Hello, I think I have solved the rrd problem (--no-mac option), but the crashing problem still remains.
I quite understand linux, and I have used it for years, but I have never used gdb :-), so everything that appears in FAQ sounds a little bit "strange" for me... Isnt there any other means to gather useful information about the crash? If there is not, I would appreciate any help to use gdb properly to get some debugging info and post it to ntop distribution list.... Regards, Cesar ---------------------------------------- > From: [EMAIL PROTECTED] > To: [email protected] > Subject: RE: [Ntop] ntop crashes after 1 day of usage > Date: Thu, 20 Apr 2006 16:46:22 -0500 > > The crash and the message are not likely to be related. > > For the crash, you need to run under the debugger and capture the failure > point information - there are instructions in docs/FAQ on this. > > For rrd, one of the classic cases of update time problems is when ntop sees > the packets for a host twice, but just different enough so that it doesn't > recognize it as the same host. For example, different MAC addresses because > it's seeing the packet once directly and once through a switch which is > rewritting the MAC address. To ntop, different MAC = different host. But > when it translates host -> rrd name, bang. > > --no-mac will probably fix the switch re-write problem, but that's not the > crash... > > > -----Burton > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of > Cesar Hernando > Sent: Thursday, April 20, 2006 3:23 PM > To: [email protected] > Subject: [Ntop] ntop crashes after 1 day of usage > > Hello, > > I've got ntop installed on a Red Hat Enterprise AS 3. ntop version is 3.2, > compiled from tgz file from sourceforge. > > I have started it with /usr/local/bin/ntop -L -u ntop -d, but after 1 day > (usually, sometimes even less) it crashes and I do not know why. All I can > see in system log is a few messages like: > > May 9 09:34:40 sb62g2 ntop[1684]: **WARNING** RRD:=20> > rrd_update(/usr/local/lib/ntop/rrd/interfaces/eth0/matrix/192.168.2.140/192. > 168.2.24/pkts.rrd) error: illegal attempt to update using time = 1084088080 > when last > update time is 1084088080 (minimum one second = step) > > I have tried to use the --no-mac option, and the --set-pcap-nonblock option, > but it does not work. I do not know what to do, ntop is a great piece of > software but I can not start it everyday... > > We are monitoring a Cisco 3845 (Netflow v5) router, a HP Procurve 5304XL > chassis (sflow) and a PacketShaper 6500 (netflow v5) (and local interface, > eth0). > > Any idea of what might be happening? Any help will be appreciated :) > > Regards, > > Cesar > _________________________________________________________________ > Descarga gratis la Barra de Herramientas de MSN > http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www. > hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH____________________________________ > ___________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _________________________________________________________________ Descarga gratis la Barra de Herramientas de MSN http://www.msn.es/usuario/busqueda/barra?XAPID=2031&DI=1055&SU=http%3A//www.hotmail.com&HL=LINKTAG1OPENINGTEXT_MSNBH_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
