RE: [Ntop] NTOP Hangs

[Brian LeRoy]

To rule out a hardware issue, I swapped out the hardware for eth0 to eth1, and got the same results.  Error messages are still only noted on eth1.  I've never installed from CVS before is that difficult?  What version do you recommend that I install?  Do I have to "uninstall" this one first?   -----Original Message----- From: Burton M. Strauss III [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 22, 2003 7:13 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] NTOP Hangs   There are a lot of bug fixes post 2.2, in 2.2c and in the cvs versions.   However, the eth0 error message sounds like a NIC problem.   -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Brian LeRoy Sent: Wednesday, October 22, 2003 4:17 PM To: '[EMAIL PROTECTED]' Subject: [Ntop] NTOP Hangs I need a bit of help.  I have NTOP 2.2 installed on a machine running Red Hat 9.0.  The machine has 2 Ethernet interfaces.   One is connected to an internal network (192.168.80.0 eth0), the other is connected to a switch port which is mirroring the traffic of the inside of my firewall (eth1 it has an IP).  I want to take all of the traffic from eth1 and have ntop analyze it, and be able to view it from eth0.  When I start NTOP the page comes up and all is OK.  Below I have listed what I see on the screen when starting.  Then a few seconds later (approximately 30) ntop hangs, and I am no longer able to get on my machine from eth0.  I get the output below over and over and over again on the console, but I have no network connectivity.  Any suggestions or comments would be very welcome.   [EMAIL PROTECTED] root]# ntop -P /var/log -u ntop -w 192.168.80.10:3000 -i eth1 -M Wait please: ntop is coming up... 22/Oct/2003 17:02:07 ntop v.2.2 MT [i686-pc-linux-gnu] (10/09/03 04:59:27 PM build) 22/Oct/2003 17:02:07 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]> 22/Oct/2003 17:02:07 Get the freshest ntop from http://www.ntop.org/ 22/Oct/2003 17:02:07 Initializing ntop 22/Oct/2003 17:02:07 Initializing gdbm databases 22/Oct/2003 17:02:07 Listening on [eth1] 22/Oct/2003 17:02:07 Loading Plugins 22/Oct/2003 17:02:08 Searching for plugins in /usr/local/lib/ntop/plugins 22/Oct/2003 17:02:08 ICMP: Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri 22/Oct/2003 17:02:08 LASTSEEN: Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea Marangoni 22/Oct/2003 17:02:08 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri 22/Oct/2003 17:02:08 NFS: Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri 22/Oct/2003 17:02:08 PDA: Welcome to PDAPlugin. (C) 2001-2002 by L.Deri and W.Brock 22/Oct/2003 17:02:08 SFLOW: Welcome to sFlowPlugin. (C) 2002 by Luca Deri 22/Oct/2003 17:02:08 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri. 22/Oct/2003 17:02:08 Plugins loaded... continuing with initialization 22/Oct/2003 17:02:08 Resetting traffic statistics... 22/Oct/2003 17:02:08 VENDOR: Loading MAC address table. 22/Oct/2003 17:02:08 VENDOR: Checking './specialMAC.txt' 22/Oct/2003 17:02:08 VENDOR: Checking '/usr/local/etc/ntop/specialMAC.txt' 22/Oct/2003 17:02:08 VENDOR: ...found, 61 lines, loaded 59 records! 22/Oct/2003 17:02:08 VENDOR: Checking './oui.txt' 22/Oct/2003 17:02:08 VENDOR: Checking '/usr/local/etc/ntop/oui.txt' 22/Oct/2003 17:02:08 VENDOR: ...found, 70 lines, loaded 62 records! 22/Oct/2003 17:02:08 I18N: This instance of ntop does not support multiple languages 22/Oct/2003 17:02:08 IP2CC: Looking for IP address <-> Country code mapping file 22/Oct/2003 17:02:09 IP2CC: 47455 records read 22/Oct/2003 17:02:09 THREADMGMT: Packet processor thread (1092144432) started... 22/Oct/2003 17:02:09 THREADMGMT: Started thread (1092144432) for network packet analyser 22/Oct/2003 17:02:09 THREADMGMT: Idle Scan thread (1100537136) started 22/Oct/2003 17:02:09 THREADMGMT: Started thread (1100537136) for idle hosts detection 22/Oct/2003 17:02:09 THREADMGMT: Address resolution thread started... 22/Oct/2003 17:02:09 THREADMGMT: Started thread (1116949808) for DNS address resolution 22/Oct/2003 17:02:09 Calling plugin start functions (if any) 22/Oct/2003 17:02:09 WEB: Initializing 22/Oct/2003 17:02:09 Note: Reporting device set to 0[eth1] 22/Oct/2003 17:02:09 WEB: Converted address '192.168.80.10' - binding to the specific interface 22/Oct/2003 17:02:09 WEB: Waiting for HTTP connections on 192.168.80.10 port 3000 22/Oct/2003 17:02:09 THREADMGMT: web connections thread (1125342512) started... 22/Oct/2003 17:02:09 THREADMGMT: Started thread (1125342512) for web server 22/Oct/2003 17:02:09 Sniffying... 22/Oct/2003 17:02:09 THREADMGMT: pcap dispatch thread started... 22/Oct/2003 17:02:09 THREADMGMT: Started thread (1133735216) for network packet sniffing on eth1 22/Oct/2003 17:02:09 Extending hash size [32->512][deviceId=0] 22/Oct/2003 17:02:10 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:11 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:12 Extending hash size [512->1024][deviceId=0] 22/Oct/2003 17:02:14 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:14 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:15 Extending hash size [1024->2048][deviceId=0] 22/Oct/2003 17:02:16 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:16 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:18 **WARNING** WARNING: accessMutex() call with a self-LOCKED mutex [from 3094 at util.c:4437 ntop_gdbm_store] 22/Oct/2003 17:02:19 NOTE: -L | --use-syslog=facility not specified, child processes will log to the default (24). 22/Oct/2003 17:02:22 Extending hash size [2048->4096][deviceId=0]   eth0: transmit timed out, tx_status 00 status e000.   diagnostics: net 0ce0 media a800 dma 000000a0.   Flags; bus-master 1, dirty 1158(6) current 1174(6)   Transmit list 00081380 vs. c0081380.   0: @c0081200  length 800000aa status 000000aa   1: @c0081240  length 80000058 status 00000058   2: @c0081280  length 80000058 status 00000058   3: @c00812c0  length 80000058 status 00000058   4: @c0081300  length 8000002a status 8000002a   5: @c0081340  length 80000058 status 80000058   6: @c0081380  length 80000058 status 00000058   7: @c00813c0  length 80000058 status 00000058   8: @c0081400  length 80000058 status 00000058   9: @c0081440  length 80000058 status 00000058   10: @c0081480  length 80000058 status 00000058   11: @c00814c0  length 80000058 status 00000058   12: @c0081500  length 80000058 status 00000058   13: @c0081540  length 80000058 status 00000058   14: @c0081580  length 80000058 status 00000058   15: @c00815c0  length 800000aa status 000000aa