That's from plugins/netflowPlugin.c in dissectFlow() where it's trying to jimmy a V9 flow into the V5 format ntop can handle. Since it doesn't match what ntop expects/knows how to handle it ignores the flow.
-----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Friday, July 16, 2004 5:02 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] **WARNING** Template 0 > > > Hello, > > I use ntop 3.0 (Source: ntop-3.0_fc-0.i386.rpm) and get the warning > > "Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > [actual=8/expected=0]: skipped" > > I think from the web-server at the start from ntop. > The start loops at this poin ant ntop doesN#t come up. > Any idea ? > > Thanks alot!!! > > > Best regards > Juergen > > > [EMAIL PROTECTED] root]# ntop @/etc/ntop.conf > Processing file /etc/ntop.conf for parameters... > Fri Jul 16 11:51:14 2004 ntop v.3.0 SourceForge RPM MT (SSL) > Fri Jul 16 11:51:14 2004 Configured on Mar 21 2004 20:46:06, built on Mar > 21 2004 20:48:04. > Fri Jul 16 11:51:14 2004 Copyright 1998-2004 by Luca Deri <[EMAIL PROTECTED]> > Fri Jul 16 11:51:14 2004 Get the freshest ntop from http://www.ntop.org/ > Fri Jul 16 11:51:14 2004 Initializing ntop > Fri Jul 16 11:51:14 2004 PROTO_INIT: Processing protocol list: > 'NON_ASSGN_PRIV=0|2-4|6|8|10|12|14|16|24|26-36|38|40-41|44-48|51-5 > 2|54-62|64 > -66|75-78|81-87|89-94|96-97|99-100|103-104|108|112|114|116|118|120 > -122|124-1 > 36|140-142|144-160|165-173|175-176|180-190|192-193|195-198|200|203 > |205|207-2 > 08|211-212|214-219|221-244|246-346|348-362|364-368|371|373-388|390 > -426|428-4 > 33|436-442|446-463|466-467|469-486|489-495|497-499|501-511|516|522 > -524|527-5 > 29|534|536-537|539|541-542|545|549-553|555|557-562|564|566-586|588 > -609|613-6 > 15|617-630|632-635|637-673|675-693|695-748| > 753|755-759|761-764|766|768-807|809-870|872|874-900|902-952|954-99 > 1|996-1024 > ,ASSGN_PRIV=tcpmux|rje|echo|discard|systat|daytime|netstat|qotd|ms > p|chargen| > time|rlp|nameserver|nicname|tacacs|re-mail-ck|whois++|bootps|bootp > c|tftp|gop > her|netrjs-1|netrjs-2|netrjs-3|netrjs-4|finger|kerberos|supdup|lin > uxconf|hos > tname|iso-tsap|csnet-ns|poppassd|rtelnet|sunrpc|auth|sftp|uucp-pat > h|ntp|imap > |snmptrap|cmip-man|cmip-agent|mailq|xdmcp|nextstep|bgp|prospero|ir > c|smux|at- > rtm > Fri Jul 16 11:51:14 2004 Creating dummy interface, 'none' > Fri Jul 16 11:51:14 2004 -i none, so initialized only a dummy device > Fri Jul 16 11:51:14 2004 Checking none for additional devices > Fri Jul 16 11:51:14 2004 Resetting traffic statistics for device none > Fri Jul 16 11:51:14 2004 Initializing gdbm databases > Fri Jul 16 11:51:14 2004 Now running as requested user 'ntop' (500:500) > Fri Jul 16 11:51:15 2004 VENDOR: Loading MAC address table. > Fri Jul 16 11:51:15 2004 VENDOR: Checking for MAC address table file > Fri Jul 16 11:51:15 2004 VENDOR: File '/etc/ntop/specialMAC.txt.gz' does > not need to be reloaded > Fri Jul 16 11:51:15 2004 VENDOR: ntop continues ok > Fri Jul 16 11:51:15 2004 VENDOR: Checking for MAC address table file > Fri Jul 16 11:51:15 2004 VENDOR: File '/etc/ntop/oui.txt.gz' > does not need > to be reloaded > Fri Jul 16 11:51:15 2004 VENDOR: ntop continues ok > Fri Jul 16 11:51:15 2004 OSFP: Checking for OS fingerprint table file > Fri Jul 16 11:51:15 2004 OSFP: Loading file > '/etc/ntop/etter.passive.os.fp.gz' > Fri Jul 16 11:51:15 2004 ASN: Checking for Autonomous System Number table > file > Fri Jul 16 11:51:15 2004 **WARNING** ASN: Unable to open file > 'AS-list.txt' > Fr 16 Jul 2004 11:51:15 CEST I18N: Default language (from ntop host) is > 'de_DE' > Fr 16 Jul 2004 11:51:15 CEST I18N: This instance of ntop supports 0 > additional language(s) > Fr 16 Jul 2004 11:51:15 CEST IP2CC: Checking for IP address <-> Country > Code mapping file > Fr 16 Jul 2004 11:51:15 CEST IP2CC: Loading file > '/etc/ntop/p2c.opt.table.gz' > Fr 16 Jul 2004 11:51:16 CEST IP2CC: ...found 52395 lines > Fr 16 Jul 2004 11:51:16 CEST GDVERCHK: Guessing at libgd version > Fr 16 Jul 2004 11:51:16 CEST **WARNING** GDVERCHK: Unable to load gd, > message is 'libgd.so: cannot open shared object file: Datei oder > Verzeichnis > nicht gefunden' > Fr 16 Jul 2004 11:51:16 CEST GDVERCHK: ... as 2.x > Fr 16 Jul 2004 11:51:16 CEST Initializing external applications > Fr 16 Jul 2004 11:51:16 CEST Initializing semaphores, mutexes and threads > Fr 16 Jul 2004 11:51:16 CEST NOTE: atfork() handler registered > for mutexes, > rc 0 > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread (-1088570448) for > network packet analyser > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Fingerprint scan thread > running... > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread (-1099060304) for > fingerprinting > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Idle host scan thread running... > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread (-1109550160) for > idle hosts detection > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Packet processor thread > running... > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Address resolution thread > running... > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread (-1120040016) for > DNS address resolution > Fr 16 Jul 2004 11:51:16 CEST Calling plugin start functions (if any) > Fr 16 Jul 2004 11:51:16 CEST Sniffying... > Fr 16 Jul 2004 11:51:16 CEST INIT: Created pid file > (/usr/share/ntop/ntop.pid) > Fr 16 Jul 2004 11:51:16 CEST CHKVER: Checking current ntop version at > version.ntop.org/version.xml > Fr 16 Jul 2004 11:51:16 CEST Listening on [none] > Fr 16 Jul 2004 11:51:16 CEST Now running as requested user > 'ntop' (500:500) > Fr 16 Jul 2004 11:51:16 CEST Loading Plugins > Fr 16 Jul 2004 11:51:16 CEST Searching for plugins in > /usr/lib/ntop/plugins > Fr 16 Jul 2004 11:51:16 CEST LASTSEEN: Welcome to > LastSeenWatchPlugin. (C) > 1999 by Andrea Marangoni > Fr 16 Jul 2004 11:51:16 CEST **ERROR** CHKVER: Unable to connect socket: > Keine Route zum Zielrechner(113) > Fr 16 Jul 2004 11:51:16 CEST CHKVER: Checking current ntop version at > www.burtonstrauss.com/version.xml > Fr 16 Jul 2004 11:51:16 CEST ICMP: Welcome to icmpWatchPlugin. (C) > 1999-2004 by Luca Deri > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Welcome to NetFlow.(C) 2002-04 by > Luca Deri > Fr 16 Jul 2004 11:51:16 CEST NFS: Welcome to nfsWatchPlugin. (C) > 1999-2004 > by Luca Deri > Fr 16 Jul 2004 11:51:16 CEST PDA: Welcome to PDAPlugin. (C) 2001-2004 by > L.Deri and W.Brock > Fr 16 Jul 2004 11:51:16 CEST RRD: Welcome to rrdPlugin. (C) > 2002-04 by Luca > Deri. > Fr 16 Jul 2004 11:51:16 CEST SFLOW: Welcome to sFlowPlugin. (C) > 2002-04 by > Luca Deri > Fr 16 Jul 2004 11:51:16 CEST XML: Welcome to xmldump plugin. (C) > 2003-2004 > by Burton Strauss > Fr 16 Jul 2004 11:51:16 CEST Calling plugin start functions (if any) > Fr 16 Jul 2004 11:51:16 CEST RRD: Welcome to the RRD plugin > Fr 16 Jul 2004 11:51:16 CEST RRD: Mask for new directories is 0700 > Fr 16 Jul 2004 11:51:16 CEST RRD: Mask for new files is 0066 > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: rrd thread (-1141019728) started > Fr 16 Jul 2004 11:51:16 CEST RRD: Started thread (-1141019728) for data > collection. > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: White list initialized to '' > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Black list initialized to '' > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: FILEDESCRIPTORBUG: Work-around > activated > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Created a socket (13) > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Collector listening on port 2055 > Fr 16 Jul 2004 11:51:16 CEST Creating dummy interface, 'NetFlow-device' > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: netFlow thread(-1152078928) > started > Fr 16 Jul 2004 11:51:16 CEST SSL is present but https is disabled: use -W > <https port> for enabling it > Fr 16 Jul 2004 11:51:17 CEST Note: Reporting device initally set to 1 > [NetFlow-device] > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initializing web server > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initializing tcp/ip socket > connections for web server > Fr 16 Jul 2004 11:51:17 CEST FILEDESCRIPTORBUG: Work-around activated > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initialized socket, port 3000, > address (any) > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Waiting for HTTP > connections on port > 3000 > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Starting web server > Fr 16 Jul 2004 11:51:17 CEST THREADMGMT: web connections thread (1837) > started... > Fr 16 Jul 2004 11:51:17 CEST Note: SIGPIPE handler set (ignore) > Fr 16 Jul 2004 11:51:17 CEST WEB: ntop's web server is now processing > requests > Fr 16 Jul 2004 11:51:17 CEST THREADMGMT: Started thread (-1162568784) for > web server > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > [actual=26782/expected=512]: skipped > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > [actual=8/expected=0]: skipped > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > [actual=8/expected=0]: skipped > .... > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
