hi, 

Here is a little modified code of the netFlowplugin.c (which is the probable place 
where my netflow plugin crashes).
I have added manualy several traceEvent's so that I can localize the place where this 
happens.. It seems to be getHostInfo() which causes the blow-up.. Hope it will help 
solving the problem...


===================snippet=======================================
#ifdef MULTITHREADED
      /* accessMutex(&myGlobals.hostsHashMutex, "processNetFlowPacket"); */
#endif
     traceEvent(TRACE_INFO, "going to get dstHostIdx .....");                 
      dstHostIdx = getHostInfo(&b, NULL, 0, 1, myGlobals.netFlowDeviceId);
      dstHost = 
myGlobals.device[actualDeviceId].hash_hostTraffic[checkSessionIdx(dstHostIdx)];
       traceEvent(TRACE_INFO, "dstHostIdx: %d", dstHostIdx); 
        traceEvent(TRACE_INFO, "going to get srcHostIdx .....");                       
      
      srcHostIdx = getHostInfo(&a, NULL, 0, 1, myGlobals.netFlowDeviceId);
        traceEvent(TRACE_INFO, "succesfuly retrieved.....");                  
      srcHost = 
myGlobals.device[actualDeviceId].hash_hostTraffic[checkSessionIdx(srcHostIdx)];
      
 traceEvent(TRACE_INFO, "srcHostIdx: %d", srcHostIdx);

=========================trace================================
30/Sep/2002 14:42:47  6) 213.16.56.42:1281 <-> 212.50.10.151:80 pkt=4/len=559 
sAS=0/dAS=0 flags=[SYN ACK PUSH] (proto=6)
30/Sep/2002 14:42:47 a=708317397
30/Sep/2002 14:42:47 going to get dstHostIdx .....
30/Sep/2002 14:42:47 dstHostIdx: 3
30/Sep/2002 14:42:47 going to get srcHostIdx .....
30/Sep/2002 14:42:47 succesfuly retrieved .....
30/Sep/2002 14:42:47 srcHostIdx: 2
30/Sep/2002 14:42:47 0/0
30/Sep/2002 14:42:47  7) 212.50.10.151:80 <-> 213.16.56.42:1281 pkt=1/len=40 
sAS=0/dAS=0 flags=[FIN ACK ] (proto=6)
30/Sep/2002 14:42:47 a=2534027988
30/Sep/2002 14:42:47 going to get dstHostIdx .....
30/Sep/2002 14:42:47 dstHostIdx: 2
30/Sep/2002 14:42:47 going to get srcHostIdx .....
30/Sep/2002 14:42:47 succesfuly retrieved .....
30/Sep/2002 14:42:47 srcHostIdx: 3
30/Sep/2002 14:42:47 0/0
30/Sep/2002 14:42:47  8) 213.16.56.42:1281 <-> 212.50.10.151:80 pkt=2/len=80 
sAS=0/dAS=0 flags=[RST ACK ] (proto=6)
30/Sep/2002 14:42:47 a=708317397
30/Sep/2002 14:42:47 going to get dstHostIdx .....
30/Sep/2002 14:42:47 dstHostIdx: 3
30/Sep/2002 14:42:47 going to get srcHostIdx .....
30/Sep/2002 14:42:47 succesfuly retrieved .....
30/Sep/2002 14:42:47 srcHostIdx: 2
30/Sep/2002 14:42:47 0/0
30/Sep/2002 14:42:47 after dissectFlow...
*Added a new hash_hostTraffic entry [00:30:94:4D:C6:00//213.16.56.4/8]
*Added a new hash_hostTraffic entry [00:30:94:4D:C6:00//212.50.0.36/9]
Added a new hash_hostTraffic entry [00:60:52:07:EF:26///10]
*Added a new hash_hostTraffic entry [00:30:94:4D:C6:00//64.12.28.169/11]
30/Sep/2002 14:42:59 Received NetFlow packet (len=264) (deviceId=1)
30/Sep/2002 14:42:59 before for...
30/Sep/2002 14:42:59 before dissectFlow...
30/Sep/2002 14:42:59 dissectFlow(5 flows)
30/Sep/2002 14:42:59  1) 213.16.56.5:0 <-> 213.16.56.4:771 pkt=1/len=368 sAS=0/dAS=0 
flags=[ACK ] (proto=1)
30/Sep/2002 14:42:59 a=87560405
30/Sep/2002 14:42:59 going to get dstHostIdx .....
30/Sep/2002 14:42:59 ntop caught signal 11
30/Sep/2002 14:42:59 


*****ntop error: Signal(11)
30/Sep/2002 14:42:59 
     backtrace is:
30/Sep/2002 14:42:59            1. /lib/libpthread.so.0 [0x4036c5bb]
30/Sep/2002 14:42:59            2. /lib/libc.so.6 [0x403cb478]
30/Sep/2002 14:42:59            3. 
/arh/compile/ntop-current/ntop/.libs/libntop-2.1.so.51(getHostInfo+0x3dc) [0x400f35bc]
30/Sep/2002 14:42:59            4. ./plugins/netflowPlugin.so [0x4032a92b]
30/Sep/2002 14:42:59            5. ./plugins/netflowPlugin.so [0x4032b91f]
30/Sep/2002 14:42:59            6. /lib/libpthread.so.0 [0x403690ce]
30/Sep/2002 14:42:59            7. /lib/libc.so.6(__clone+0x3a) [0x4048c73a]
30/Sep/2002 14:42:59 Cleaning up...
30/Sep/2002 14:42:59 Waiting until threads terminate...




















_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop

Reply via email to