Yeah, well, take it up with the packager of your version of gd. If you look
at the code path, it's all routines and headers from other places. My gd.h,
v1.8.4, doesn't even HAVE 276 lines...
Even better,
$ grep y1 myrrd/*.[ch]
$
Seriously, it's some kind of a gcc artifact - there's discussions all over
the web about it - google for 'em - there's talk of a new parameter in 3.3.4
or some such to suppress these spurious warnings. Of course, you're running
2.94, so you get what you get...
As to the rest, you're just going to have to buckle down and read the code.
That's how you debug.
A word of warning... those messages are useless. They're in
receiveSflowSample(), but if you follow it, you'll see that they come from
the COUNTERSSAMPLE case and below that sample->counterBlockVersion is one of
the 'good' ones, probably INMCOUNTERSVERSION_ETHERNET. But - all of those
debug messages come from interpreting the raw data, not interpreting what
ntop is being fed...
if(debug) {
u_int64_t cntr64;
GETDATA64(cntr64, datap);
traceEvent(CONST_TRACE_INFO, "SFLOW_DEBUG: ifInOctets %Lu",
cntr64);
...
GETDATA32(cntr64, datap);
traceEvent(CONST_TRACE_INFO, "SFLOW_DEBUG: ifPromiscuousMode
%Lu", cntr64);
}
}
break;
See it... it's useless. It just tells you there's good data in there, not
that the plugin is DOING anything with it.
The part that matters is the OTHER path... that leads to this in
writePcapPacket():
if(sample->headerProtocol == INMHEADER_ETHERNET_ISO8023)
queuePacket((u_char*)myGlobals.sflowDeviceId,
&hdr, sample->header); /* Pass the packet to ntop */
If you go back to receiveSflowSample(), writePcapPacket is NOT called in
COUNTERSSAMPLE, but rather in the case before, case FLOWSAMPLE, which
has an entirely different set of debug lines.
I think you're just going to have to work through receiveSflowSample() and
understand what it really does...
It may be as simple as your sflow probe is misconfigured and is sending the
wrong type of data...
That's basically all I can do for you. If it's truly important to you,
contact me off-list and let's discuss paid support.
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Mike
> Hunter
> Sent: Tuesday, February 10, 2004 3:28 PM
> To: [EMAIL PROTECTED]
> Subject: Re: [Ntop] More Ntop problems on FreeBSD (cannot compile CVS,
> fbsd 4.8)
>
>
> On Feb 10, "Burton M. Strauss III" wrote:
>
> > Fixed in the cvs ... BMS0442
>
> Thanks for the quick help. I updated my CVS and it works fine
> now. There are
> quite a few compiler warnings, namely:
>
> gcc -c -g -O2 -I/usr/local/include -Wshadow -Wpointer-arith
> -Wmissing-prototypes -Wmissing-declarations -Wnested-externs
> -fPIC -I. -I.. -I/root/ntop-cvs/ntop/myrrd -DHAVE_CONFIG_H rrd_create.c
> In file included from rrd_tool.h:138,
> from rrd_create.c:7:
> /usr/local/include/gd.h:276: warning: declaration of `y1' shadows
> global declaration
> /usr/local/include/gd.h:280: warning: declaration of `y1' shadows
> global declaration
> /usr/local/include/gd.h:284: warning: declaration of `y1' shadows
> global declaration
> /usr/local/include/gd.h:287: warning: declaration of `y1' shadows
> global declaration
> /usr/local/include/gd.h:289: warning: declaration of `y1' shadows
> global declaration
>
> > But you probably should look at upgrading gcc to something modern and
> > supported ... only the older 2.94s and such have trouble with
> the code the
> > way it was...
>
> Point taken. If the above warning is also related, then I'm fine
> to live with
> it.
>
> Now, back to the regularly-scheduled "I can't get sFlow to work for me" :|
> I have ntop running, with the sflow plugin enabled in debug mode. I see
> tons of sflow traffic:
>
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInUcastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInMulticastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInBroadcastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInDiscards 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInErrors 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInUnknownProtos 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutOctets 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutUcastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutMulticastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutBroadcastPkts 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutDiscards 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutErrors 0
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifPromiscuousMode 1
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: countersSampleSize 108
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: sampleSequenceNo 127527
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: sourceId 0:14
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: sampleType COUNTERSSAMPLE
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: statsSamplingInterval 20
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: counterBlockVersion 1
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifIndex 14
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: networkType 7
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifSpeed 10000000
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifDirection 1
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifStatus 3
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInOctets 301521361
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInUcastPkts 15808619
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInMulticastPkts 3562548
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInBroadcastPkts 218921
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInDiscards 15808619
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInErrors 3562548
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifInUnknownProtos 218921
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutOctets 1911517991
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutUcastPkts 11620438
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutMulticastPkts 119066840
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutBroadcastPkts 22017686
> Tue Feb 10 13:21:21 2004 SFLOW_DEBUG: ifOutDiscards 11620438
>
> But ntop doesn't seem to see it, somehow:
>
> sFlow-device|sFlow-device|||255.255.255.255|255.255.255.255|0.0.0.
> 0|0|0|0|0|0|1||0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0
> |0|0|0|0|0|0|0|0|0|0|0|0|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0
> .00|0.00|last60MinutesThpt|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00
> |0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|
> 0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0
> .00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.
> 00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|las
> t24HoursThpt|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.0
> 0|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00
> |last30daysThpt|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|
> 0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0.00|0
> .00|0.00|0.00|0.00|0.00|0.00|0.00|IP|FTP|0|0|0|0|HTTP|0|0|0|0|DNS|
> 0|0|0|0|Telnet|0|0|0|0|NBios-IP|0|0|0|0|Mail|0|0|0|0|DHCP-BOOTP|0|
> 0|0|0|SNMP|0|0|0|0|NNTP|0|0|0|0|NFS_AFS|0|0|0|0|X11|0|0|0|0|SSH|0|
> 0|0|0|Gnutella|0|0|0|0|Kazaa|0|0|0|0|WinMX|0|0|0|0|DC++|0|0|0|0|eD
> onkey|0|0|0|0|Messenger|0|0|0|0|securityPkts|0|0|0|0|0|0|0|0|0|0|0
> |0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|0|
>
> I'm willing to help fix this...let me know what I can do.
>
> Thanks,
>
> Mike
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
