I checked the stats, it appears that max sessions is being reached (just like the error says), however, that leads me to more questions. Stored hosts is 1,880.
Perhaps this is more a function of how this is designed. When Ntop tracks a session, isn't that eventually torn down or timed-out, or does that reflect a log of all sessions seen? We added a system recently that does a large amount of traffic, but its not a simultaneous sessions issue, more like many sessions opened and closed on regular basis. If sessions are not closed to NTOP, I can see where that will grow over time and eventually kill me, but I have had the older version run for weeks without trouble. Firewall shows current sessions of 1785, I doubt that the average is generally in the ballpark. Never will is show 65000 sessions. STATS Host/Session counts - Device 0 (eth0) Hash Bucket Size 1.9 KB Actual Host Hash Size 32768 Stored hosts 1880 Host Bucket List Length [min 1][max 12][avg 1.1] Max host lookup 11 Session Bucket Size 264 Session Actual Hash Size 65535 Sessions 65,535 Max Num. Sessions 65,535 Session Bucket List Length [min 1][max 10][avg 1.9 Nathan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Gary Gatten Sent: Wednesday, March 29, 2006 9:35 AM To: Nathan Choate; [email protected] Subject: Re: [Ntop] NTOP fails because of max sessions reached If you go to: About -> Show Config, it displays a bunch of info - config and stats. Maybe that will help you. I doubled the -x and -X defaults when I had this problem and it worked fine. How many hosts are you trying to monitor? Gary >>> [EMAIL PROTECTED] 3/28/2006 6:42:52 PM >>> Yes, I had read those already. To add more, I had recently upgraded from a previous version, I thought it was a previous version to 3.x, but I find 3.0 and 3.1 ebuild files along with the 3.2 that is currently being run. Previous to running 3.2 I never had to mess with max sessions and had sticky hosts running. Ntop would run for weeks without failing on the previous versions. Now, it fails after a couple of days. Same hardware, updated kernel 2.6.15, Gentoo fully updated. Is there any way to see the current number of sessions ntop is using before it stops? _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
