|
Well :-) the tag in 1201 should really be rrd_update, but
we can tell them apart - the real rrd_create has two parameters, the update has
three. So...
1) Ignore the mkdir_p calls - we know the directory
exists...
2) That leaves us with (between 9am and
2pm):
Mar 7
09:31:05 metro-sop ntop[4544]: RRD_DEBUG:
rrd_update(.../193/51/208/69/, udpRcvdLoc, 4788)=0
Mar 7 09:31:05
metro-sop ntop[4544]: RRD_DEBUG:
rrd_update(.../193/51/208/69/IP_,FTPRcvdBytes, 600)=0
Mar 7 10:57:38
metro-sop ntop[4544]: RRD_DEBUG:
rrd_update(.../193/51/208/69/IP_,Possible P2PRcvdBytes,
96)=0
Translating, ntop saw 600 FTP receive bytes and 4788 udp
bytes in the cycle ending at 9:31 and 96 possible P2P Receive bytes in the cycle
at 10:57.
Now that udpRcvdLoc is interesting, because it's in the
middle of the 'medium' detail of rrdUpdateIPHostStats():
updateTrafficCounter(rrdPath, "udpRcvdLoc",
&el->udpRcvdLoc);
This is good because it tells us that the dump hosts flag
is set, at least medium detail and that the basics of the rrd loop is
working. So we're left with why are the other counters being
bypassed.
The basic splitup of l/r traffic is pretty simple - look in
pbuf around 1100 and then 1680 for udp, etc. This is all well tested code
in processIpPkt. Nothing jumps out at me.
One question ... is this an SMP
box?
-----Burton
From:
[EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Didier
Benza
Sent: Monday, March 07, 2005 7:40 AM
To:
[email protected]
Subject: Re: [Ntop] No data in rrd
databases
Hi.
Really sorry to bother you with this problem.
I
made the changes in rrdPlugin.c, compiled, installed and restarted ntop. Here is
what I can see :
- The host page 193.51.208.69.html shows a ratio of 18.4%/81.6% for
local/remote trafic
- A total of 4.5 MB sent and 934 MB received
- In the same time, historical data from rrdPlugin show flat graphics, no
traffic
- The file bytesRcvdFromRem.rrd is empy of data which is not correct with
the above (except flat graphics :-\
)
[EMAIL PROTECTED] 69]# rrdtool dump
bytesRcvdFromRem.rrd | grep -v NaN
<!-- Round Robin Database Dump
-->
<rrd>
<version> 0001
</version>
<step>
300 </step> <!-- Seconds
-->
<lastupdate>
1110199982 </lastupdate> <!-- 2005-03-07 13:53:02 CET
-->
<ds>
<name> counter
</name>
<type> COUNTER
</type>
<minimal_heartbeat> 300
</minimal_heartbeat>
<min> 0.0000000000e+00
</min>
<max> 1.2500000000e+08
</max>
<!-- PDP Status
-->
<last_ds> 891497287
</last_ds>
<value> 0.0000000000e+00
</value>
<unknown_sec> 182
</unknown_sec>
</ds>
<!-- Round Robin Archives
-->
<rra>
<cf> AVERAGE
</cf>
<pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds
-->
<xff> 5.0000000000e-01
</xff>
<cdp_prep>
</cdp_prep>
<database>
</database>
</rra>
<rra>
<cf> MIN
</cf>
<pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds
-->
<xff> 5.0000000000e-01
</xff>
<cdp_prep>
</cdp_prep>
<database>
</database>
</rra>
<rra>
<cf> MAX
</cf>
<pdp_per_row> 1 </pdp_per_row> <!-- 300 seconds
-->
<xff> 5.0000000000e-01
</xff>
<cdp_prep>
</cdp_prep>
<database>
</database>
</rra>
<rra>
<cf> AVERAGE
</cf>
<pdp_per_row> 12 </pdp_per_row> <!-- 3600 seconds
-->
<xff> 5.0000000000e-01
</xff>
<cdp_prep>
</cdp_prep>
<database>
</database>
</rra>
<rra>
<cf> AVERAGE
</cf>
<pdp_per_row> 288 </pdp_per_row> <!-- 86400 seconds
-->
<xff> 5.0000000000e-01
</xff>
<cdp_prep>
</cdp_prep>
<database>
</database>
</rra>
</rrd>
- A grep in /var/log/messages show no update
[EMAIL PROTECTED]
ntop]# grep 193/51/208/69 /var/log/messages
Mar 7 09:08:26 metro-sop
ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 09:16:01 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 09:31:05 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 09:31:05 metro-sop ntop[4544]: RRD_DEBUG:
rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/,
udpRcvdLoc, 4788)=0
Mar 7 09:31:05 metro-sop ntop[4544]:
RRD_DEBUG:
rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/IP_,FTPRcvdBytes,
600)=0
Mar 7 09:50:04 metro-sop ntop[4544]: RRD_DEBUG:
calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 10:23:44 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 10:57:38 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 10:57:38 metro-sop ntop[4544]: RRD_DEBUG:
rrd_create(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/IP_,Possible
P2PRcvdBytes, 96)=0
Mar 7 11:52:20 metro-sop ntop[4544]:
RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 12:14:28 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 12:35:07 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 12:59:11 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 13:37:40 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
Mar
7 13:58:38 metro-sop ntop[4544]: RRD_DEBUG: calling
mkdir(/usr/local/admin/ntop/exploit/rrd/interfaces/NetFlow-device.2/hosts/193/51/208/69/)
- I modified the source rrdPlugin.c : in function updateRRD I added the
RRD_DEBUG code at line 1201. The code looks like this (version 3.1 of ntop)
:
traceEvent(CONST_TRACE_WARNING,
"RRD: actTime = %d(%s), rrdTime %d(%s), lastUpd
%d(%s)",
myGlobals.actTime,
errTimeBuf1,
rrdTime,
errTimeBuf2,
rrdLast,
rrdLast == -1 ? "rrdlast ERROR" :
errTimeBuf3);
} else if(strstr(rrdError, "is
not an RRD file")) {
unlink(path);
}
rrd_clear_error();
} else {
#if RRD_DEBUG >
0
traceEvent(CONST_TRACE_INFO, "RRD_DEBUG:
rrd_create(%s, %s,
%u)=%d",
hostPath, key, (unsigned long)value, rc);
#endif
}
} Do you have an idea of what's happening ?
It may have nothing to do with our problem, but this ntop is running on a Fedora
Core 3.
--
Didier Benza [EMAIL PROTECTED]
Tel : +33 492 38 7167 / Fax : +33 492 38 7602
INRIA 2004, Route des Lucioles, BP 93, 06902 Sophia Antipolis Cedex
|
