I don't know if anyone has succeeded in this, I haven't. Here is what I have tried so far.
Building from source using Red Hat's libpcap fails during configure with: ******************************************************************* * * ERROR: pcap header, bpf or library routines are missing * (yes means it was found, no means it was not found) * * pcap.h...yes * net/bpf.h...yes * pcap-bpf.h...no * pcap_open_live() in -lpcap...yes * pcap_findalldevs() in -lpcap...no * * (One of the bpf files is required, but either will do) * *>>> No way to proceed. * *??? 1. Install libpcap (http://www.tcpdump.org/) *??? and Rerun ./configure *??? or 2. Use the --with-pcap-root= option * ******************************************************************* I grabbed and installed a newer libpcap and tcpdump. I built them as RPMs. tcpdump sees the interface fine and gives lots of data. I them built ntop-3.1 against the new libpcap library and install it. I then edit the ntop.conf file setup the password and then start ntop. It starts up several threads. So far, so good. When I attempt to open the web interface at port 3000 it hung my browser (Firefox on RHEL4). I stopped all the treads and restarted everything by hand under strace. strace -ff -x -s 80 -o /tmp/ntop.strace /usr/bin/ntop -u ntop -d -P /var/ntop -i eth1 -m 172.18.32.0/21\ -t7 -w3000 -W 0 --disable-schedyield --use-syslog=local6 The web thread gets hung at rt_sigsuspend. The log entries for this thread are: 14:40:22 mon2 ntop[1462]: [MSGID0316203] [webInterface:8869] Note: SIGPIPE handler set (ignore) 14:40:22 mon2 ntop[1462]: [MSGID0986275] [webInterface:8890] WEB: ntop's web server is now processing requests) for web server The only thread that seems to increase in size appears to be a polling thread. I built the dev version from CVS with the same results. Am I running into a known issue or... _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
