific >than "Re: Contents of Ntop digest..." > > >Today's Topics: > > 1. Database problem (Bp Sm) > 2. RE: Database problem (Burton M. Strauss III) > 3. RE: Ntop dies on Segmentation Fault (Burton M. Strauss III) > 4. Snapshot (Michael Baird) > 5. RE: Not able to make ntop work as a daemon (Chris Nicola) > >--__--__-- > >Message: 1 >Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy >From: "Bp Sm" <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Date: Fri, 05 Jul 2002 16:35:33 +0200 >Subject: [Ntop] Database problem >Reply-To: [EMAIL PROTECTED] > >Hello! > >We have problem with ntop and mySQL. We have created the tables for the >database, like the pattern ntop sends to the database. > >CREATE TABLE TCPsessions (Client VARCHAR(16), Server VARCHAR(16), >CLientPort >VARCHAR(20), ServerPort(20), DataSent(20), DataRcvd(20), FirstSeen(20), >LastSeen(20)); > >and then started ntop with the following command: ntop -P <db path> -u ><user> -b localhost.localdomain:3306 > >Then ntop starts, and it looks like ntop is sending info to the database, >with insert into command. But when we check the database after quiting ntop >the database is empty. > >We have tried -v option and -b option and only -v option, then ntop says >unknown ntop option. Any suggestion what to do? > >/Grepen and Jansson > > > >_________________________________________________________________ >Skicka snabbmeddelanden till dina v�nner online med MSN Messenger: >http://messenger.msn.se > > >--__--__-- > >Message: 2 >Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy >From: "Burton M. Strauss III" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Cc: <[EMAIL PROTECTED]> >Subject: RE: [Ntop] Database problem >Date: Fri, 5 Jul 2002 10:01:40 -0500 >Reply-To: [EMAIL PROTECTED] > >What is your EXACT command string when it seems to run (mask off the >password, please) > >Are you running mySQL in autocommit mode (the default)? >http://www.mysql.com/doc/C/O/COMMIT.html > >Any messages in the ntop log about insert problems? > >What's the rest of the environment? > >How do you know it's sending to the dbms? > >You may need to insert some debugging-type traceEvent() statements in >mysql.c to show what's sent and the return code... > >Did you really use the create table syntax you show? What about field >types? The usual statements are in database/mySQLdefs.txt > >-----Burton > > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Bp Sm >Sent: Friday, July 05, 2002 9:36 AM >To: [EMAIL PROTECTED] >Subject: [Ntop] Database problem > > >Hello! > >We have problem with ntop and mySQL. We have created the tables for the >database, like the pattern ntop sends to the database. > >CREATE TABLE TCPsessions (Client VARCHAR(16), Server VARCHAR(16), >CLientPort >VARCHAR(20), ServerPort(20), DataSent(20), DataRcvd(20), FirstSeen(20), >LastSeen(20)); > >and then started ntop with the following command: ntop -P <db path> -u ><user> -b localhost.localdomain:3306 > >Then ntop starts, and it looks like ntop is sending info to the database, >with insert into command. But when we check the database after quiting ntop >the database is empty. > >We have tried -v option and -b option and only -v option, then ntop says >unknown ntop option. Any suggestion what to do? > >/Grepen and Jansson > > > >_________________________________________________________________ >Skicka snabbmeddelanden till dina v�nner online med MSN Messenger: >http://messenger.msn.se > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://lists.ntop.org/mailman/listinfo/ntop > > >--__--__-- > >Message: 3 >Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy >From: "Burton M. Strauss III" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Cc: <[EMAIL PROTECTED]> >Subject: RE: [Ntop] Ntop dies on Segmentation Fault >Date: Fri, 5 Jul 2002 10:21:17 -0500 >Reply-To: [EMAIL PROTECTED] > >List won't help - the segfault is in gdbm code > >#0 0x404c4813 in gdbm_store () from /usr/lib/libgdbm.so.2 > > >Need to see what's going on up one level: > >#1 0x400d30e3 in handleLsPacket (_deviceId=0xbebff6d4 "", h=0xbebff9ec, > p=0x82347f8 "") at lastSeenPlugin.c:88 > >Either > >(gdb) frame 1 >(gdb) list >(gdb) print <this&that> > >or > >(gdb) bt full > >-----Burton > > >-----Original Message----- >From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of >Massimo Carnevali >Sent: Friday, July 05, 2002 4:51 AM >To: [EMAIL PROTECTED] >Subject: [Ntop] Ntop dies on Segmentation Fault > > >Hi, >my fresh new installation keeps on working for about 15 minutes then dies >on "Segmentation Fault". >This is my environment: >Command line: ntop -P /var/ntop -u ntop -d -r 10 -E -L -S 1 >Version: 2.0.99.RC2 >Linux Version: Red Hat 7.2 Kernel 2.4.9-31 on i686 >gcc: 2.96 >glibc: 2.2.4-24 >Compilation and build: left all defaults >gdb output: >++++++++++++++++++++++++++++++++++++++++++++++++++ >[root@morgana ntop]# gdb /usr/local/bin/ntop >GNU gdb Red Hat Linux (5.1-1) >Copyright 2001 Free Software Foundation, Inc. >GDB is free software, covered by the GNU General Public License, and you >are >welcome to change it and/or distribute copies of it under certain >conditions. >Type "show copying" to see the conditions. >There is absolutely no warranty for GDB. Type "show warranty" for details. >This GDB was configured as "i386-redhat-linux"... >(gdb) set args -P /var/ntop -u root -r 10 -E -L -S 1 -K -t 5 >(gdb) run >Starting program: /usr/local/bin/ntop -P /var/ntop -u root -r 10 -E -L -S 1 >-K -t 5 >[New Thread 1024 (LWP 27856)] >Wait please: ntop is coming up... >SSL is present but https is disabled: use -W <https port> for enabling it > >[New Thread 2049 (LWP 28853)] >[New Thread 1026 (LWP 28854)] >[New Thread 2051 (LWP 28856)] >[New Thread 3076 (LWP 28857)] >[New Thread 4101 (LWP 28858)] >[New Thread 5126 (LWP 28859)] >[New Thread 6151 (LWP 28860)] >[New Thread 7176 (LWP 28861)] >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >**************************************************************************** >****************************************** >Program received signal SIGSEGV, Segmentation fault. >[Switching to Thread 7176 (LWP 28861)] >0x404c4813 in gdbm_store () from /usr/lib/libgdbm.so.2 >(gdb) list >706 /* ************************************ */ >707 >708 /* That's the meat */ >709 #ifdef WIN32 >710 int ntop_main(int argc, char *argv[]) { >711 #else >712 int main(int argc, char *argv[]) { >713 #endif >714 int i, userSpecified; >715 char ifStr[196] = {0}; >(gdb) info stack >#0 0x404c4813 in gdbm_store () from /usr/lib/libgdbm.so.2 >#1 0x400d30e3 in handleLsPacket (_deviceId=0xbebff6d4 "", h=0xbebff9ec, > p=0x82347f8 "") at lastSeenPlugin.c:88 >#2 0x4027d2e7 in flowsProcess (h=0xbebff9ec, p=0x82347f8 "", deviceId=0) > at pbuf.c:1476 >#3 0x4027f2ae in processPacket (_deviceId=0x0, h=0xbebff9ec, p=0x82347f8 >"") > at pbuf.c:2330 >#4 0x404a8ba3 in pcap_read_packet (handle=0x8234658, > callback=0x4027d5c4 <processPacket>, userdata=0x0) at >./pcap-linux.c:446 >#5 0x404a9c4a in pcap_dispatch (p=0x8234658, cnt=1, > callback=0x4027d5c4 <processPacket>, user=0x0) at ./pcap.c:62 >#6 0x40278064 in pcapDispatch (_i=0x0) at ntop.c:107 >#7 0x40220f87 in pthread_start_thread (arg=0xbebffc00) at manager.c:284 >++++++++++++++++++++++++++++++++++++++++++++++++++ >syslog output: >++++++++++++++++++++++++++++++++++++++++++++++++++ >Jul 2 11:29:50 morgana ntop[27856]: Initializing IP services... >Jul 2 11:29:50 morgana ntop[27856]: Initializing GDBM... >Jul 2 11:29:50 morgana ntop[27856]: Initializing network devices... >Jul 2 11:29:50 morgana ntop[27856]: ntop v.2.0.99 MT (SSL) >[i686-pc-linux-gnu] (07/02/02 10:25:21 AM build) >Jul 2 11:29:50 morgana ntop[27856]: Listening on [eth0] >Jul 2 11:29:50 morgana ntop[27856]: Copyright 1998-2002 by Luca Deri ><[EMAIL PROTECTED]> >Jul 2 11:29:50 morgana ntop[27856]: Get the freshest ntop from >http://www.ntop.org/ >Jul 2 11:29:50 morgana ntop[27856]: Initializing... >Jul 2 11:29:50 morgana ntop[27856]: Loading plugins (if any)... >Jul 2 11:29:50 morgana ntop[27856]: Searching plugins in >/usr/local/lib/ntop/plugins >Jul 2 11:29:50 morgana kernel: eth0: Setting promiscuous mode. >Jul 2 11:29:50 morgana kernel: device eth0 entered promiscuous mode >Jul 2 11:29:52 morgana ntop[27856]: Welcome to icmpWatchPlugin. (C) 1999 >by Luca Deri. >Jul 2 11:29:53 morgana ntop[27856]: Welcome to LastSeenWatchPlugin. (C) >1999 by Andrea Marangoni. >Jul 2 11:29:54 morgana ntop[27856]: Welcome to NetFlow. (C) 2002 by Luca >Deri. >Jul 2 11:29:55 morgana ntop[27856]: Welcome to nfsWatchPlugin. (C) 1999 by >Luca Deri. >Jul 2 11:29:56 morgana ntop[27856]: Welcome to PDAPlugin. (C) 2001-2002 by >L.Deri and W.Brock >Jul 2 11:29:57 morgana ntop[27856]: Welcome to sFlowPlugin. (C) 2002 by >Luca Deri. >Jul 2 11:29:57 morgana ntop[27856]: Resetting traffic statistics... >Jul 2 11:29:58 morgana ntop[28854]: Wait please: reading lsof >information... >Jul 2 11:29:58 morgana ntop[27856]: Started thread (1026) for lsof >support. >Jul 2 11:29:58 morgana ntop[27856]: Started thread (2051) for network >packet analyser. >Jul 2 11:29:58 morgana ntop[27856]: Started thread (3076) for idle hosts >detection. >Jul 2 11:29:58 morgana ntop[27856]: Started thread (4101) for DNS address >resolution. >Jul 2 11:29:59 morgana ntop[28854]: readLsofInfo completed (1 sec). >Jul 2 11:29:59 morgana ntop[27856]: Started thread (5126) for address >purge. >Jul 2 11:29:59 morgana ntop[27856]: Initializing plugins (if any)... >Jul 2 11:29:59 morgana ntop[27856]: Waiting for HTTP connections on port >3000... >Jul 2 11:29:59 morgana ntop[27856]: Started thread (6151) for web server. >Jul 2 11:29:59 morgana ntop[27856]: Sniffying... >Jul 2 11:29:59 morgana ntop[28861]: Extending hash size >[newSize=512][deviceId=0] >Jul 2 11:29:59 morgana ntop[27856]: Started thread (7176) for network >packet sniffing on eth0. >Jul 2 11:30:47 morgana ntop[28861]: Extending hash size >[newSize=1024][deviceId=0] >Jul 2 11:31:00 morgana ntop[28854]: Wait please: reading lsof >information... >Jul 2 11:31:01 morgana ntop[28854]: readLsofInfo completed (1 sec). >Jul 2 11:32:01 morgana ntop[28854]: Wait please: reading lsof >information... >Jul 2 11:32:01 morgana ntop[28854]: readLsofInfo completed (0 sec). >Jul 2 11:32:47 morgana ntop[28860]: Thanks for using LsWatch... >Jul 2 11:32:47 morgana ntop[28860]: Done. >++++++++++++++++++++++++++++++++++++++++++++++++++ >any help/hints/suggestions ? > >Thanks Massimo Carnevali > >Massimo Carnevali - IBM Global Services >[EMAIL PROTECTED] > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://lists.ntop.org/mailman/listinfo/ntop > > >--__--__-- > >Message: 4 >Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy >From: Michael Baird <[EMAIL PROTECTED]> >To: [EMAIL PROTECTED] >Date: 05 Jul 2002 13:27:11 -0400 >Subject: [Ntop] Snapshot >Reply-To: [EMAIL PROTECTED] > >I haven't been able to grab a new snapshot from snapshot.ntop.org the >last couple of days, is there a problem with the ftp server, the machine >does respond to ping request fine. > >Regards >MIKE > > > > >--__--__-- > >Message: 5 >Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy >Subject: RE: [Ntop] Not able to make ntop work as a daemon >Date: Fri, 5 Jul 2002 15:22:55 -0700 >From: "Chris Nicola" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Reply-To: [EMAIL PROTECTED] > >Probably because it is running in the background. You will have to use = >the web site to access the NTOP stats when it is run as a daemon. I = >could be wrong about this, I don't use the deamon mode I run it as a = >service instead, but I am supposing it provides the same results. > >Chris > >-----Original Message----- >From: Murriware [mailto:[EMAIL PROTECTED]] >Sent: July 2, 2002 7:16 AM >To: [EMAIL PROTECTED] >Subject: [Ntop] Not able to make ntop work as a daemon > >notp works correctly on terminal mode but if I switch to daemon mode = >(-d), >it reports "bye bye I'm becoming a daemon..." and then nothing else = >happens? > >Why? > >Thank you >Maurizio >----- Original Message ----- >From: "Michael Baird" <[EMAIL PROTECTED]> >To: <[EMAIL PROTECTED]> >Sent: Tuesday, July 02, 2002 3:54 PM >Subject: Re: [Ntop] limiting amount of memory > > > > I'm testing/using ntop at an ISP, monitoring the network traffic via = >the > > netflow plugin, I keep up with each new daily snapshot (it crashes or > > makes the machine become unresponsive still in this scenario), I have > > 768MB of RAM/Dual Celeron 466, Linux 2.4.18 kernel it will last about = >a > > day. Seems to crash many times while looking at the web interface. > > > > Regards > > MIKE > > > > On Tue, 2002-07-02 at 07:11, Luca Deri wrote: > > > Inaki Sanchez wrote: > > > > > > > Hi all: > > > > > > > > Is there a way, for ntop 2.0.99rc2 to limit the amount of memory = >to > > > >use? In previous versions there was "-s hash-size", which has > > > >disappeared. I've got a box with 256 Mb. of RAM, and ntop is using > > > >+370Mb, with a hostsInfo.db file of 450 Mb. > > > > > > > > Thanks, > > > > > > > > --Inaki. > > > >_______________________________________________ > > > >Ntop mailing list > > > >[EMAIL PROTECTED] > > > >http://lists.ntop.org/mailman/listinfo/ntop > > > > > > > > > > > Hi all, > > > I would like to start a thread about ntop usage. What I can tell you = >is: > > > - bear in mind that ntop will monitor all the traffic it sees (many > > > hosts =3D a lot of load =3D a lot of memory) > > > - you must start ntop according to your needs (for instance have a = >look > > > at -B and -j flags) > > > - you don't often need to capture all the traffic for finding out = >what's > > > going on. > > > > > > In your case Inaki, can you please tell us more about your = >environment? > > > > > > Cheers, Luca > > > > > > -- > > > Luca Deri NETikos S.p.A. > > > Via Matteucci 34/B 56124 Pisa, Italy. > > > Ph. +39/050/968.639 Fax. +39/050/968.626 > > > Personal: [EMAIL PROTECTED] Business: [EMAIL PROTECTED] > > > WWW: http://luca.ntop.org/ ICQ: 68183632 > > > Hacker: someone who loves to program and enjoys being > > > clever about it - Richard Stallman > > > > > > > > > > > > _______________________________________________ > > > Ntop mailing list > > > [EMAIL PROTECTED] > > > http://lists.ntop.org/mailman/listinfo/ntop > > > > > > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://lists.ntop.org/mailman/listinfo/ntop > > > > > > > > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://lists.ntop.org/mailman/listinfo/ntop > > >--__--__-- > >_______________________________________________ >Ntop mailing list >[EMAIL PROTECTED] >http://lists.ntop.org/mailman/listinfo/ntop > > >End of Ntop Digest _________________________________________________________________ Chat with friends online, try MSN Messenger: http://messenger.msn.com _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop
