Hi.

Really sorry to bother you with this problem.

I made the changes in rrdPlugin.c, compiled, installed and restarted ntop. Here is what I can see :
  • The host page 193.51.208.69.html shows a ratio of 18.4%/81.6% for local/remote trafic
  • A total of 4.5 MB sent and 934 MB received
  • In the same time, historical data from rrdPlugin show flat graphics, no traffic
  • The file bytesRcvdFromRem.rrd is empy of data which is not correct with the above (except flat graphics :-\ )
    [EMAIL PROTECTED] 69]# rrdtool dump bytesRcvdFromRem.rrd | grep -v NaN
    <!-- Round Robin Database Dump -->
    <rrd>
            <version> 0001 </version>
            <step> 300 </step> <!-- Seconds -->
            <lastupdate> 1110199982 </lastupdate> <!-- 2005-03-07 13:53:02 CET -->

            <ds>
                    <name> counter </name>
                    <type> COUNTER </type>
                    <minimal_heartbeat> 300 </minimal_heartbeat>
                    <min> 0.0000000000e+00 </min>
                    <max> 1.2500000000e+08 </max>

                    <!-- PDP Status -->
                    <last_ds> 891497287 </last_ds>
                    <value> 0.0000000000e+00 </value>
                    <unknown_sec> 182 </unknown_sec>
            </ds>

    <!-- Round Robin Archives -->
            <rra>
                    <cf> AVERAGE </cf>
                    <pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds -->
                    <xff> 5.0000000000e-01 </xff>

                    <cdp_prep>
                    </cdp_prep>
                    <database>
                    </database>
            </rra>
            <rra>
                    <cf> MIN </cf>
                    <pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds -->
                    <xff> 5.0000000000e-01 </xff>

                    <cdp_prep>
                    </cdp_prep>
                    <database>
                    </database>
            </rra>
            <rra>
                    <cf> MAX </cf>
                    <pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds -->
                    <xff> 5.0000000000e-01 </xff>

                    <cdp_prep>
                    </cdp_prep>
                    <database>
                    </database>
            </rra>
            <rra>
                    <cf> AVERAGE </cf>
                    <pdp_per_row> 12 </pdp_per_row> <!-- 3600 seconds -->
                    <xff> 5.0000000000e-01 </xff>

                    <cdp_prep>
                    </cdp_prep>
                    <database>
                    </database>
            </rra>
            <rra>
                    <cf> AVERAGE </cf>
                    <pdp_per_row> 288 </pdp_per_row> <!-- 86400 seconds -->
                    <xff> 5.0000000000e-01 </xff>

                    <cdp_prep>
                    </cdp_prep>
                    <database>
                    </database>
            </rra>
    </rrd>
  • A grep in /var/log/messages show no update
    [EMAIL PROTECTED] ntop]# grep 193/51/208/69 /var/log/messages
    Mar  7 09:08:26 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 09:16:01 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 09:31:05 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 09:31:05 metro-sop ntop[4544]:   RRD_DEBUG: rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/, udpRcvdLoc, 4788)=0
    Mar  7 09:31:05 metro-sop ntop[4544]:   RRD_DEBUG: rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/IP_,FTPRcvdBytes, 600)=0
    Mar  7 09:50:04 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 10:23:44 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 10:57:38 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 10:57:38 metro-sop ntop[4544]:   RRD_DEBUG: rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/IP_,Possible P2PRcvdBytes, 96)=0
    Mar  7 11:52:20 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 12:14:28 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 12:35:07 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 12:59:11 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 13:37:40 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
    Mar  7 13:58:38 metro-sop ntop[4544]:   RRD_DEBUG: calling mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
  • I modified the source rrdPlugin.c : in function updateRRD I added the RRD_DEBUG code at line 1201. The code looks like this (version 3.1 of ntop) :
            traceEvent(CONST_TRACE_WARNING,
                       "RRD: actTime = %d(%s), rrdTime %d(%s), lastUpd %d(%s)",
                       myGlobals.actTime,
                       errTimeBuf1,
                       rrdTime,
                       errTimeBuf2,
                       rrdLast,
                       rrdLast == -1 ? "rrdlast ERROR" : errTimeBuf3);
          } else if(strstr(rrdError, "is not an RRD file")) {
            unlink(path);
          }

          rrd_clear_error();
        } else {
    #if RRD_DEBUG > 0
        traceEvent(CONST_TRACE_INFO, "RRD_DEBUG: rrd_create(%s, %s, %u)=%d",
                   hostPath, key, (unsigned long)value, rc);
    #endif
       }
      }
Do you have an idea of what's happening ? It may have nothing to do with our problem, but this ntop is running on a Fedora Core 3.

-- 
Didier Benza                            [EMAIL PROTECTED]
Tel : +33 492 38 7167 /  Fax : +33 492 38 7602 
INRIA 2004, Route des Lucioles, BP  93, 06902 Sophia Antipolis Cedex


Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to