Well it means that the call in pbuf.c to updatePacketCount() had either the
src or dst host null (or both, I guess), but that's a symptom of a 'bad
thing'.


void updatePacketCount(HostTraffic *srcHost, HostAddr *srcAddr,
                       HostTraffic *dstHost, HostAddr *dstAddr,
                       TrafficCounter length, Counter numPkts,
                       int actualDeviceId) {
  static u_short lastHourId=0;
  u_short hourId;
  struct tm t, *thisTime;

  if((srcHost == NULL) || (dstHost == NULL)) {
    traceEvent(CONST_TRACE_ERROR, "NULL host detected");
    return;
  }

Probably the most helpful starting point would be to run under gdb and put a
breakpoint on the traceEvent() itself.

Then, when it stops, do the bt full stuff (documented at the bottom of
docs/FAQ in the gdb ultra-mini guide).

That will at least tell us WHERE that message is coming out of.

(We should also take this to ntop-dev, because it's gonna get even more
technical)

-----Burton



-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cris
Collins
Sent: Monday, December 05, 2005 1:53 PM
To: [email protected]
Subject: [Ntop] NULL host detected

 ntop -d -c -L -u ntop -w 3000 -p /usr/local/etc/ntop/protocol.list -a
/usr/local/lib/ntop/access.log -P /logs/ntop  -i eth1 -O /logs/ntop I am
running NTOP 3.2.
Can anyone tell me what the following in my syslog means?:
Dec  5 12:20:47 mapf01-nms ntop[14755]:   **ERROR** NULL host detected
Dec  5 12:21:46 mapf01-nms last message repeated 11 times
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to