That's usually the problem - two updates. Anything that confuses ntop into creating two slightly different host records will potentially cause this.
Look in the various host based reports and if you see two nearly identical records that's probably it. If so, turn on debug and you'll get additional information in the host name that indicates the source of the name (dns, IP, MAC, etc.). Look at -o | --no-mac in man ntop too. -----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > KiNo > Sent: Wednesday, July 07, 2004 10:39 AM > To: ntop-user > Subject: [Ntop] RE: illegal attempt to update > > > No I don't use VLANs > But Ntop records the traffic mirrored from another > port > (the one linked to the gateway) > The error message sounds like Ntop is trying to make > two updates at the same time, isn't it ? > > Nicolas > > > Message: 1 > Date: Tue, 6 Jul 2004 06:36:08 -0500 > From: "Burton M. Strauss III" <[EMAIL PROTECTED]> > Subject: RE: [Ntop] illegal attempt to update > To: <[EMAIL PROTECTED]> > Message-ID: > <[EMAIL PROTECTED]> > Content-Type: text/plain; charset="iso-8859-1" > > Are you using VLANs? One case I'm aware of which > causes ntop to duplicate > hosts in the tables is when it sees the same host on > an interface multiple > times because of VLANs. > > I have a patch for this I'm testing... > > -----Burton > > > -----Original Message----- > > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Behalf Of > > KiNo > > Sent: Tuesday, July 06, 2004 2:41 AM > > To: ntop-user > > Subject: [Ntop] illegal attempt to update > > > > > > Hi, > > > > I've got the following error messages in my log > files > > (/var/log/daemon.log && /var/log/syslog) > > It always refers to the same host W.X.Y.Z and one or > > two messages are added each minute (my update > > intervall in RRD is 60 seconds) > > > > Jul 6 09:27:51 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedSentPeers.rrd) > > error: illegal attempt to update using time > 1089098870 > > when last update time is 1089098870 (minimum one > > second step) > > Jul 6 09:27:51 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedRcvdPeers.rrd) > > error: illegal attempt to update using time > 1089098870 > > when last update time is 1089098870 (minimum one > > second step) > > Jul 6 09:28:50 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedSentPeers.rrd) > > error: illegal attempt to update using time > 1089098930 > > when last update time is 1089098930 (minimum one > > second step) > > Jul 6 09:28:50 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedRcvdPeers.rrd) > > error: illegal attempt to update using time > 1089098930 > > when last update time is 1089098930 (minimum one > > second step) > > Jul 6 09:29:50 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedSentPeers.rrd) > > error: illegal attempt to update using time > 1089098990 > > when last update time is 1089098990 (minimum one > > second step) > > Jul 6 09:29:50 lucy ntop[468]: **WARNING** RRD: > > > rrd_update(/var/lib/ntop/rrd/interfaces/eth0/hosts/W/X/Y/Z/totCont > > actedRcvdPeers.rrd) > > error: illegal attempt to update using time > 1089098990 > > when last update time is 1089098990 (minimum one > > second step) > > > > In those examples, the problem occurs with the table > > totContactedSentPeers.rrd & > totContactedRcvdPeers.rrd > > but it also happens with the other tables. It looks > > like random. > > Finally the PC used to crash after one or 2 days (as > > I've nothing else in the log file I suppose that the > 2 > > problems are related). > > > > Platform: > > Debian Sarge (kernel 2.4.22) > > Ntop 3.0-1 > > > > > > > Cr�ez gratuitement votre Yahoo! Mail avec 100 Mo de stockage ! > Cr�ez votre Yahoo! Mail sur http://fr.benefits.yahoo.com/ > > Dialoguez en direct avec vos amis gr�ce � Yahoo! Messenger > !T�l�chargez Yahoo! Messenger sur http://fr.messenger.yahoo.com > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
