Hi Burton,
Thank you for responding to my query last week. My Ntop server has been stable for 4
days now and the way I resolved the problem was by deleting the DNS cache database
file at /usr/share/ntop/dnsCache.db
Thanks Again,
Jado
[EMAIL PROTECTED] wrote:
Send Ntop mailing list submissions to
[EMAIL PROTECTED]
To subscribe or unsubscribe via the World Wide Web, visit
http://listgateway.unipi.it/mailman/listinfo/ntop
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]
You can reach the person managing the list at
[EMAIL PROTECTED]
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Ntop digest..."
Today's Topics:
1. RE: ntop binary for Solaris 2.5.1? (Burton M. Strauss III)
2. Cert SSL ntop (Administrateur)
3. http 440 error (Diego Boccardo)
4. RE: Cert SSL ntop (Burton M. Strauss III)
5. RE: http 440 error (Burton M. Strauss III)
6. Ntop stops after working for a while (Jado Moh)
7. RE: Ntop stops after working for a while (Burton M. Strauss III)
8. Ntop - Windows XP - service parameter problem (Dilan Arumainathan)
----------------------------------------------------------------------
Message: 1
Date: Wed, 16 Jun 2004 09:12:56 -0500
From: "Burton M. Strauss III"
Subject: RE: [Ntop] ntop binary for Solaris 2.5.1?
To:
Message-ID:
Content-Type: text/plain; charset="US-ASCII"
Guess I don't see how installing half a dozen packages from SunFreeware
qualifies as 'building a machine', but yeah, if that's what it's going to
take, that's what it's going to take.
The version.xml logs show this for Solaris:
109 Solaris 8
62 Solaris 9
4 Solaris 2.7
So be warned that you may well have to do some debugging - probably should
install the debugger (gdb) too!
Have Fun!
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> stan
> Sent: Wednesday, June 16, 2004 7:44 AM
> To: [EMAIL PROTECTED]
> Subject: Re: [Ntop] ntop binary for Solaris 2.5.1?
>
>
> On Fri, Jun 11, 2004 at 08:49:50AM -0700, Mike Tremaine wrote:
> > On Fri, 2004-06-11 at 07:58, Burton M. Strauss III wrote:
> > > Make your own. AFAIK it hasn't even been tested under
> anything that old, so
> > > you should plan on doing the full workup anyway.
> > >
> > > -----Burton
> > >
> >
> > I took a quick look at http://www.sunfreeware.com and it seems the
> > toolchain is all there for 2.5 so unless there are specific issues with
> > the Kernel I think it would build.
> >
> > Read the FAQ on requirements and install all the autoconf automake gcc
> > libpcap and all the others from there and give it a try I'm sure we'd
> > all like to here that it works.
> >
> > Be sure to set your linker values (crle) or use LD_LIBRARY_PATH to point
> > at all these things (usually I put /usr/local before /usr or /opt so
> > that the sunfreeware stuff overides the default sun tools.)
> >
> If I get a chance, I will.
>
> I was hoping to not have to build a machien to buld this on :-(
>
> Thanks for checking it out.
------------------------------
Message: 2
Date: Wed, 16 Jun 2004 16:47:40 +0200
From: "Administrateur"
Subject: [Ntop] Cert SSL ntop
To:
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
Hi,
I try to change certificate SSL of lucas but I don't arrive there.
Thanks a lot.
Emmanuel.
------------------------------
Message: 3
Date: Wed, 16 Jun 2004 14:16:51 -0300
From: Diego Boccardo
Subject: [Ntop] http 440 error
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset=us-ascii; format=flowed
Recently I compiled ntop 30 with susue 7.1 with sparc equipment.. 1gb ram...
everthing its ok but several minutes running hangs and I get
http error 400 The specified request is invalid.
the only clue that I have is that the ntop seeks after some minutes at
least 1.000.000 packets (wan-internet mirrored port)
The log doesnt 't seem to help me...
tthe ps -aef appears
P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31248 31247 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31249 31248 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31251 31248 0 14:16 pts/1 00:01:02 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31252 31248 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31254 31248 0 14:16 pts/1 00:01:05 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31255 31248 0 14:16 pts/1 00:00:01 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31256 31248 57 14:16 pts/1 01:29:18 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
root 31250 31248 0 14:16 pts/1 00:00:03 /usr/local/bin/ntop -g
--no-fc -P /home -u root -m
10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
-i eth1 -w 8080
I made a strace to the first process an is in wait...only...
if a made a telnet directly answer that i not support frames ....
any ideas
TIA
------------------------------
Message: 4
Date: Wed, 16 Jun 2004 15:40:20 -0500
From: "Burton M. Strauss III"
Subject: RE: [Ntop] Cert SSL ntop
To:
Message-ID:
Content-Type: text/plain; charset="US-ASCII"
Read the instructions in docs/FAQ
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Administrateur
> Sent: Wednesday, June 16, 2004 9:48 AM
> To: [EMAIL PROTECTED]
> Subject: [Ntop] Cert SSL ntop
>
>
>
>
>
>
> Hi,
>
>
>
> I try to change certificate SSL of lucas but I don't arrive there.
>
> Thanks a lot.
>
>
>
> Emmanuel.
>
>
------------------------------
Message: 5
Date: Wed, 16 Jun 2004 15:50:32 -0500
From: "Burton M. Strauss III"
Subject: RE: [Ntop] http 440 error
To:
Message-ID:
Content-Type: text/plain; charset="US-ASCII"
OK, that's 3 times you've sent this message with different subjects each
time in less than 24 hours.
Maybe:
1. Nobody has gotten to your problem yet.
2. Nobody has any ideas about your problem.
3. You haven't provided us with the information we ask for (see docs/FAQ
"HowTo ask for Help").
4. Nobody cares about your problem.
Pick your answer. But a 4th repletion will get you kill filed on my mail
client.
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Diego Boccardo
> Sent: Wednesday, June 16, 2004 12:17 PM
> To: [EMAIL PROTECTED]
> Subject: [Ntop] http 440 error
>
>
> Recently I compiled ntop 30 with susue 7.1 with sparc equipment..
> 1gb ram...
> everthing its ok but several minutes running hangs and I get
> http error 400 The specified request is invalid.
> the only clue that I have is that the ntop seeks after some minutes at
> least 1.000.000 packets (wan-internet mirrored port)
> The log doesnt 't seem to help me...
> tthe ps -aef appears
> P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31248 31247 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31249 31248 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31251 31248 0 14:16 pts/1 00:01:02 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31252 31248 0 14:16 pts/1 00:00:00 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31254 31248 0 14:16 pts/1 00:01:05 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31255 31248 0 14:16 pts/1 00:00:01 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31256 31248 57 14:16 pts/1 01:29:18 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
> root 31250 31248 0 14:16 pts/1 00:00:03 /usr/local/bin/ntop -g
> --no-fc -P /home -u root -m
> 10.30.0.0/255.255.0.0,10.20.0.0/255.255.0.0,200.1.116.0/255.255.255.0 -o
> -i eth1 -w 8080
>
> I made a strace to the first process an is in wait...only...
> if a made a telnet directly answer that i not support frames ....
>
> any ideas
> TIA
>
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listgateway.unipi.it/mailman/listinfo/ntop
------------------------------
Message: 6
Date: Wed, 16 Jun 2004 14:02:00 -0700 (PDT)
From: Jado Moh
Subject: [Ntop] Ntop stops after working for a while
To: [EMAIL PROTECTED]
Message-ID: <[EMAIL PROTECTED]>
Content-Type: text/plain; charset="us-ascii"
Hi,
I have installed Ntop on redhat enterprise 3.0 with 4 gigs of RAM. We are collecting
netflow data from our core routers and it worked for 2 days and stopped due to
insufficient memory. I restarted it and then it stopped working again but not due to
insuffient memory but fo reasons I do not know. Here is the log information
Jun 16 14:44:29 ahcrhmon001 ntop[1518]: THREADMGMT: Started thread (-1309774928) for
web server
Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: Version file is from 'version.ntop.org'
Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: as of date is '2004-03-22T04:30:00'
Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: This version of ntop is the CURRENT
stable version
Jun 16 14:44:41 ahcrhmon001 ntop[1518]: **WARNING** Address resolution queue is full
[4096 slots]
Jun 16 14:44:41 ahcrhmon001 ntop[1518]: Addresses in excess won't be resolved - ntop
continues
Jun 16 15:10:40 ahcrhmon001 ntop[1518]: **WARNING** Error: bad magic number
(expected=1968/real=4535)
Jun 16 15:10:40 ahcrhmon001 ntop[1518]: **WARNING** Error: wrong bucketIdx /160.92
(expected=4535/real=0)
Thanks,
Jado
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
------------------------------
Message: 7
Date: Wed, 16 Jun 2004 16:18:35 -0500
From: "Burton M. Strauss III"
Subject: RE: [Ntop] Ntop stops after working for a while
To:
Message-ID:
Content-Type: text/plain; charset="US-ASCII"
Something is seriously wrong.
"Address resolution queue is full" is just a warning. Either ntop saw too
many new hosts to queue up all at once or your DNS resolution isn't working.
Either way, it won't break things too badly.
But the other two messages,
"Error: bad magic number" and "Error: wrong bucketIdx /160.92
(expected=4535/real=0)" are usually signs of serious memory problems.
And trapping these are difficult - by the time ntop recognizes the problem,
the damage was done long before.
If memory is corrupted, then when it finally dies, that's also probably just
a side effect, so gdb won't help.
Nothing obvious jumps out - debugging these type of problems usually isn't a
pretty.
If you are interested in paid support, contact me off list.
-----Burton
> -----Original Message-----
> From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> Jado Moh
> Sent: Wednesday, June 16, 2004 4:02 PM
> To: [EMAIL PROTECTED]
> Subject: [Ntop] Ntop stops after working for a while
>
>
> Hi,
>
> I have installed Ntop on redhat enterprise 3.0 with 4 gigs of
> RAM. We are collecting netflow data from our core routers and it
> worked for 2 days and stopped due to insufficient memory. I
> restarted it and then it stopped working again but not due to
> insuffient memory but fo reasons I do not know. Here is the log
> information
>
> Jun 16 14:44:29 ahcrhmon001 ntop[1518]: THREADMGMT: Started
> thread (-1309774928) for web server
> Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: Version file is
> from 'version.ntop.org'
> Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: as of date is
> '2004-03-22T04:30:00'
> Jun 16 14:44:29 ahcrhmon001 ntop[1518]: CHKVER: This version of
> ntop is the CURRENT stable version
> Jun 16 14:44:41 ahcrhmon001 ntop[1518]: **WARNING** Address
> resolution queue is full [4096 slots]
> Jun 16 14:44:41 ahcrhmon001 ntop[1518]: Addresses in excess
> won't be resolved - ntop continues
> Jun 16 15:10:40 ahcrhmon001 ntop[1518]: **WARNING** Error: bad
> magic number (expected=1968/real=4535)
> Jun 16 15:10:40 ahcrhmon001 ntop[1518]: **WARNING** Error:
> wrong bucketIdx /160.92 (expected=4535/real=0)
>
> Thanks,
> Jado
>
> __________________________________________________
> Do You Yahoo!?
> Tired of spam? Yahoo! Mail has the best spam protection around
> http://mail.yahoo.com
------------------------------
Message: 8
Date: Wed, 16 Jun 2004 14:37:22 -0700
From: "Dilan Arumainathan"
Subject: [Ntop] Ntop - Windows XP - service parameter problem
To:
Message-ID:
Content-Type: text/plain; charset="iso-8859-1"
Hi,
I am running ntop v.3.0 MT (Openxtra) on Windows XP SP1. I am trying to add
ntop as a service by entering the command "ntop /i -i 1" where interface
number 1 is the card that I need to capture traffic on. After I run this
command the service gets created and starts fine but traffic is only being
captured on interface 0. Is there a workaround or am I relegated to using
ntop /c -i 1;
thanks
dilan
------------------------------
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
End of Ntop Digest, Vol 1, Issue 1619
*************************************
---------------------------------
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
