Hi all, I got ntop v2.1.3 as sourcecode-package and compiled it under SuSE 8.0 without errors. When I install it so it can sniff the nettraffic in a network with nearly 100 PCs, it crashes from time to time. When I run it in a debugger I got Segmentation fault. The dump is in the file dump.txt, which I hope isn't to big. Please can you tell me what I did wrong or is it a failure of the program? The complete command lineyou can see in the dump, the ntop version is as told 2.1.3 und the operating system is SuSE 8.0.
greetings Ralf K�llenbach
(gdb) run ntop -S 1 -P /ftp/rko/ -t 5 -u root Starting program: /usr/bin/ntop ntop -S 1 -P /ftp/rko/ -t 5 -u root [New Thread 1024 (LWP 8812)] Wait please: ntop is coming up... 15/Jan/2003 13:27:58 [initialize.c:116] Initializing IP services... 15/Jan/2003 13:27:58 [initialize.c:527] Initializing GDBM... 15/Jan/2003 13:27:58 [initialize.c:778] Initializing network devices... 15/Jan/2003 13:27:58 [main.c:828] ntop v.2.1.3 MT [i686-suse-linux] (01/15/03 10:09:27 AM build) 15/Jan/2003 13:27:58 [main.c:847] Listening on [eth0] 15/Jan/2003 13:27:58 [main.c:848] Copyright 1998-2002 by Luca Deri <[EMAIL PROTECTED]> 15/Jan/2003 13:27:58 [main.c:849] Get the freshest ntop from http://www.ntop.org/ 15/Jan/2003 13:27:58 [main.c:850] Initializing... 15/Jan/2003 13:27:58 [initialize.c:1140] Truncated network size to 1024 hosts (real netmask 255.255.255.0) 15/Jan/2003 13:27:58 [plugin.c:334] Loading plugins (if any)... 15/Jan/2003 13:27:58 [plugin.c:352] Searching plugins in /usr/local/lib/ntop/plugins 15/Jan/2003 13:27:58 [icmpPlugin.c:470] Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri. 15/Jan/2003 13:27:59 [lastSeenPlugin.c:411] Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea Marangoni. 15/Jan/2003 13:28:00 [netflowPlugin.c:472] Welcome to NetFlow. (C) 2002 by Luca Deri. 15/Jan/2003 13:28:00 [nfsPlugin.c:352] Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri. 15/Jan/2003 13:28:01 [pdaPlugin.c:319] Welcome to PDAPlugin. (C) 2001-2002 by L.Deri and W.Brock 15/Jan/2003 13:28:02 [sflowPlugin.c:1944] Welcome to sFlowPlugin. (C) 2002 by Luca Deri. 15/Jan/2003 13:28:03 [initialize.c:407] Resetting traffic statistics... [New Thread 2049 (LWP 8813)] [New Thread 1026 (LWP 8814)] 15/Jan/2003 13:28:04 [initialize.c:655] Started thread (1026) for network packet analyser. [New Thread 2051 (LWP 8815)] 15/Jan/2003 13:28:04 [initialize.c:668] Started thread (2051) for idle hosts detection. [New Thread 3076 (LWP 8816)] 15/Jan/2003 13:28:04 [initialize.c:692] Started thread (3076) for DNS address resolution. [New Thread 4101 (LWP 8817)] 15/Jan/2003 13:28:04 [initialize.c:701] Started thread (4101) for address purge. 15/Jan/2003 13:28:04 [plugin.c:425] Initializing plugins (if any)... 15/Jan/2003 13:28:04 [netflowPlugin.c:91] NetFlow export disabled Please enter the password for the admin user: Please enter the password again: 15/Jan/2003 13:28:24 [admin.c:990] Admin user password has been set. 15/Jan/2003 13:28:24 [webInterface.c:3008] Waiting for HTTP connections on port 3000... [New Thread 5126 (LWP 8818)] 15/Jan/2003 13:28:24 [webInterface.c:3024] Started thread (5126) for web server. 15/Jan/2003 13:28:24 [main.c:928] Sniffying... [New Thread 6151 (LWP 8819)] 15/Jan/2003 13:28:25 [initialize.c:1293] Started thread (6151) for network packet sniffing on eth0. 15/Jan/2003 13:28:32 [hash.c:685] Extending hash size [newSize=512][deviceId=0] +*++++++++++++++++++***********+++++++++++++++++++**************+++++++++++++********++++++++++++++++++++++++++++++++++****++++++++++++++++++**************+++++++++++******** Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 6151 (LWP 8819)] 0x40400a40 in strcmp () from /lib/libc.so.6 (gdb) help List of classes of commands: aliases -- Aliases of other commands breakpoints -- Making program stop at certain points data -- Examining data files -- Specifying and examining files internals -- Maintenance commands obscure -- Obscure features running -- Running the program stack -- Examining the stack status -- Status inquiries support -- Support facilities tracepoints -- Tracing of program execution without stopping the program user-defined -- User-defined commands Type "help" followed by a class name for a list of commands in that class. Type "help" followed by command name for full documentation. Command name abbreviations are allowed if unambiguous. (gdb) stack Undefined command: "stack". Try "help". (gdb) help stack Examining the stack. The stack is made up of stack frames. Gdb assigns numbers to stack frames counting from zero for the innermost (currently executing) frame. At any time gdb identifies one frame as the "selected" frame. Variable lookups are done with respect to the selected frame. When the program being debugged stops, gdb selects the innermost frame. The commands below can be used to select other frames by number or address. List of commands: backtrace -- Print backtrace of all stack frames bt -- Print backtrace of all stack frames down -- Select and print stack frame called by this one frame -- Select and print a stack frame return -- Make selected stack frame return to its caller select-frame -- Select a stack frame without printing anything up -- Select and print stack frame that called this one Type "help" followed by command name for full documentation. Command name abbreviations are allowed if unambiguous. (gdb) bt #0 0x40400a40 in strcmp () from /lib/libc.so.6 #1 0x400fce8c in updateHTTPVirtualHosts (virtualHostName=0x855e308 "ads9.speedbit.com", theRemHost=0x8756408, bytesSent=188, bytesRcvd=252) at sessions.c:110 #2 0x400ff77b in handleSession (h=0xbedff9bc, fragmentedData=0, tcpWin=50243, srcHostIdx=186, sport=80, dstHostIdx=50, dport=1919, length=54, tp=0xbedff67c, packetDataLength=14, packetData=0x8286118 "\r\n;Build1762\r\nK\r\nServer: Microsoft-IIS/5.0\r\nDate: Wed, 15 Jan 2003 13:06:57 GMT\r\nConnection: close\r\n� \037��i\207���y�\t@\233�\034�\235�q��\200�@\214�s\004\231�\005�\036��\214\034\203a��M\220.=�\224\030���6_(�����\0309�|�/[$J��\215��\a�!a", actualDeviceId=0) at sessions.c:1229 #3 0x40100a03 in handleTCPSession (h=0xbedff9bc, fragmentedData=0, tcpWin=50243, srcHostIdx=186, sport=80, dstHostIdx=50, dport=1919, length=54, tp=0xbedff67c, tcpDataLength=14, packetData=0x8286118 "\r\n;Build1762\r\nK\r\nServer: Microsoft-IIS/5.0\r\nDate: Wed, 15 Jan 2003 13:06:57 GMT\r\nConnection: close\r\n� \037��i\207���y�\t@\233�\034�\235�q��\200�@\214�s\004\231�\005�\036��\214\034\203a��M\220.=�\224\030���6_(�����\0309�|�/[$J��\215��\a�!a", actualDeviceId=0) at sessions.c:1570 #4 0x400f55ef in processIpPkt (bp=0x82860f0 "E", h=0xbedff9bc, length=68, ether_src=0xbedff96a "", ether_dst=0xbedff964 "", actualDeviceId=0) at pbuf.c:789 #5 0x400f8c62 in processPacket (_deviceId=0x0, h=0xbedff9bc, p=0x82860e2 "") at pbuf.c:2178 #6 0x4032521b in pcap_read_packet () from /usr/lib/libpcap.so.0 #7 0x403266ab in pcap_dispatch () from /usr/lib/libpcap.so.0 #8 0x400f1cb1 in pcapDispatch (_i=0x0) at ntop.c:107 #9 0x4034ce67 in pthread_start_thread () from /lib/libpthread.so.0 #10 0x4034ceb5 in pthread_start_thread_event () from /lib/libpthread.so.0 (gdb)
