Look in the code at initDeviceDatalink():
if(myGlobals.headerSize[myGlobals.device[deviceId].datalink] == 0) {
traceEvent(CONST_TRACE_ERROR, "DLT: Header value for DLT_ %d, is
zero",
myGlobals.device[deviceId].datalink);
traceEvent(CONST_TRACE_NOISY, "DLT: Processing continues OK - don't
use the nfs plugin");
traceEvent(CONST_TRACE_NOISY, "DLT: Please report this to the ntop-dev
list");
}
Note that the code should probably be printing deviceId, e.g.:
traceEvent(CONST_TRACE_ERROR, "DLT: Header value for DLT_ %d (%s), is
zero",
deviceId,
myGlobals.device[deviceId].name);
so we can see WHICH device has the unknown DLT_, but this usually shows up
when you've told ntop to use a device that isn't standard Ethernet (e.g. a
Datalink type we don't support).
sit1,tun3,tun4,tun7,tun9 - we don't support.
If you can figure out the data link level header length and the associated
DLT code, you can try adding them to the table in globals-core.c at 380ff:
_mtuSize[DLT_NULL] = 8232 /* no
link-layer encapsulation */;
_headerSize[DLT_NULL] = CONST_NULL_HDRLEN;
/* 1500 + 14 bytes header Courtesy of Andreas Pfaller
<[EMAIL PROTECTED]> */
_mtuSize[DLT_EN10MB] = 1500+sizeof(struct ether_header) /* Ethernet
(10Mb) */;
_headerSize[DLT_EN10MB] = sizeof(struct ether_header);
...
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Julien TOUCHE
Sent: Friday, October 31, 2003 3:03 PM
To: Ntop
Subject: [Ntop] gdb debug report on debian
at the end, two run of ntop 2.2.95 in gdb with some trace
os is a linux debian 3.0 with an extra kernel
#uname -a
Linux crimson 2.4.21-grsec #1 SMP Fri Jun 13 23:43:54 CEST 2003 i586 unknown
compile 2.2.95 from sourceforge:
+ NTOPCONFIGDEBUG=yes
+ CFLAGS=-I/usr/include/glib-1.2
+ ./configure --prefix=/opt --with-rrd-root=/usr/local --enable-sslv3
-enable-iknowbetter --enable-sslv3 --with-tcpwrap --enable-xmldump
--with-xml2-include=/usr/include/libxml2/libxml --with-xml2-lib=/usr/lib
--with-glib-include=/usr/include/glib-1.2 --with-glib-lib=/usr/lib
--with-glibconfig-root=/usr/lib/glib/include
--with-gdome-include=/usr/include/libgdome --with-gdome-lib=/usr/lib
except idea/comment about the gdb output, i want to ask what is this
warning ?
**ERROR** DLT: Header value for DLT_ 12, is zero
Regards
Julien
(gdb) run -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P
/var/lib/ntop -a /var/lib/ntop/access.log -i
eth1,sit1,tun3,tun4,tun7,tun9 -t 0 -O /var/log/ntop/ -M -m 192.168.2.0/24
Starting program: /export/opt/bin/ntop -u ntop -w 192.168.2.1:3000 -p
/etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop/access.log -i
eth1,sit1,tun3,tun4,tun7,tun9 -t 0 -O /var/log/ntop/ -M -m 192.168.2.0/24
[New Thread 16384 (LWP 2306)]
31/Oct/2003 21:18:50 ntop v.2.2.95 MT (SSL) [i586-pc-linux-gnu (debian
Linux 3.0)] (10/31/03 07:03:26 PM build)
31/Oct/2003 21:18:50 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]>
31/Oct/2003 21:18:50 Get the freshest ntop from http://www.ntop.org/
31/Oct/2003 21:18:50 Initializing ntop
31/Oct/2003 21:18:50 PROTO_INIT: Processing protocol file:
'/etc/ntop/protocol.list', size: 424
31/Oct/2003 21:18:50 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:18:50 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:18:51 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:18:51 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:18:51 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:18:51 Now running as requested user 'ntop' (105:105)
31/Oct/2003 21:19:06 I18N: This instance of ntop does not support
multiple languages
[New Thread 32769 (LWP 2366)]
[New Thread 16386 (LWP 2369)]
[New Thread 32771 (LWP 2371)]
[New Thread 49156 (LWP 2372)]
31/Oct/2003 21:19:39 Sniffying...
31/Oct/2003 21:19:39 Listening on [eth1,sit1,tun3,tun4,tun7,tun9]
31/Oct/2003 21:19:39 Now running as requested user 'ntop' (105:105)
31/Oct/2003 21:19:39 Loading Plugins
31/Oct/2003 21:19:52 LASTSEEN: Welcome to LastSeenWatchPlugin. (C) 1999
by Andrea Marangoni
31/Oct/2003 21:20:08 ICMP: Welcome to icmpWatchPlugin. (C) 1999 by Luca
Deri
31/Oct/2003 21:20:32 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri
31/Oct/2003 21:20:45 NFS: Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri
31/Oct/2003 21:20:59 PDA: Welcome to PDAPlugin. (C) 2001-2002 by L.Deri
and W.Brock
31/Oct/2003 21:21:16 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri.
31/Oct/2003 21:21:31 SFLOW: Welcome to sFlowPlugin. (C) 2002 by Luca Deri
[New Thread 65541 (LWP 2659)]
31/Oct/2003 21:21:35 WEB: Waiting for HTTP connections on 192.168.2.1
port 3000
[New Thread 81926 (LWP 2660)]
[New Thread 98311 (LWP 2661)]
[New Thread 114696 (LWP 2663)]
[New Thread 131081 (LWP 2665)]
[New Thread 147466 (LWP 2666)]
[New Thread 163851 (LWP 2669)]
[New Thread 180236 (LWP 2671)]
31/Oct/2003 21:23:28 PDA: Done
31/Oct/2003 21:23:28 **ERROR** ===> Magic assertion failed!
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 98311 (LWP 2661)]
0x4b70d460 in mallopt () from /lib/libc.so.6
(gdb)
(gdb) where
#0 0x4b70d460 in mallopt () from /lib/libc.so.6
#1 0x4b70ce80 in mallopt () from /lib/libc.so.6
#2 0x4b70c145 in malloc () from /lib/libc.so.6
#3 0x4b46dd7f in ntop_safemalloc (sz=1684, file=0x4b494b1e "hash.c",
line=697) at leaks.c:492
#4 0x4b465d1a in lookupHost (hostIpAddress=0x0, ether_addr=0xb03fd954
"33", checkForMultihoming=0 '\0',
forceUsingIPaddress=0 '\0', actualDeviceId=0) at hash.c:697
#5 0x4b47b8c9 in processPacket (_deviceId=0x0, h=0xb03ffa10,
p=0xb03fd998 "33") at pbuf.c:2539
#6 0x4b4785d6 in queuePacket (_deviceId=0x0, h=0xb03ffa10, p=0x8058828
"33") at pbuf.c:1601
#7 0x4b8a3d63 in pcap_read () from /usr/lib/libpcap.so.0
#8 0x4b8a3b80 in pcap_read () from /usr/lib/libpcap.so.0
#9 0x4b8a4c5f in pcap_dispatch () from /usr/lib/libpcap.so.0
#10 0x4b46fb3c in pcapDispatch (_i=0x0) at ntop.c:81
#11 0x4b636d53 in pthread_start_thread () from /lib/libpthread.so.0
#12 0x4b636d99 in pthread_allocate_stack () from /lib/libpthread.so.0
(gdb) info all-registers
eax 0x4b7b0cc0 1266355392
ecx 0x855dc30 139844656
edx 0x855dc40 139844672
ebx 0x4b7b0000 1266352128
esp 0xb03fd45c 0xb03fd45c
ebp 0xb03fd484 0xb03fd484
esi 0x858f130 140046640
edi 0x10 16
eip 0x4b70d460 0x4b70d460
eflags 0x10293 66195
cs 0x23 35
ss 0x2b 43
ds 0x2b 43
es 0x2b 43
fs 0x0 0
gs 0x0 0
st0 0 (raw 0x00000000000000000000)
st1 0 (raw 0x00000000000000000000)
st2 0 (raw 0x00000000000000000000)
st3 0 (raw 0x00000000000000000000)
st4 0 (raw 0x00000000000000000000)
st5 50 (raw 0x4004c800000000000000)
st6 0.050000000000000002775557561562891351 (raw
0x3ffaccccccccccccd000)
st7 0.059922027587890627775557561562891351 (raw
0x3ffaf570ccccccccd000)
fctrl 0x37f 895
fstat 0x20 32
ftag 0xffff 65535
fiseg 0x23 35
fioff 0x4b46bd5c 1262927196
foseg 0x2b 43
fooff 0xb14b3064 -1320472476
fop 0x51c 1308
xmm0 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm1 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm2 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm3 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm4 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm5 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm6 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
---Type <return> to continue, or q <return> to quit---
xmm7 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
mxcsr 0x1f80 8064
orig_eax 0xffffffff -1
****************************************************
run ...
[New Thread 16384 (LWP 3806)]
31/Oct/2003 21:37:11 ntop v.2.2.95 MT (SSL) [i586-pc-linux-gnu (debian
Linux 3.0)] (10/31/03 07:03:26 PM build)
31/Oct/2003 21:37:11 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]>
31/Oct/2003 21:37:11 Get the freshest ntop from http://www.ntop.org/
31/Oct/2003 21:37:11 Initializing ntop
31/Oct/2003 21:37:12 PROTO_INIT: Processing protocol file:
'/etc/ntop/protocol.list', size: 424
31/Oct/2003 21:37:12 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:37:12 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:37:12 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:37:12 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:37:12 **ERROR** DLT: Header value for DLT_ 12, is zero
31/Oct/2003 21:37:12 Now running as requested user 'ntop' (105:105)
31/Oct/2003 21:37:25 I18N: This instance of ntop does not support
multiple languages
[New Thread 32769 (LWP 3816)]
[New Thread 16386 (LWP 3817)]
[New Thread 32771 (LWP 3819)]
[New Thread 49156 (LWP 3820)]
31/Oct/2003 21:37:55 Sniffying...
31/Oct/2003 21:37:55 Listening on [eth1,sit1,tun3,tun4,tun7,tun9]
31/Oct/2003 21:37:55 Now running as requested user 'ntop' (105:105)
31/Oct/2003 21:37:55 Loading Plugins
31/Oct/2003 21:38:10 LASTSEEN: Welcome to LastSeenWatchPlugin. (C) 1999
by Andrea Marangoni
31/Oct/2003 21:38:24 ICMP: Welcome to icmpWatchPlugin. (C) 1999 by Luca
Deri
31/Oct/2003 21:38:40 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri
31/Oct/2003 21:38:53 NFS: Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri
31/Oct/2003 21:39:10 PDA: Welcome to PDAPlugin. (C) 2001-2002 by L.Deri
and W.Brock
31/Oct/2003 21:39:27 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri.
31/Oct/2003 21:39:42 SFLOW: Welcome to sFlowPlugin. (C) 2002 by Luca Deri
[New Thread 65541 (LWP 3892)]
31/Oct/2003 21:39:47 WEB: Waiting for HTTP connections on 192.168.2.1
port 3000
[New Thread 81926 (LWP 3894)]
[New Thread 98311 (LWP 3910)]
[New Thread 114696 (LWP 4133)]
[New Thread 131081 (LWP 4161)]
[New Thread 147466 (LWP 4199)]
[New Thread 163851 (LWP 4447)]
[New Thread 180236 (LWP 4482)]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 32771 (LWP 3819)]
0x4774b2c5 in mallopt () from /lib/libc.so.6
(gdb)
(gdb) where
#0 0x4774b2c5 in mallopt () from /lib/libc.so.6
#1 0x4774a2ca in free () from /lib/libc.so.6
#2 0x474ac10e in ntop_safefree (ptr=0x4856ab2c, file=0x474d431a
"ntop.c", line=580) at leaks.c:609
#3 0x474aefeb in purgeIpPorts (theDevice=0) at ntop.c:580
#4 0x474af183 in scanIdleLoop (notUsed=0x0) at ntop.c:616
#5 0x47674d53 in pthread_start_thread () from /lib/libpthread.so.0
#6 0x47674d99 in pthread_allocate_stack () from /lib/libpthread.so.0
(gdb) up
#1 0x4774a2ca in free () from /lib/libc.so.6
(gdb) up
#2 0x474ac10e in ntop_safefree (ptr=0x4856ab2c, file=0x474d431a
"ntop.c", line=580) at leaks.c:609
609 free(*ptr);
(gdb) print *ptr
$2 = (void *) 0x85b8e08
(gdb) print file
$3 = 0x474d431a "ntop.c"
(gdb) info all-registers
eax 0x85625c0 139863488
ecx 0x1b24 6948
edx 0x85625c0 139863488
ebx 0x474d8548 1196262728
esp 0xbf1ff9fc 0xbf1ff9fc
ebp 0xbf1ffa74 0xbf1ffa74
esi 0x0 0
edi 0x0 0
eip 0x474ac10e 0x474ac10e
eflags 0x10246 66118
cs 0x23 35
ss 0x2b 43
ds 0x2b 43
es 0x2b 43
fs 0x0 0
gs 0x0 0
st0 0 (raw 0x00000000000000000000)
st1 0 (raw 0x00000000000000000000)
st2 0 (raw 0x00000000000000000000)
st3 0 (raw 0x00000000000000000000)
st4 0 (raw 0x00000000000000000000)
st5 50 (raw 0x4004c800000000000000)
st6 7.97338581085205078125 (raw 0x4001ff25fa0000000000)
st7 7.97338581085205078125 (raw 0x4001ff25fa0000000000)
fctrl 0x37f 895
fstat 0x20 32
ftag 0xffff 65535
fiseg 0x23 35
fioff 0x474a3777 1196046199
foseg 0x2b 43
fooff 0xbf1ffa28 -1088423384
fop 0x51c 1308
xmm0 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm1 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm2 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm3 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm4 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm5 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
xmm6 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
---Type <return> to continue, or q <return> to quit---
xmm7 {f = {0x0, 0x0, 0x0, 0x0}} {f = {-nan(0x7fffff),
-nan(0x7fffff), -nan(0x7fffff), -nan(0x7fffff)}}
mxcsr 0x1f80 8064
orig_eax 0xffffffff -1
(gdb) info threads
13 Thread 180236 (LWP 4482) 0x477a4f82 in recvfrom () from
/lib/libc.so.6
12 Thread 163851 (LWP 4447) 0x477a4f82 in recvfrom () from
/lib/libc.so.6
11 Thread 147466 (LWP 4199) 0x477a4f82 in recvfrom () from
/lib/libc.so.6
10 Thread 131081 (LWP 4161) 0x477a4f82 in recvfrom () from
/lib/libc.so.6
9 Thread 114696 (LWP 4133) 0x477a4f82 in recvfrom () from /lib/libc.so.6
8 Thread 98311 (LWP 3910) 0x477a4f82 in recvfrom () from /lib/libc.so.6
7 Thread 81926 (LWP 3894) 0x4779eb1e in select () from /lib/libc.so.6
6 Thread 65541 (LWP 3892) 0x4777af11 in nanosleep () from /lib/libc.so.6
5 Thread 49156 (LWP 3820) 0x47707ae2 in sigsuspend () from
/lib/libc.so.6
* 4 Thread 32771 (LWP 3819) 0x4774b2c5 in mallopt () from /lib/libc.so.6
3 Thread 16386 (LWP 3817) 0x47707ae2 in sigsuspend () from
/lib/libc.so.6
2 Thread 32769 (LWP 3816) 0x4779d2c0 in poll () from /lib/libc.so.6
1 Thread 16384 (LWP 3806) 0x4777af11 in nanosleep () from /lib/libc.so.6
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
