Good ideas, although don't think of either of these as 'cure-alls'. But do
add 'em to your standard bag 'o problem solving tricks, just be aware of the
limits!
-K doesn't do much. But what is does do is important for SOME kinds of
debugging...
1. initialization.c:
if(myGlobals.debugMode) {
/* Activate backtrace trap on -K flag */
signal(SIGSEGV, cleanup);
}
2. http.c:
if((!myGlobals.debugMode)
&& (!myGlobals.largeNetwork) /*
On a large network we probably use a
lot of memory
so a fork() will require even more
memory and this
is not what we want
*/
) {
handleDiedChild(0); /*
Workaround because on this OpenBSD and
other platforms signal handling is broken as the
system
creates zombies although we decided to ignore
SIGCHLD
*/
Why is this important? Because without it a SIGSEGV in the child is hidden.
Without the fork(), it occurs in the thread that has the trap set so we see
it. Why isn't it a cure-all? Because it's only be relevant if ntop's web
server is dying trying to create a page (something we don't know IS
happening). And because of the limitation of the backtrace which is that
it's in hex. So it's only useful if we have a test system that exactly
mirrors the failing system. This is why the bt full dump (where gdb
interprets it and feeds us back the actual failing line #s is SO important).
As for -C (and remember 2.2c's -C is NOT the 2.2.9x -C) tells ntop you are
running on a 'large network' - and so it turns off a few memory hog things
(that is the port and traffic distribution monitors). This is not usually
helpful in crashes except those related to running out of memory.
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Darrick Bova
> Sent: Wednesday, December 17, 2003 11:23 AM
> To: [EMAIL PROTECTED]
> Subject: RE: [Ntop] I just don't understand
>
>
> What options are you using to run ntop?
>
> Try running with the -K option to enable debug and see if you get more
> information.
> Also, try running with -C option see if will run longer.
>
> - Darrick
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
> > Behalf Of Mike McCarty
> > Sent: Wednesday, December 17, 2003 10:01 AM
> > To: [EMAIL PROTECTED]
> > Subject: [Ntop] I just don't understand
> >
> > Any help I can get on this would be very appreciated. I have
> > built ntop from the ntop-2.2c tarball and followed
> > BUILD-Ntop.txt file explicitly, but continue to get stalled
> > at the same place no matter what I try to follow. I receive
> > any errors, I am running RedHat 8.0, and cannot seem to find
> > the problem anywhere. Please help!!! After executing it
> > begins just as the examples I've seen in the FAQ, but it
> > hangs up. Here are the lines that follow after executing:
> >
> > Wait please: ntop is coming up...
> > 17/Dec/2003 08:45:48 ntop v.2.2c MT (SSL) [i686-pc-linux-gnu]
> > (12/16/03
> > 02:54:46 PM build)
> > 17/Dec/2003 08:45:48 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]>
> > 17/Dec/2003 08:45:48 Get the freshest ntop from http://www.ntop.org/
> > 17/Dec/2003 08:45:49 Initializing ntop
> > 17/Dec/2003 08:45:49 SSL is present but https is disabled:
> > use -W <https
> > port> for enabling it
> > 17/Dec/2003 08:45:49 Initializing gdbm databases
> > 17/Dec/2003 08:45:49 Listening on [eth0]
> > 17/Dec/2003 08:45:50 Loading Plugins
> > 17/Dec/2003 08:45:50 Searching for plugins in ./plugins
> > 17/Dec/2003 08:45:50 ICMP: Welcome to icmpWatchPlugin. (C)
> > 1999 by Luca Deri
> > 17/Dec/2003 08:45:50 LASTSEEN: Welcome to
> > LastSeenWatchPlugin. (C) 1999 by Andrea Marangoni
> > 17/Dec/2003 08:45:50 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri
> > 17/Dec/2003 08:45:50 NFS: Welcome to nfsWatchPlugin. (C) 1999
> > by Luca Deri
> > 17/Dec/2003 08:45:50 PDA: Welcome to PDAPlugin. (C) 2001-2002
> > by L.Deri and W.Brock
> > 17/Dec/2003 08:45:50 SFLOW: Welcome to sFlowPlugin. (C) 2002
> > by Luca Deri
> > 17/Dec/2003 08:45:50 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri.
> > 17/Dec/2003 08:45:50 Plugins loaded... continuing with initialization
> > 17/Dec/2003 08:45:50 Resetting traffic statistics...
> > 17/Dec/2003 08:45:50 VENDOR: Loading MAC address table.
> > 17/Dec/2003 08:45:50 VENDOR: Checking './specialMAC.txt'
> > 17/Dec/2003 08:45:50 VENDOR: ...found, 61 lines, loaded 59 records!
> > 17/Dec/2003 08:45:50 VENDOR: Checking './oui.txt'
> > 17/Dec/2003 08:45:50 VENDOR: ...found, 70 lines, loaded 62 records!
> > 17/Dec/2003 08:45:50 I18N: This instance of ntop does not
> > support multiple languages
> > 17/Dec/2003 08:45:50 IP2CC: Looking for IP address <->
> > Country code mapping file
> > 17/Dec/2003 08:45:51 IP2CC: 94910 records read
> > 17/Dec/2003 08:45:52 NOTE: atfork() handler registered for
> > mutexes, rc 0
> > 17/Dec/2003 08:45:52 THREADMGMT: Started thread (16386) for
> > network packet analyser
> > 7/Dec/2003 08:45:52 THREADMGMT: Packet processor thread
> > (16386) started...
> > 17/Dec/2003 08:45:52 THREADMGMT: Idle Scan thread (0) started
> > 17/Dec/2003 08:45:52 THREADMGMT: Started thread (32771) for
> > idle hosts detection
> > 17/Dec/2003 08:45:52 THREADMGMT: Address resolution thread started...
> > 17/Dec/2003 08:45:52 THREADMGMT: Started thread (49156) for
> > DNS address resolution
> > 17/Dec/2003 08:45:52 Calling plugin start functions (if any)
> > 17/Dec/2003 08:45:52 WEB: Initializing
> > 17/Dec/2003 08:45:52 Note: Reporting device set to 0[eth0]
> > 17/Dec/2003 08:45:52 WEB: Waiting for HTTP connections on port 3000
> > 17/Dec/2003 08:45:52 THREADMGMT: web connections thread
> > (4285) started...
> > 17/Dec/2003 08:45:52 THREADMGMT: Started thread (65541) for web server
> > 17/Dec/2003 08:45:52 Sniffying...
> > 17/Dec/2003 08:45:52 THREADMGMT: pcap dispatch thread started...
> > 17/Dec/2003 08:45:52 THREADMGMT: Started thread (81926) for
> > network packet sniffing on eth0
> > 17/Dec/2003 08:46:52 IDLE_PURGE: purgeIdleHosts firstRun
> > (mutex every 64 times through the loop)
> > 17/Dec/2003 08:46:53 PORT_PURGE: purgeIpPorts firstRun (mutex
> > every 64 times through the loop)
> > 17/Dec/2003 08:47:44 Extending hash size [32->512][deviceId=0]
> >
> > I woyuld really like to see this run in the web mode and I
> > just cannot find the hang up.
> >
> > Thanks,
> > Mike McCarty
> > [EMAIL PROTECTED]
> >
> > _________________________________________________________________
> > Make your home warm and cozy this winter with tips from MSN
> > House & Home.
> > http://special.msn.com/home/warmhome.armx
> >
> > _______________________________________________
> > Ntop mailing list
> > [EMAIL PROTECTED]
> > http://listgateway.unipi.it/mailman/listinfo/ntop
> >
> >
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
