Actually, that looks pretty good. 3335.0 + 8410.8 = 11745.8 Mbps or (assume 500 byte packets) around 3k packets / second.
Spikes are probably the purge. In the 2.2.9x versions, it locks a mutex, which prevents the web pages from accessing the data. 2.2 just bulled ahead. I suppose we could detect that the mutex is locked and intercept the request with a try again later message, but it should only be for a few seconds every few minutes, so is it worth it? -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Steven Rudolph Sent: Thursday, November 20, 2003 12:10 PM To: [EMAIL PROTECTED] Subject: [Ntop] High CPU use 2.2.96 Running 2.2.96 from compiled CVS source a few days ago. gcc 3.2 libpcap-2003.11.11 gd-2.0.11 gdbm-1.8.3 in the FAQ. gawk-3.1.3 zlib-1.1.4 libpng-1.2.5 automake-1.7 autoconf-2.54 I compiled with --disable-mutexextrainfo as suggested by earlier threads. CPU use seems to be between 30% and up to 89% for ntop. This is on a dual proc E250 with 2GB RAM, with pretty much just this program running. Command line: /usr/local/bin/ntop -P /usr/local/share/ntop -i qfe3 -m aaa.bbb.ccc.0/24,aaa.bbb.ccc.0/24,aaa.bbb.ccc.0/24,aaa.bbb.ccc.0/24 -o -w 6666 -u ntop -d It may be a little high at times. But it averages about 10 to 20 Mb/s Max In:61.3 Mb/s (61.3%) Average In:3335.0 kb/s (3.3%) Current In:1921.5 kb/s (1.9%) Max Out:68.4 Mb/s (68.4%) Average Out:8410.8 kb/s (8.4%) Current Out:14.2 Mb/s (14.2%) On a previous version this seemed to be no trouble at all. The CPU seems to spike from about 30% to about 70/80% for ntop periodically. If the web page seems to refresh during this time the web page loads very slow. Any ideas/pointers? Thanks for your assistance. Steve Rudolph, CCSA, CCSE Network Security Engineer Internet Operations Center _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
