(1) Read the traffic over the last few weeks Jet - it's been rocky for some people on some versions of FreeBSD. No definite conclusions that I know of, but I think the only setup Luca is willing to support is F5.4. Still, Stanley was going great guns on F4.10(?) and the patched 3.1 release. Haven't heard from him in a bit.
If you check the log reports (http://www.ntopsupport.com/alrOS.html), there are a lot of people using FreeBSD. It's a tiny fraction (maybe 1/20th) of the Linux users, but it's not trivial. (2) Probably not. There just isn't much difference in libpcap versions, at least where it matters to us. A NIC which offers a zero-copy driver will run better than one that doesn't. Check the stats in the Show Configuration page - as to packet handling rates. >From some investigations I've done, it's the very act of refreshing that page that loses a small # of packets. If it says you are losing more than 100%, then ntop is getting confused as to whether libpcap is returning total drops or just since the last call. It's when it's in the middle that you begin to worry. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jethro Wright III Sent: Wednesday, May 11, 2005 6:35 PM To: NTOP Mail List Subject: [Ntop] [Q]Anything Else I Need To Know About NTOP WRT FBSD 4.9-R ? Folks: Had a PC running NTOP 3.0 on FBSD 4.9-RELEASE for many months w/o probs. At least a couple of weeks ago, NTOP started crashing @ boot time. I take the box off-line, test it, and NTOP will start manually. So for the hell of it, let's upgrade. Per msgs on the mail list, I pulled down the latest CVS snapshot, using the precise instructions from ntop.org. It d/l'd, of course, but it wouldn't MAKE. (BTW, this I d/l'd the snapshot Fri 6 May.) Crapped out immed due to an error in the myrrd sub-dir: "No rule to make target 'am--refresh'" Copied the myrrd/ sub-dir from the 3.0 distribution (never deleted it), but that failed in myrrd/ too, but this time after compilation started. Let's try 3.1. The build worked w/o incident, but the pcap daemon/module kept crapping out in no time at all. I GOOGLE'd up a msg from Burton on 21 Feb, indicating a specific libpcap patch avail via CVS for FBSD -> ntop.c. Applied it, recompiled: no more pcap failures ! YAY ! Been running for several days w/o any failures of consequence. 1) Is this the only thing I need to know about WRT FreeBSD and NTOP ? 2) NTOP reports libpcap is dropping packets. Nothing serious (usu < 1%), but would upgrading libpcap make a difference ? Yeah, I know I can change Ethernet cards too, but.... BTW, I like the new web page design. Later....Jet =============== From the desk of Jethro Wright, III ================ + Beer is proof that God loves us and wants us to be happy. - === jetman516 at hotmail.com =============== Benjamin Franklin === _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
