The crash and the message are not likely to be related. For the crash, you need to run under the debugger and capture the failure point information - there are instructions in docs/FAQ on this.
For rrd, one of the classic cases of update time problems is when ntop sees the packets for a host twice, but just different enough so that it doesn't recognize it as the same host. For example, different MAC addresses because it's seeing the packet once directly and once through a switch which is rewritting the MAC address. To ntop, different MAC = different host. But when it translates host -> rrd name, bang. --no-mac will probably fix the switch re-write problem, but that's not the crash... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Cesar Hernando Sent: Thursday, April 20, 2006 3:23 PM To: [email protected] Subject: [Ntop] ntop crashes after 1 day of usage Hello, I've got ntop installed on a Red Hat Enterprise AS 3. ntop version is 3.2, compiled from tgz file from sourceforge. I have started it with /usr/local/bin/ntop -L -u ntop -d, but after 1 day (usually, sometimes even less) it crashes and I do not know why. All I can see in system log is a few messages like: May 9 09:34:40 sb62g2 ntop[1684]: **WARNING** RRD:=20> rrd_update(/usr/local/lib/ntop/rrd/interfaces/eth0/matrix/192.168.2.140/192. 168.2.24/pkts.rrd) error: illegal attempt to update using time = 1084088080 when last > update time is 1084088080 (minimum one second = step) I have tried to use the --no-mac option, and the --set-pcap-nonblock option, but it does not work. I do not know what to do, ntop is a great piece of software but I can not start it everyday... We are monitoring a Cisco 3845 (Netflow v5) router, a HP Procurve 5304XL chassis (sflow) and a PacketShaper 6500 (netflow v5) (and local interface, eth0). Any idea of what might be happening? Any help will be appreciated :) Regards, Cesar _________________________________________________________________ Descarga gratis la Barra de Herramientas de MSN http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www. hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________ ___________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
