Ntop is pretty nifty but it has yet to run for over 4 days before it stops.
This is the only program that the computer is running. Please let me know
if there is any other information you require to resolve this problem.
n t o p v e r s i o n '2.2.4' p r o b l e m r e p o r t
From: Adam Beach
EMail: [EMAIL PROTECTED]
Date: 2003-08-01 12:48:54 GMT
Problem Report Id: PR_PRTZU2
----------------------------------------------------------------------------
Summary
OS: Windows NT version: 4.0 SP 6a
ntop from: win32 binary (rpm, source, ports, etc.)
Hardware: CPU: PII 400 (i86, SPARC, etc.)
# Processors: 1
Memory: 256 MB
Network:
Merged packet counts:
Ethernet: ?
Broadcast: ?
IP: ?
Network Interface 0 \Device\NPF_El90x1 3Com 3C90x Ethernet Adapter
Mfg: 3Com Model: 3c905b
NIC Speed: 100Mb Bus: PCI
Location: LAN
Bandwidth:100Mbps+
# Hosts (machines): 5
----------------------------------------------------------------------------
Log extract
>From the Windows NT Application Event Log:
Date 8/1/03
Time 12:06:47 AM
User N/A
Computer NTOPTEST
Event ID 4097
Source: Dr. Watson
Type: information
Category None
The application, , generated an application error The error occurred on 8/
1/2003 @ 0: 6:47.682 The exception generated was c0000005 at address
0051592b (<nosymbols>)
Date 7/30/03
Time 10:39:26 AM
User N/A
Computer NTOPTEST
Event ID 4097
Source: Dr. Watson
Type: information
Category None
The application, , generated an application error The error occurred on
7/30/2003 @ 10:39:26.515 The exception generated was c0000005 at address
00509fe7 (<nosymbols>)
----------------------------------------------------------------------------
Problem Description
Ntop generates a Dr. Watson error.
"An applicaton error has occured and an application error is being
generated"
ntop.exe
Exception: access violation (0xc0000005), Address (0x005592b)
The ntop service stops, no longer listed as a running service in the Service
Manager or Task Manager.
----------------------------------------------------------------------------
ntop version.....2.2.4
Built on.....07/15/03 3:55:29 AM
OS.....WinNT/2K/XP
Command line
Started as....C:\Program Files\ntop-Win32\ntop.exe
Resolved to....C:\Program Files\ntop-Win32\ntop.exe
Command line parameters are:
-a | --access-log-path.....(default) (nil)
-b | --disable-decoders.....(default) No
-c | --sticky-hosts.....(default) No
-e | --max-table-rows.....(default) 128
-f | --traffic-dump-file.....(default) (nil)
-g | --track-local-hosts.....(default) Track all hosts
-o | --no-mac.....(default) Trust MAC Addresses
-i | --interface (effective).....\Device\NPF_El90x1
-k | --filter-expression-in-extra-frame.....(default) No
-l | --pcap-log.....(default) (nil)
-m | --local-subnets (effective).....
-n | --numeric-ip-addresses.....(default) No
-p | --protocols.....(default) internal list
-q | --create-suspicious-packets.....(default) Disabled
-r | --refresh-time.....(default) 120
-s | --no-promiscuous.....(default) No
-t | --trace-level.....(default) 3
-w | --http-server.....(default) Active, all interfaces, port 3000
-z | --disable-sessions.....(default) No
-B | --filter-expression.....(default) none
-D | --domain.....none
-E | --enable-external-tools.....(default) No
-F | --flow-spec.....(default) none
-M | --no-interface-merge (effective).....(default) (Merging Interfaces)
Yes
-O | --pcap-file-path.....C:\Program Files\ntop-Win32
-P | --db-file-path.....C:\Program Files\ntop-Win32
-Q | --spool-file-path.....C:\Program Files\ntop-Win32
-U | --mapper.....(default) (nil)
--p3p-cp.....(default) none
--p3p-uri.....(default) none
--disable-stopcap.....(default) No
Note: (effective) means that this is the value after ntop has processed
the parameter.
(default) means this is the default value, usually (but not always) set by
a #define in globals-defines.h.
Run time/Internal
Web server URL.....http://any:3000
GDBM version.....GDBM version 1.8.3. 10/15/2002
WinPcap version.....3.0 alpha3
zlib version.....1.1.4
Protocol Decoders.....Enabled
Fragment Handling.....Enabled
Tracking only local hosts.....No
# IP Protocols Being Monitored.....17
# Protocol slots.....32768
# IP Ports Being Monitored.....53
# IP Ports slots.....106
# Handled SIGPIPE Errors.....0
# Handled HTTP Requests.....29
Devices (Network Interfaces).....1
Domain name (short).....
IP to country flag table (entries).....12
Total Hash Collisions (Vendor/Special) (lookup).....0
Local Networks.....192.25.10.0/255.255.255.0 [device 3Com 3C90x Ethernet
Adapter]
Memory Usage
IPX/SAP Hash Size (bytes).....1897
IP to country flag table (bytes).....1320 (0.0 MB)
Bytes per entry.....110.0
Host Memory Cache
Limit.....#define MAX_HOSTS_CACHE_LEN 512
Current Size.....0
Maximum Size.....0
# Entries Reused.....0
MAC/IPX Hash tables
IPX/SAP Hash Size (entries).....179
IPX/SAP Hash Collisions (load).....0
IPX/SAP Hash Collisions (use).....0
Packet queue
Queued to Process.....0
Maximum queue.....704
Host/Session counts - global
Purged hosts.....0
Maximum hosts to purge per cycle.....512
DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512
Terminated Sessions.....0
Host/Session counts - Device 0 (\Device\NPF_El90x1)
Hash Bucket Size.....1.4 KB
Actual Hash Size.....16384
Stored hosts.....11 [0 %]
Max host lookup.....0
Session Bucket Size.....196
Sessions.....6
Max Num. Sessions.....6
Address Resolution
DNS sniffed:
DNS Packets sniffed.....0
less 'requests'.....0
less 'failed'.....0
less 'reverse dns' (in-addr.arpa).....0
DNS Packets processed.....0
Stored in cache (includes aliases).....0
IP to name - ipaddr2str():
Total calls.....7
....OK.....0
....Total not found.....7
........Not found in cache.....7
........Too old in cache.....0
Queued - dequeueAddress():
Total Queued.....7
Not queued (duplicate).....0
Maximum Queued.....4
Current Queue.....3
Resolved - resolveAddress():
Addresses to resolve.....4
....less 'Error: No cache database'.....0
....less 'Found in ntop cache'.....0
Gives: # gethost (DNS lookup) calls.....4
DNS lookup calls:
DNS resolution attempts.....4
....Success: Resolved.....4
....Failed.....0
........HOST_NOT_FOUND.....0
........NO_DATA.....0
........NO_RECOVERY.....0
........TRY_AGAIN (don't store).....0
........Other error (don't store).....0
DNS lookups stored in cache.....4
Host addresses kept numeric.....0
Vendor Lookup Table
Input lines read.....0
Records added total.....0
.....includes special records.....0
getVendorInfo() calls.....0
getSpecialVendorInfo() calls.....10
Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
Found 24bit (xx:xx:xx) match.....0
Found multicast bit set.....1
Found LAA (Locally assigned address) bit set.....0
Thread counts
Active.....0
Dequeue.....1
Children (active).....0
Directory (search) order
Data Files......
C:\Program Files\ntop-Win32
C:\Program Files\ntop-Win32
Config Files......
.
C:\Program Files\ntop-Win32
Plugins....../plugins
.
Compile Time: Debug settings in globals-defines.h
DEBUG.....no
ADDRESS_DEBUG.....no
DNS_DEBUG.....no
DNS_SNIFF_DEBUG.....no
FTP_DEBUG.....no
GDBM_DEBUG.....no
HASH_DEBUG.....no
HOST_FREE_DEBUG.....no
HTTP_DEBUG.....no
IDLE_PURGE_DEBUG.....no
MEMORY_DEBUG.....no
NETFLOW_DEBUG.....no
SEMAPHORE_DEBUG.....no
SESSION_TRACE_DEBUG.....no
STORAGE_DEBUG.....no
UNKNOWN_PACKET_DEBUG.....no
Compile Time: globals-define.h
PARM_PRINT_ALL_SESSIONS.....no
PARM_PRINT_RETRANSMISSION_DATA.....no
PARM_FORK_CHILD_PROCESS.....yes (normal)
Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */
Buggy gethostbyaddr() - use alternate implementation.....globals-defines.h:
/* #define PARM_USE_HOST */
MAKE_ASYNC_ADDRESS_RESOLUTION.....yes
MAKE_WITH_SSLWATCHDOG.....no
Bad IP Address table size.....globals-defines.h: #define
MAX_NUM_BAD_IP_ADDRESSES 3
Minimum refresh interval (seconds).....#define
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15
Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64
Maximum # of routers (Local Subnet Routers report).....#define
MAX_NUM_ROUTERS 512
Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32
Maximum # of processes for lsof report.....#define
MAX_NUM_PROCESSES_READLSOFINFO 1024
Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS 1024
Allocated # of passive FTP sessions.....#define
MAX_PASSIVE_FTP_SESSION_TRACKER 384
Inactive passive FTP session timeout (seconds).....#define
PARM_PASSIVE_SESSION_MINIMUM_IDLE 60
Compile Time: Hash Table Sizes
Size.....#define CONST_HASH_INITIAL_SIZE 16384
Compile Time: globals-define.h
Chart Format.....globals-report.h: #define CHART_FORMAT ".png"
Compile Time: config.h
CFG_ETHER_HEADER_HAS_EA.....no
CFG_MULTITHREADED.....yes
HAVE_ALARM.....no
HAVE_ALLOCA.....no
HAVE_ALLOCA_H.....no
HAVE_ARPA_NAMESER_H.....no
HAVE_BACKTRACE.....no
HAVE_BZERO.....no
HAVE_CTIME_R.....no
HAVE_CURSES_H.....no
HAVE_DLFCN_H.....no
HAVE_DL_H.....no
HAVE_DOPRNT.....no
HAVE_ENDPWENT.....no
HAVE_ERRNO_H.....no
HAVE_FACILITYNAMES.....no
HAVE_FCNTL_H.....no
HAVE_FORK.....no
HAVE_GDOME_H.....no
HAVE_GETHOSTBYADDR.....no
HAVE_GETHOSTBYADDR_R.....no
HAVE_GETHOSTBYNAME.....no
HAVE_GETHOSTNAME.....no
HAVE_GETIPNODEBYADDR.....no
HAVE_GETPASS.....no
HAVE_GETTIMEOFDAY.....no
HAVE_GLIBCONFIG_H.....no
HAVE_GLIB_H.....no
HAVE_IF_H.....no
HAVE_IN6_ADDR.....no
HAVE_INT16_T.....yes
HAVE_INT32_T.....yes
HAVE_INT64_T.....no
HAVE_INT8_T.....yes
HAVE_INTTYPES_H.....no
HAVE_LANGINFO_H.....no
HAVE_LIBC.....no
HAVE_LIBCRYPT.....no
HAVE_LIBCRYPTO.....no
HAVE_LIBDL.....no
HAVE_LIBDLD.....no
HAVE_LIBGDOME.....no
HAVE_LIBGLIB.....no
HAVE_LIBM.....no
HAVE_LIBNSL.....no
HAVE_LIBPCAP.....no
HAVE_LIBPNG.....no
HAVE_LIBPOSIX4.....no
HAVE_LIBPTHREAD.....no
HAVE_LIBPTHREADS.....no
HAVE_LIBRESOLV.....no
HAVE_LIBRT.....no
HAVE_LIBSOCKET.....no
HAVE_LIBSSL.....no
HAVE_LIBWRAP.....no
HAVE_LIBXML2.....no
HAVE_LIBZ.....no
HAVE_LIMITS_H.....no
HAVE_LOCALE_H.....no
HAVE_LOCALTIME_R.....no
HAVE_LONG_DOUBLE.....no
HAVE_MATH_H.....no
HAVE_MEMCHR.....no
HAVE_MEMORY_H.....no
HAVE_MEMSET.....no
HAVE_NCURSES_H.....no
HAVE_NDIR_H.....no
HAVE_NETDB_H.....no
HAVE_OPENSSL.....no
HAVE_OPENSSL_CRYPTO_H.....no
HAVE_OPENSSL_ERR_H.....no
HAVE_OPENSSL_PEM_H.....no
HAVE_OPENSSL_RSA_H.....no
HAVE_OPENSSL_SSL_H.....no
HAVE_OPENSSL_X509_H.....no
HAVE_PCAP_FREECODE.....no
HAVE_PCAP_H.....no
HAVE_PCAP_OPEN_DEAD.....no
HAVE_PNG_H.....no
HAVE_PTHREAD_H.....no
HAVE_PUTENV.....no
HAVE_PWD_H.....no
HAVE_READLINE.....no
HAVE_READLINE_READLINE_H.....no
HAVE_RE_COMP.....no
HAVE_REGCOMP.....no
HAVE_REGEX.....no
HAVE_SCHED_H.....no
HAVE_SCHED_YIELD.....no
HAVE_SECURITY_PAM_APPL_H.....no
HAVE_SELECT.....no
HAVE_SEMAPHORE_H.....no
HAVE_SETJMP_H.....no
HAVE_SHADOW_H.....no
HAVE_SIGNAL_H.....no
HAVE_SNPRINTF.....no
HAVE_SOCKET.....no
HAVE_SQRT.....no
HAVE_STDARG_H.....no
HAVE_STDIO_H.....no
HAVE_STDLIB_H.....no
HAVE_STRCASECMP.....no
HAVE_STRCHR.....no
HAVE_STRCSPN.....no
HAVE_STRDUP.....no
HAVE_STRERROR.....no
HAVE_STRFTIME.....no
HAVE_STRING_H.....no
HAVE_STRINGS_H.....no
HAVE_STRNCASECMP.....no
HAVE_STRPBRK.....no
HAVE_STRRCHR.....no
HAVE_STRSPN.....no
HAVE_STRSTR.....no
HAVE_STRTOK_R.....no
HAVE_STRTOUL.....no
HAVE_SYS_DIR_H.....no
HAVE_SYS_IOCTL_H.....no
HAVE_SYS_LDR_H.....no
HAVE_SYS_NDIR_H.....no
HAVE_SYS_RESOURCE_H.....no
HAVE_SYS_SCHED_H.....no
HAVE_SYS_SOCKIO_H.....no
HAVE_SYS_TIME_H.....no
HAVE_SYS_TYPES_H.....no
HAVE_SYS_UN_H.....no
HAVE_TCPD_H.....no
HAVE_TM_ZONE.....no
HAVE_TZNAME.....no
HAVE_U_INT16_T.....yes
HAVE_U_INT32_T.....yes
HAVE_U_INT64_T.....no
HAVE_UINT64_T.....no
HAVE_U_INT8_T.....yes
HAVE_UNAME.....no
HAVE_UNISTD_H.....no
HAVE_VFORK.....no
HAVE_VFORK_H.....no
HAVE_VPRINTF.....no
HAVE_WORKING_FORK.....no
HAVE_WORKING_VFORK.....no
MAKE_WITH_I18N.....no
MAKE_WITH_SSLV3_SUPPORT.....no
MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no
__PROTOTYPES.....no
PROTOTYPES.....no
SETVBUF_REVERSED.....no
TIME_WITH_SYS_TIME.....no
TM_IN_SYS_TIME.....no
CFG_CONFIGFILE_DIR - config file directory......
CFG_DATAFILE_DIR - data file directory.....C:\Program Files\ntop-Win32
CFG_DBFILE_DIR - database file directory......
CFG_PLUGIN_DIR - plugin file directory......
CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes
CFG_xxxxxx_ENDIAN (Hardware Endian).....little
Compile Time: globals-defines.h
EMSGSIZE.....97
ETHERMTU.....1500
LEN_CMDLINE_BUFFER.....4096
LEN_FGETS_BUFFER.....512
LEN_GENERAL_WORK_BUFFER.....1024
LEN_MEDIUM_WORK_BUFFER.....64
LEN_SMALL_WORK_BUFFER.....16
LEN_TIME_STAMP_BUFFER.....2
MAKE_NTOP_PACKETSZ_DECLARATIONS.....yes
MAKE_RMON_SUPPORT.....no
MAKE_WITH_FORK_COPYONWRITE.....no
MAKE_WITH_HTTPSIGTRAP.....no
MAKE_WITH_RRDSIGTRAP.....no
MAKE_WITH_SCHED_YIELD.....no
MAKE_WITH_SEMAPHORES.....no
MAKE_WITH_SYSLOG.....no
MAKE_WITH_XMLDUMP.....no
MAX_ADDRESSES.....35
MAX_ALIASES.....35
MAX_ASSIGNED_IP_PORTS.....1024
MAXCDNAME.....255
MAX_DEVICE_NAME_LEN.....64
MAXDNAME.....256
MAX_HASHDUMP_ENTRY.....65535
MAXHOSTNAMELEN.....256
MAX_HOSTS_CACHE_LEN.....512
MAX_IP_PORT.....65534
MAX_IPXSAP_NAME_HASH.....179
MAXLABEL.....63
MAX_LANGUAGES_REQUESTED.....4
MAX_LANGUAGES_SUPPORTED.....8
MAX_LASTSEEN_TABLE_SIZE.....4096
MAX_LEN_VENDOR_NAME.....64
MAX_NFS_NAME_HASH.....12288
MAX_NODE_TYPES.....8
MAX_NUM_BAD_IP_ADDRESSES.....3
MAX_NUM_CONTACTED_PEERS.....8
MAX_NUM_DEQUEUE_THREADS.....yes
MAX_NUM_DEVICES.....32
MAX_NUM_DHCP_MSG.....8
MAX_NUM_FIN.....4
MAX_NUM_IGNOREDFLOWS.....32
MAX_NUM_NETWORKS.....32
MAX_NUM_PROBES.....16
MAX_NUM_PROCESSES_READLSOFINFO.....1024
MAX_NUM_PROTOS.....64
MAX_NUM_PROTOS_SCREENS.....5
MAX_NUM_ROUTERS.....512
MAX_NUM_STORED_FLAGS.....4
MAX_PASSIVE_FTP_SESSION_TRACKER.....384
MAX_PER_DEVICE_HASH_LIST.....65535
MAX_SESSIONS_CACHE_LEN.....512
NAME_MAX.....255
NETDB_SUCCESS.....0
NS_CMPRSFLGS.....192
NS_MAXCDNAME.....255
PACKETSZ.....512
PARM_FORK_CHILD_PROCESS.....yes
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
PARM_PIPE_READ_TIMEOUT.....15
PARM_SESSION_PURGE_MINIMUM_IDLE.....600
PARM_SHOW_NTOP_HEARTBEAT.....no
PARM_USE_CGI.....yes
PARM_USE_COLOR.....no
PARM_USE_HOST.....no
PARM_USE_MACHASH_INVERT.....yes
PARM_USE_SESSIONS_CACHE.....no
PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
THREAD_MODE.....MT
Mutexes:
Mutex gdbmMutex, is unlocked.
locked: 93 times, last was C:\ntop\Source\Ntop-src\UTIL.C:3522(0)
unlocked: 93 times, last was C:\ntop\Source\Ntop-src\UTIL.C:3529(0)
longest: 0 sec from C:\ntop\Source\Ntop-src\UTIL.C:3549
Mutex packetQueueMutex, is unlocked.
locked: 7114 times, last was C:\ntop\Source\Ntop-src\PBUF.C:1687(0)
unlocked: 7114 times, last was C:\ntop\Source\Ntop-src\PBUF.C:1707(0)
longest: 0 sec from C:\ntop\Source\Ntop-src\PBUF.C:1629
Mutex purgeMutex, is locked.
locked: 30 times, last was C:\ntop\Source\Ntop-src\HTTP.C:2430(0)
unlocked: 29 times, last was C:\ntop\Source\Ntop-src\HASH.C:592(0)
longest: 0 sec from C:\ntop\Source\Ntop-src\HTTP.C:2458
Mutex hostsHashMutex, is unlocked.
locked: 19941 times, last was C:\ntop\Source\Ntop-src\PBUF.C:1924(0)
unlocked: 19941 times, last was C:\ntop\Source\Ntop-src\PBUF.C:2596(0)
longest: 0 sec from C:\ntop\Source\Ntop-src\PBUF.C:2596
Mutex tcpSessionsMutex, is unlocked.
locked: 66661 times, last was C:\ntop\Source\Ntop-src\SESSIONS.C:462(0)
unlocked: 66661 times, last was
C:\ntop\Source\Ntop-src\SESSIONS.C:513(0)
longest: 1 sec from C:\ntop\Source\Ntop-src\SESSIONS.C:513
Mutex purgePortsMutex, is unlocked.
locked: 3554 times, last was C:\ntop\Source\Ntop-src\PBUF.C:570(0)
unlocked: 3554 times, last was C:\ntop\Source\Ntop-src\PBUF.C:591(0)
longest: 0 sec from C:\ntop\Source\Ntop-src\PBUF.C:591
----------------------------------------------------------------------------
Adam Beach.
Note: When reporting service issues and working with the Service Department
via email, only [EMAIL PROTECTED] or [EMAIL PROTECTED]
should be used. All service phone calls should be made to (608) 276-4600 to
ensure the quickest response. Please do not use (608) 274-5789 for service
calls.
Weather Central, Inc.
5725 Tokay Blvd.
Madison, WI 53719
(608) 276-4600 Service Voice
(608) 276-4613 Service Fax
CONFIDENTIALITY NOTICE: THE INFORMATION CONTAINED IN THIS DOCUMENT IS
INTENDED ONLY FOR THE PERSONAL AND CONFIDENTIAL USE OF THE DESIGNATED
RECIPIENT(S). IF THE READER OF THIS DOCUMENT IS NOT THE INTENDED RECIPIENT
OR ANY AGENT RESPONSIBLE FOR DELIVERING IT TO THE INTENDED RECIPIENT, YOU
ARE HEREBY NOTIFIED THAT YOU HAVE RECEIVED THIS DOCUMENT IN ERROR, AND THAT
ANY REVIEW, DISSEMINATION, DISTRIBUTION OR COPYING OF THIS MESSAGE OR USE OF
ITS CONTENTS IS STRICTLY PROHIBITED.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
