Ok, thanks for the answer. So I go back to netflow v5. Best regards
J�rgen Orlowsky > -----Urspr�ngliche Nachricht----- > Von: Burton M. Strauss III [mailto:[EMAIL PROTECTED] > Gesendet: Sonntag, 18. Juli 2004 14:12 > An: [EMAIL PROTECTED] > Betreff: RE: [Ntop] **WARNING** Template 0 > > > That's from plugins/netflowPlugin.c in dissectFlow() where > it's trying to > jimmy a V9 flow into the V5 format ntop can handle. Since it > doesn't match > what ntop expects/knows how to handle it ignores the flow. > > -----Burton > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > > [EMAIL PROTECTED] > > Sent: Friday, July 16, 2004 5:02 AM > > To: [EMAIL PROTECTED] > > Subject: [Ntop] **WARNING** Template 0 > > > > > > Hello, > > > > I use ntop 3.0 (Source: ntop-3.0_fc-0.i386.rpm) and get the warning > > > > "Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > > [actual=8/expected=0]: skipped" > > > > I think from the web-server at the start from ntop. > > The start loops at this poin ant ntop doesN#t come up. > > Any idea ? > > > > Thanks alot!!! > > > > > > Best regards > > Juergen > > > > > > [EMAIL PROTECTED] root]# ntop @/etc/ntop.conf > > Processing file /etc/ntop.conf for parameters... > > Fri Jul 16 11:51:14 2004 ntop v.3.0 SourceForge RPM MT (SSL) > > Fri Jul 16 11:51:14 2004 Configured on Mar 21 2004 > 20:46:06, built on Mar > > 21 2004 20:48:04. > > Fri Jul 16 11:51:14 2004 Copyright 1998-2004 by Luca Deri > <[EMAIL PROTECTED]> > > Fri Jul 16 11:51:14 2004 Get the freshest ntop from > http://www.ntop.org/ > > Fri Jul 16 11:51:14 2004 Initializing ntop > > Fri Jul 16 11:51:14 2004 PROTO_INIT: Processing protocol list: > > 'NON_ASSGN_PRIV=0|2-4|6|8|10|12|14|16|24|26-36|38|40-41|44-48|51-5 > > 2|54-62|64 > > -66|75-78|81-87|89-94|96-97|99-100|103-104|108|112|114|116|118|120 > > -122|124-1 > > 36|140-142|144-160|165-173|175-176|180-190|192-193|195-198|200|203 > > |205|207-2 > > 08|211-212|214-219|221-244|246-346|348-362|364-368|371|373-388|390 > > -426|428-4 > > 33|436-442|446-463|466-467|469-486|489-495|497-499|501-511|516|522 > > -524|527-5 > > 29|534|536-537|539|541-542|545|549-553|555|557-562|564|566-586|588 > > -609|613-6 > > 15|617-630|632-635|637-673|675-693|695-748| > > 753|755-759|761-764|766|768-807|809-870|872|874-900|902-952|954-99 > > 1|996-1024 > > ,ASSGN_PRIV=tcpmux|rje|echo|discard|systat|daytime|netstat|qotd|ms > > p|chargen| > > time|rlp|nameserver|nicname|tacacs|re-mail-ck|whois++|bootps|bootp > > c|tftp|gop > > her|netrjs-1|netrjs-2|netrjs-3|netrjs-4|finger|kerberos|supdup|lin > > uxconf|hos > > tname|iso-tsap|csnet-ns|poppassd|rtelnet|sunrpc|auth|sftp|uucp-pat > > h|ntp|imap > > |snmptrap|cmip-man|cmip-agent|mailq|xdmcp|nextstep|bgp|prospero|ir > > c|smux|at- > > rtm > > Fri Jul 16 11:51:14 2004 Creating dummy interface, 'none' > > Fri Jul 16 11:51:14 2004 -i none, so initialized only a > dummy device > > Fri Jul 16 11:51:14 2004 Checking none for additional devices > > Fri Jul 16 11:51:14 2004 Resetting traffic statistics for > device none > > Fri Jul 16 11:51:14 2004 Initializing gdbm databases > > Fri Jul 16 11:51:14 2004 Now running as requested user > 'ntop' (500:500) > > Fri Jul 16 11:51:15 2004 VENDOR: Loading MAC address table. > > Fri Jul 16 11:51:15 2004 VENDOR: Checking for MAC address > table file > > Fri Jul 16 11:51:15 2004 VENDOR: File > '/etc/ntop/specialMAC.txt.gz' does > > not need to be reloaded > > Fri Jul 16 11:51:15 2004 VENDOR: ntop continues ok > > Fri Jul 16 11:51:15 2004 VENDOR: Checking for MAC address > table file > > Fri Jul 16 11:51:15 2004 VENDOR: File '/etc/ntop/oui.txt.gz' > > does not need > > to be reloaded > > Fri Jul 16 11:51:15 2004 VENDOR: ntop continues ok > > Fri Jul 16 11:51:15 2004 OSFP: Checking for OS fingerprint > table file > > Fri Jul 16 11:51:15 2004 OSFP: Loading file > > '/etc/ntop/etter.passive.os.fp.gz' > > Fri Jul 16 11:51:15 2004 ASN: Checking for Autonomous > System Number table > > file > > Fri Jul 16 11:51:15 2004 **WARNING** ASN: Unable to open file > > 'AS-list.txt' > > Fr 16 Jul 2004 11:51:15 CEST I18N: Default language (from > ntop host) is > > 'de_DE' > > Fr 16 Jul 2004 11:51:15 CEST I18N: This instance of ntop supports 0 > > additional language(s) > > Fr 16 Jul 2004 11:51:15 CEST IP2CC: Checking for IP > address <-> Country > > Code mapping file > > Fr 16 Jul 2004 11:51:15 CEST IP2CC: Loading file > > '/etc/ntop/p2c.opt.table.gz' > > Fr 16 Jul 2004 11:51:16 CEST IP2CC: ...found 52395 lines > > Fr 16 Jul 2004 11:51:16 CEST GDVERCHK: Guessing at libgd version > > Fr 16 Jul 2004 11:51:16 CEST **WARNING** GDVERCHK: Unable > to load gd, > > message is 'libgd.so: cannot open shared object file: Datei oder > > Verzeichnis > > nicht gefunden' > > Fr 16 Jul 2004 11:51:16 CEST GDVERCHK: ... as 2.x > > Fr 16 Jul 2004 11:51:16 CEST Initializing external applications > > Fr 16 Jul 2004 11:51:16 CEST Initializing semaphores, > mutexes and threads > > Fr 16 Jul 2004 11:51:16 CEST NOTE: atfork() handler registered > > for mutexes, > > rc 0 > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread > (-1088570448) for > > network packet analyser > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Fingerprint scan thread > > running... > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread > (-1099060304) for > > fingerprinting > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Idle host scan > thread running... > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread > (-1109550160) for > > idle hosts detection > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Packet processor thread > > running... > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Address resolution thread > > running... > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: Started thread > (-1120040016) for > > DNS address resolution > > Fr 16 Jul 2004 11:51:16 CEST Calling plugin start > functions (if any) > > Fr 16 Jul 2004 11:51:16 CEST Sniffying... > > Fr 16 Jul 2004 11:51:16 CEST INIT: Created pid file > > (/usr/share/ntop/ntop.pid) > > Fr 16 Jul 2004 11:51:16 CEST CHKVER: Checking current ntop > version at > > version.ntop.org/version.xml > > Fr 16 Jul 2004 11:51:16 CEST Listening on [none] > > Fr 16 Jul 2004 11:51:16 CEST Now running as requested user > > 'ntop' (500:500) > > Fr 16 Jul 2004 11:51:16 CEST Loading Plugins > > Fr 16 Jul 2004 11:51:16 CEST Searching for plugins in > > /usr/lib/ntop/plugins > > Fr 16 Jul 2004 11:51:16 CEST LASTSEEN: Welcome to > > LastSeenWatchPlugin. (C) > > 1999 by Andrea Marangoni > > Fr 16 Jul 2004 11:51:16 CEST **ERROR** CHKVER: Unable to > connect socket: > > Keine Route zum Zielrechner(113) > > Fr 16 Jul 2004 11:51:16 CEST CHKVER: Checking current ntop > version at > > www.burtonstrauss.com/version.xml > > Fr 16 Jul 2004 11:51:16 CEST ICMP: Welcome to icmpWatchPlugin. (C) > > 1999-2004 by Luca Deri > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Welcome to > NetFlow.(C) 2002-04 by > > Luca Deri > > Fr 16 Jul 2004 11:51:16 CEST NFS: Welcome to nfsWatchPlugin. (C) > > 1999-2004 > > by Luca Deri > > Fr 16 Jul 2004 11:51:16 CEST PDA: Welcome to PDAPlugin. > (C) 2001-2004 by > > L.Deri and W.Brock > > Fr 16 Jul 2004 11:51:16 CEST RRD: Welcome to rrdPlugin. (C) > > 2002-04 by Luca > > Deri. > > Fr 16 Jul 2004 11:51:16 CEST SFLOW: Welcome to sFlowPlugin. (C) > > 2002-04 by > > Luca Deri > > Fr 16 Jul 2004 11:51:16 CEST XML: Welcome to xmldump plugin. (C) > > 2003-2004 > > by Burton Strauss > > Fr 16 Jul 2004 11:51:16 CEST Calling plugin start > functions (if any) > > Fr 16 Jul 2004 11:51:16 CEST RRD: Welcome to the RRD plugin > > Fr 16 Jul 2004 11:51:16 CEST RRD: Mask for new directories is 0700 > > Fr 16 Jul 2004 11:51:16 CEST RRD: Mask for new files is 0066 > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: rrd thread > (-1141019728) started > > Fr 16 Jul 2004 11:51:16 CEST RRD: Started thread > (-1141019728) for data > > collection. > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: White list initialized to '' > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Black list initialized to '' > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: FILEDESCRIPTORBUG: > Work-around > > activated > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Created a socket (13) > > Fr 16 Jul 2004 11:51:16 CEST NETFLOW: Collector listening > on port 2055 > > Fr 16 Jul 2004 11:51:16 CEST Creating dummy interface, > 'NetFlow-device' > > Fr 16 Jul 2004 11:51:16 CEST THREADMGMT: netFlow > thread(-1152078928) > > started > > Fr 16 Jul 2004 11:51:16 CEST SSL is present but https is > disabled: use -W > > <https port> for enabling it > > Fr 16 Jul 2004 11:51:17 CEST Note: Reporting device > initally set to 1 > > [NetFlow-device] > > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initializing web server > > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initializing tcp/ip socket > > connections for web server > > Fr 16 Jul 2004 11:51:17 CEST FILEDESCRIPTORBUG: > Work-around activated > > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Initialized socket, > port 3000, > > address (any) > > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Waiting for HTTP > > connections on port > > 3000 > > Fr 16 Jul 2004 11:51:17 CEST INITWEB: Starting web server > > Fr 16 Jul 2004 11:51:17 CEST THREADMGMT: web connections > thread (1837) > > started... > > Fr 16 Jul 2004 11:51:17 CEST Note: SIGPIPE handler set (ignore) > > Fr 16 Jul 2004 11:51:17 CEST WEB: ntop's web server is now > processing > > requests > > Fr 16 Jul 2004 11:51:17 CEST THREADMGMT: Started thread > (-1162568784) for > > web server > > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > > [actual=26782/expected=512]: skipped > > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > > [actual=8/expected=0]: skipped > > Fr 16 Jul 2004 11:51:17 CEST **WARNING** Template 0 has wrong size > > [actual=8/expected=0]: skipped > > .... > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
