Hi Jon, Thank you very much for your suggestion. I will try that.
Thanks, Simon --- Jon Dossey <[EMAIL PROTECTED]> wrote: > > Hi Burton, > > > > I am sorry as I am new to this mailing list. Here > is > > my question again: > > > > Problem Description: > > The % Dropped (libpcap) increases gradually over > > time (increased from 3% to 20% gradually). It > keeps on > > increasing everyday. The top result seems normal, > and > > ifconfig doesn't report any package dropped. I am > > wondering what the problem could be coming from? > > Thanks. > > > > top - 12:23:14 up 5 days, 19:59, 2 users, load > > average: 0.54, 0.90, 0.92 > > Tasks: 105 total, 1 running, 104 sleeping, 0 > > stopped, 0 zombie > > Cpu(s): 5.3% us, 2.0% sy, 0.0% ni, 92.1% id, > 0.3% > > wa, 0.3% hi, 0.0% si > > Mem: 514504k total, 508532k used, 5972k > free, > > 4560k buffers > > Swap: 1052248k total, 165624k used, 886624k > free, > > 97792k cached > > > > ifconfig eth1 > > eth1 Link encap:Ethernet HWaddr > > 00:D0:B7:B3:2B:79 > > inet addr:172.21.128.31 > > Bcast:172.21.143.255 Mask:255.255.240.0 > > inet6 addr: fe80::2d0:b7ff:feb3:2b79/64 > > Scope:Link > > UP BROADCAST RUNNING MULTICAST MTU:1500 > > Metric:1 > > RX packets:93650495 errors:0 dropped:0 > > overruns:0 frame:0 > > TX packets:1531207 errors:0 dropped:0 > > overruns:0 carrier:0 > > collisions:0 txqueuelen:1000 > > RX bytes:174798367 (166.7 MiB) TX > > bytes:279582326 (266.6 MiB) > > > > > > > > OS: sysname(Linux) release(2.6.11-1.1369_FC4) > > version(#1 Thu Jun 2 22:55:56 EDT 2005) > machine(i686) > > > > Hardware: 1 CPU 677MHz, Memory 512MB > > > > Packets > > Received: 57742324 > > Processed: 57742324 (immediately) > > Queued: 0 > > Lost: 0 (queue full) > > Queue: Current: 0 Maximum: 0 > > > > Network: > > Merged packet counts: > > Received: 57742324 > > Ethernet: 57742324 > > Broadcast: 1102866 > > Multicast: 25636 > > IP: 56630471 > > > > Network Interface 0 eth1 > > Received (pcap): 32680 > > Dropped (pcap): 7615 > > > > NIC Speed: 100MHz > > Location: LAN > > Bandwidth: DSL > > > > Basic Information > > > > ntop Version.....3.1 SourceForge RPM > > Configured on.....Dec 21 2004 2:31:05 > > Built on.....Dec 21 2004 02:32:47 > > OS.....i686-redhat-linux-gnu > > libpcap version.....libpcap version 0.8.3 > > ntop Process Id.....17533 > > http Process Id.....17533 > > > > > > Command line > > > > Started as........./usr/bin/ntop -i eth1 --user > ntop > > --daemon --db-file-path /usr/share/ntop --domain > > us.murex.com --interface eth1 --trace-level 3 > --daemon > > --use-syslog=local3 --http-server 3000 > > --disable-schedyield -d > > Resolved to........./usr/bin/ntop -i eth1 --user > ntop > > --daemon --db-file-path /usr/share/ntop --domain > > us.murex.com --interface eth1 --trace-level 3 > --daemon > > --use-syslog=local3 --http-server 3000 > > --disable-schedyield -d > > > > > > Preferences used > > > > -a | --access-log-file.....(default) (nil) > > -b | --disable-decoders.....(default) No > > -c | --sticky-hosts.....(default) No > > -d | --daemon.....Yes > > -e | --max-table-rows.....(default) 128 > > -f | --traffic-dump-file.....(default) (nil) > > -g | --track-local-hosts.....(default) Track all > > hosts > > -o | --no-mac.....(default) Trust MAC Addresses > > -i | --interface (effective).....eth1 > > -j | --create-other-packets.....(default) > Disabled > > -k | > --filter-expression-in-extra-frame.....(default) > > No > > -l | --pcap-log.....(default) (nil) > > -m | --local-subnets (effective).....(default) > > (nil) > > -n | --numeric-ip-addresses.....(default) No > > -p | --protocols.....(default) internal list > > -q | --create-suspicious-packets.....(default) > > Disabled > > -r | --refresh-time.....(default) 120 > > -s | --no-promiscuous.....(default) No > > -t | --trace-level.....(default) 3 > > -u | --user.....ntop (uid=100, gid=101) > > -w | --http-server.....(default) Active, all > > interfaces, port 3000 > > -z | --disable-sessions.....(default) No > > -B | --filter-expression.....(default) none > > -D | --domain.....us.murex.com > > -F | --flow-spec.....(default) none > > -K | --enable-debug.....(default) No > > -L | --use-syslog.....local3 > > -M | --no-interface-merge > (effective).....(default) > > (Merging Interfaces) Yes > > -N | --wwn-map.....(default) (nil) > > -O | --pcap-file-path.....(default) /var/ntop > > -P | --db-file-path...../usr/share/ntop > > -Q | --spool-file-path...../usr/share/ntop > > -U | --mapper.....(default) (nil) > > -W | --https-server.....Uninitialized > > --disable-schedYield.....Yes > > --disable-instantsessionpurge.....(default) No > > --disable-mutexextrainfo.....(default) No > > --disable-stopcap.....(default) No > > --fc-only.....(default) No > > --no-fc.....(default) No > > --no-invalid-lun.....(default) No > > --p3p-cp.....(default) none > > --p3p-uri.....(default) none > > --pcap-nonblocking.....(default) No > > --skip-version-check.....(default) No > > --ssl-watchdog.....(default) No > > --w3c.....(default) No > > > > > > Run time/Internal > > > > Web server URL.....http://any:3000 > > SSL Web server (https://).....Not Active > > GDBM version.....This is GDBM version 1.8.0, as of > May > > 19, 1999. > > OpenSSL Version.....OpenSSL 0.9.7a Feb 19 2003 > > zlib version.....1.2.2.2 > > gd version (guess).....2.0.21+ > > Protocol Decoders.....Enabled > > Fragment Handling.....Enabled > > Tracking only local hosts.....No > > # IP Protocols Being Monitored.....19 > > # Protocol slots.....978 > > # IP Ports Being Monitored.....174 > > # IP Ports slots.....348 > > WebServer Request Queue.....10 > > Devices (Network Interfaces).....1 > > Domain name (short).....com > > IP to country flag table (entries).....52395 > > Total Hash Collisions (Vendor/Special) > (lookup).....0 > > > > > > ntop Web Server > > > > > Item..................http://...................https://# > > Handled Requests.....57954.....- > > # Successful requests (200).....46841.....- > > # Bad (We don't want to talk with you) > > requests.....0.....- > > # Invalid requests - 403 FORBIDDEN.....0.....- > === message truncated === ____________________________________________________ Start your day with Yahoo! - make it your home page http://www.yahoo.com/r/hs _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
