Any ideas what this could mean? The server is a FC1 with 1Gb of RAM. I doubt is running out of memory.
This happens every time I do IP/Local/Network Traffic Map/networkMap.html I have posted my configuration below. -pa [EMAIL PROTECTED] /]# tail -f /var/log/messages | grep ntop Jul 26 15:29:40 miaids ntop[9751]: THREADMGMT[t3144588208]: NPS(1): Started thread for network packet sniffing Jul 26 15:29:40 miaids ntop[9751]: Note: SIGPIPE handler set (ignore) Jul 26 15:29:40 miaids ntop[9751]: THREADMGMT[t3197037488]: SFP: Fingerprint scan thread running [p9751] Jul 26 15:29:40 miaids ntop[9751]: THREADMGMT[t3165567920]: WEB: Server connection thread running [p9751] Jul 26 15:29:40 miaids ntop[9751]: WEB: ntop's web server is now processing requests Jul 26 15:29:40 miaids ntop[9751]: THREADMGMT[t3186547632]: SIH: Idle host scan thread running [p9751] Jul 26 15:29:50 miaids ntop[9751]: THREADMGMT[t3134098352]: RRD: Throughput data collection: Thread starting [p9751] Jul 26 15:29:50 miaids ntop[9751]: THREADMGMT[t3134098352]: RRD: Throughput data collection: Thread running [p9751] Jul 26 15:29:50 miaids ntop[9751]: THREADMGMT[t3134098352]: RRD: Started thread for throughput data collection Jul 26 15:29:50 miaids ntop[9751]: THREADMGMT[t3155078064]: RRD: Data collection thread running [p9751] Jul 26 15:30:27 miaids kernel: application bug: ntop(9871) has SIGCHLD set to SIG_IGN but calls wait(). Jul 26 15:30:30 miaids ntop[9751]: **ERROR** malloc(-1129402448) @ http.c:2144 returned NULL [no more memory?] Jul 26 15:30:30 miaids ntop[9751]: **WARNING** ntop packet capture STOPPED Jul 26 15:30:30 miaids ntop[9751]: NOTE: ntop web server remains up Jul 26 15:30:30 miaids ntop[9751]: NOTE: Shutdown gracefully and restart with more memory Jul 26 15:30:30 miaids ntop[9751]: THREADMGMT[t3165567920]: ntop RUNSTATE: STOPCAP(5) Or Jul 26 15:47:19 miaids ntop[10769]: THREADMGMT[t3186924464]: SIH: Idle host scan thread running [p10769] Jul 26 15:47:23 miaids ntop[10769]: **ERROR** ECONNRESET during sending of page to web client Jul 26 15:47:24 miaids ntop[10769]: **ERROR** malloc(-1129025616) @ http.c:2144 returned NULL [no more memory?] Basic Information ntop Version 3.1.50 Configured on Jul 25 2005 15:33:48 Built on Jul 25 2005 15:35:22 OS i686-pc-linux-gnu libpcap version libpcap version 0.8.3 Running from /usr/local/bin Libraries in /usr/local/bin ntop Process Id 10949 http Process Id 10949 Command line Started as.... /usr/local/bin/ntop -i eth0 @/etc/ntop.conf -d --use-syslog Resolved to.... /usr/local/bin/ntop -i eth0 --user ntop --daemon --db-file-path /usr/share/ntop --interface eth0 --trace-level 3 --http-server 3000 --disable-schedyield -d --use-syslog Preferences used NOTE: (effective) means that this is the value after ntop has processed the parameter.(default) means this is the default value, usually (but not always) set by a #define in globals-defines.h. -a | --access-log-file (default) (nil) -b | --disable-decoders Yes -c | --sticky-hosts (default) No -d | --daemon Yes -e | --max-table-rows (default) 128 -f | --traffic-dump-file (default) (nil) -g | --track-local-hosts (default) Track all hosts -o | --no-mac (default) Trust MAC Addresses -i | --interface (effective) eth0 -j | --create-other-packets (default) Disabled -l | --pcap-log (default) (nil) -m | --local-subnets (effective) (default) (nil) -n | --numeric-ip-addresses (default) No -p | --protocols (default) internal list -q | --create-suspicious-packets (default) Disabled -r | --refresh-time (default) 120 -s | --no-promiscuous (default) No -t | --trace-level (default) 3 -u | --user ntop (uid=101, gid=101) -w | --http-server (default) Active, all interfaces, port 3000 -z | --disable-sessions Yes -B | --filter-expression (default) none -D | --domain adjoined.com -F | --flow-spec (default) none -K | --enable-debug (default) No -L | --use-syslog daemon -M | --no-interface-merge (effective) (parameter -M set, Interfaces separate) No -N | --wwn-map (default) (nil) -O | --pcap-file-path (default) /usr/local/var/ntop -P | --db-file-path /usr/share/ntop -Q | --spool-file-path /usr/share/ntop -U | --mapper (default) (nil) --disable-schedYield Yes --disable-instantsessionpurge (default) No --disable-mutexextrainfo (default) No --disable-stopcap Yes --fc-only (default) No --instance (default) (nil) --no-fc (default) No --no-invalid-lun (default) No --p3p-cp (default) none --p3p-uri (default) none --pcap-nonblocking (default) No --skip-version-check Yes --w3c (default) No NOTE: The --w3c flag makes the generated html MORE compatible with the w3c recommendations, but it in no way addresses all of the compatibility and markup issues. We would like to make ntop more compatible, but some basic issues of looking decent on real-world browsers mean it will never be 100%. If you find any issues, please report them to ntop-dev. Run time/Internal Web server URL http://any:3000 GDBM version This is GDBM version 1.8.0, as of May 19, 1999. zlib version 1.2.0.7 gd version (guess) 2.0.12-2.0.15 Protocol Decoders Disabled Fragment Handling Enabled Tracking only local hosts No # IP Protocols Being Monitored 20 # Protocol slots 954 # IP Ports Being Monitored 177 # IP Ports slots 354 WebServer Request Queue 10 Devices (Network Interfaces) 1 Domain name (short) com IP to country flag table (entries) 52395 Total Hash Collisions (Vendor/Special) (lookup) 0 ntop Web Server Item http:// https:// # Handled Requests 1 - # Successful requests (200) 0 - # Bad (We don't want to talk with you) requests 0 - # Invalid requests - 403 FORBIDDEN 0 - # Invalid requests - 404 NOT FOUND 0 - NOTE: Counts may not total because of in-process requests. Each request to the ntop web server - page, chart, etc. is counted separately # SSI Requests 0 # Bad SSI Requests 0 # Handled SSI Requests 0 # Handled SIGPIPE Errors 0 Memory allocation - data segment arena limit, getrlimit(RLIMIT_DATA, ...) -1 Allocated blocks (ordblks) 3 Allocated (arena) 6004736 Used (uordblks) 5889176 Free (fordblks) 115560 Memory allocation - mmapped Allocated blocks (hblks) 4 Allocated bytes (hblkhd) 2027520 Host Memory Cache Limit #define MAX_HOSTS_CACHE_LEN 512 Current Size 0 Maximum Size 0 # Entries Reused 0 Packets Received 3,035 Processed Immediately 3,035 (100.0 %) Queued 0 (0.0 %) Current Queue 0 Maximum Queue 0 (Limit 2048) Packet Processing Queue (pre-process) Processing Minimum 0.000008 0.000008 Average 0.000230 0.000134 Maximum 0.014940 0.015161 Standard Deviation 0.001427 0.000702 Maximum ever 0.014940 0.015161 Min Estimated Thpt (pps) 0.000000 6693.440430 Average Estimated Thpt (pps) 0.000000 7444.000000 NOTE: 'Queue' time is the elapsed time between the packet arrival (libpcap) and the gettimeofday() value as the packet starts processPacket(). For a queued packet, this includes the time in queue. 'Processing' time is the elapsed time between starting and finishing processPacket(). Errors and/or unrecognized packets may cause processing to be abandoned and those packets are not counted in the 'processing' averages. This means that the 1024 packets for the 'queue' and 'processing' calculations are not necessarily the same physical packets, and may lead to over estimation of the per-packet 'processing' time. Small averages are good, especially if the standard deviation is small (standard deviation is a measurement of the variability of the actual values around the average). The computations are based only on the most recent 1024 packets processed. Maximum ever ignores the first 100 packets for each device - this lets ntop get over startup agony. What does this mean? Not much. Still, 1/(queue-average+process-average) (i.e. 2747.3) gives a very rough indication of the packet per second rate this instance of ntop can handle. Host/Session counts - global Purged Hosts 0 Host/Session counts - Device 0 (eth0) Hash Bucket Size 1.9 KB Actual Host Hash Size 32768 Stored hosts 126 Host Bucket List Length [min 1][max 3][avg 1.0] Max host lookup 2 ----- Address Resolution ----- DNS Sniffing (other hosts requests) DNS Packets sniffed 0 DNS Packets processed 0 Stored in cache (includes aliases) 0 Queued - dequeueAddress() Total Queued 11 Not queued (duplicate) 0 Maximum Queued 11 Current Queue 11 DNS Lookup Calls: DNS resolution attempts 1 ....Success: Resolved 0 ....Failed 0 DNS lookups stored in cache 0 Host addresses kept numeric 0 NOTE: 'DNS lookups stored in cache' includes HOST_NOT_FOUND replies. Thus it may be larger than the number of 'Success: Resolved' queries. Thread counts Active 7 Dequeue 1 Children (active) 0 Directory (search) order Data Files . /usr/local/share/ntop Config Files . /usr/local/etc/ntop /etc Plugins ./plugins /usr/local/lib/ntop/plugins NOTE: REMEMBER that the . (current working directory) value will be different when you run ntop from the command line vs. a cron job or startup script! Compile Time: ./configure ./configure parameters --with-gdbm-include=/usr/include/gdbm Built on (Host) i686-pc-linux-gnu Built for(Target) i686-pc-linux-gnu preprocessor (CPPFLAGS) gcc -E -DLINUX -I/usr/local/include -I/usr/include/gdbm compiler (CFLAGS) gcc -g -O2 -I/usr/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DPIC -DHAVE_CONFIG_H include path -I/usr/include/gdbm system libraries -L/usr/local/lib -lpthread -lresolv -lnsl -lcrypt -lc -lpcap -lgdbm -lgd -lpng -lz install path /usr/local GNU C (gcc) version 3.3.2 20031022 (Red Hat Linux 3.3.2-1) (3.3.2) uname data sysname(Linux) release(2.4.22-1.2174.nptl) version(#1 Wed Feb 18 16:38:32 EST 2004) machine(i686) Internationalization (i18n) i18n enabled No _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
