I am just using the Plugins/NetFlow Activate/Configure links. Once I activate and configure NetFlows I start getting syslog messages. About 20-30 messages per second are being logged, "Purging stats about AS XXXX", where XXXX looks like it is evreying from 00000-65000. I though about going into the code and just commenting out the syslog code but I must have something misconfigured.
Thanks Dave -----Original Message----- From: Kaas, David D Sent: Wednesday, November 01, 2006 1:21 PM To: '[email protected]' Subject: RE: Ntop Digest, Vol 30, Issue 1 I have used NTOP for a couple of years with no problems. I had always used the tar distribuation. I just compiled it with the CVS distribution and turned on netflows. My syslogs now have large number of "Purging stats about AS XXXX" messages. I have configured RRD to not dump ASs. I did not see these before I started running netflows. Are there problems with running netflows? Thanks Dave -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Wednesday, November 01, 2006 3:00 AM To: [email protected] Subject: Ntop Digest, Vol 30, Issue 1 Send Ntop mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://listgateway.unipi.it/mailman/listinfo/ntop or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of Ntop digest..." Today's Topics: 1. Re: NTOP Compile Problem on Ubuntu: gdImageDestroy (Eric Brander) 2. RE: NTOP Compile Problem on Ubuntu: gdImageDestroy (Nick Weaver) 3. Re: NTOP Compile Problem on Ubuntu: gdImageDestroy (Eric Brander) 4. RE: NTOP Compile Problem on Ubuntu: gdImageDestroy (Nick Weaver) 5. Host Clusters (Marko Mikael Sepp?nen) ---------------------------------------------------------------------- Message: 1 Date: Tue, 31 Oct 2006 10:41:37 -0700 From: Eric Brander <[EMAIL PROTECTED]> Subject: Re: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Mark Duling wrote: > I don't know. I use an ntop port and the author made ntop depend on > gawk, which depends on libiconv. I know (think I remember) that when > a certain error message come up, you need -liconv. But I don't know > what is causing the "cannot create executables" problem. That seems > likle a separate issue. > > Mark > Thanks for that lead. I kept trying to find liconv to install, not libiconv. So I found libiconv, installed it, and now get a new error message: From the log: ~snip~ configure:2774: $? = 0 configure:2776: gcc -v </dev/null >&5 Using built-in specs. Target: i486-linux-gnu Configured with: ../src/configure -v --enable-languages=c,c++,java,f95,objc,ada,treelang --prefix=/usr --enable-shared --with-system-zlib --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --enable-nls --program-suffix=-4.0 --enable-__cxa_atexit --enable-clocale=gnu --enable-libstdcxx-debug --enable-java-awt=gtk-default --enable-gtk-cairo --with-java-home=/usr/lib/jvm/java-1.4.2-gcj-4.0-1.4.2.0/jre --enable-mpfr --disable-werror --with-tune=pentium4 --enable-checking=release i486-linux-gnu Thread model: posix gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5) configure:2779: $? = 0 configure:2781: gcc -V </dev/null >&5 gcc: '-V' option must have argument configure:2784: $? = 1 configure:2807: checking for C compiler default output file name configure:2810: gcc -L/lib -liconv conftest.c >&5 configure:2813: $? = 0 configure:2859: result: a.out configure:2864: checking whether the C compiler works configure:2870: ./a.out ./a.out: error while loading shared libraries: libiconv.so.2: cannot open shared object file: No such file or directory configure:2873: $? = 127 configure:2882: error: cannot run C compiled programs. If you meant to cross compile, use `--host'. ~snip~ I have libiconv.so.2 installed: # find /usr -iname libiconv.so.2 /usr/local/lib/libiconv.so.2 Anyone have any idea where I should go from here? Regards, Eric Brander ------------------------------ Message: 2 Date: Tue, 31 Oct 2006 11:09:14 -0700 From: "Nick Weaver" <[EMAIL PROTECTED]> Subject: RE: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy To: <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" I haven't installed this on Ubuntu, but I have on Debian... I usually apt-get install ntop, and that grabs a fairly recent version, and all the libs, then I compile from cvs, and don't generally have any problems. Also, have you tried running apt-get install ntop to see what version it grabs? I'm pretty sure it's 3.1 or 3.2... -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Brander Sent: Tuesday, October 31, 2006 10:42 AM To: [email protected] Subject: Re: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy Mark Duling wrote: > I don't know. I use an ntop port and the author made ntop depend on gawk, > which depends on libiconv. I know (think I remember) that when a certain > error message come up, you need -liconv. But I don't know what is causing > the "cannot create executables" problem. That seems likle a separate > issue. > > Mark > Thanks for that lead. I kept trying to find liconv to install, not libiconv. So I found libiconv, installed it, and now get a new error message: From the log: ~snip~ configure:2774: $? = 0 configure:2776: gcc -v </dev/null >&5 Using built-in specs. Target: i486-linux-gnu Configured with: ../src/configure -v --enable-languages=c,c++,java,f95,objc,ada,treelang --prefix=/usr --enable-shared --with-system-zlib --libexecdir=/usr/lib --without-included-gettext --enable-threads=posix --enable-nls --program-suffix=-4.0 --enable-__cxa_atexit --enable-clocale=gnu --enable-libstdcxx-debug --enable-java-awt=gtk-default --enable-gtk-cairo --with-java-home=/usr/lib/jvm/java-1.4.2-gcj-4.0-1.4.2.0/jre --enable-mpfr --disable-werror --with-tune=pentium4 --enable-checking=release i486-linux-gnu Thread model: posix gcc version 4.0.3 (Ubuntu 4.0.3-1ubuntu5) configure:2779: $? = 0 configure:2781: gcc -V </dev/null >&5 gcc: '-V' option must have argument configure:2784: $? = 1 configure:2807: checking for C compiler default output file name configure:2810: gcc -L/lib -liconv conftest.c >&5 configure:2813: $? = 0 configure:2859: result: a.out configure:2864: checking whether the C compiler works configure:2870: ./a.out ./a.out: error while loading shared libraries: libiconv.so.2: cannot open shared object file: No such file or directory configure:2873: $? = 127 configure:2882: error: cannot run C compiled programs. If you meant to cross compile, use `--host'. ~snip~ I have libiconv.so.2 installed: # find /usr -iname libiconv.so.2 /usr/local/lib/libiconv.so.2 Anyone have any idea where I should go from here? Regards, Eric Brander _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ------------------------------ Message: 3 Date: Tue, 31 Oct 2006 11:21:23 -0700 From: Eric Brander <[EMAIL PROTECTED]> Subject: Re: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Nick Weaver wrote: > I haven't installed this on Ubuntu, but I have on Debian... > > I usually apt-get install ntop, and that grabs a fairly recent > version, and all the libs, then I compile from cvs, and don't > generally have any problems. > > Also, have you tried running apt-get install ntop to see what version > it grabs? I'm pretty sure it's 3.1 or 3.2... > > > Bummer: # apt-get install ntop Reading package lists... Done Building dependency tree... Done E: Couldn't find package ntop #aptitude search ntop p diveintopython - free Python book for experienced programmers p diveintopython-zh - free Python book for experienced programmers *sigh* It would be so nice if I could snag it via apt-get. I've never had so many problems installing anything like this before. Eric ------------------------------ Message: 4 Date: Tue, 31 Oct 2006 11:36:39 -0700 From: "Nick Weaver" <[EMAIL PROTECTED]> Subject: RE: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy To: <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="us-ascii" Enable universe and multiverse in your repositories Nick Weaver Manager, Lab Infrastructure [EMAIL PROTECTED] P: 801-852-9500 -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eric Brander Sent: Tuesday, October 31, 2006 11:21 AM To: [email protected] Subject: Re: [Ntop] NTOP Compile Problem on Ubuntu: gdImageDestroy Nick Weaver wrote: > I haven't installed this on Ubuntu, but I have on Debian... > > I usually apt-get install ntop, and that grabs a fairly recent version, > and all the libs, then I compile from cvs, and don't generally have any > problems. > > Also, have you tried running apt-get install ntop to see what version it > grabs? I'm pretty sure it's 3.1 or 3.2... > > > Bummer: # apt-get install ntop Reading package lists... Done Building dependency tree... Done E: Couldn't find package ntop #aptitude search ntop p diveintopython - free Python book for experienced programmers p diveintopython-zh - free Python book for experienced programmers *sigh* It would be so nice if I could snag it via apt-get. I've never had so many problems installing anything like this before. Eric _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop ------------------------------ Message: 5 Date: Wed, 01 Nov 2006 09:01:57 +0200 From: Marko Mikael Sepp?nen <[EMAIL PROTECTED]> Subject: [Ntop] Host Clusters To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=iso-8859-1 Hello! I'd like to ask this again.. Is there some kind of bug in code or something else, because we can't get right information for defined aggregated views aka clusters (groups defined by web: Admin -> Edit Preferences -> typing cluster groups) if defining maybe more than 10 different groups. Problem is really easily noticed, because every defined cluster shows same amount of data. Some other ntop user has mentioned earlier that he has same kind of problem, but nobody seems not to know what's wrong. Can you please help me with this? This would be really usable feature if it would work right. Best Regards, Marko Seppanen -----Alkuperäinen viesti----- Lähettäjä: Marko Mikael Seppänen Lähetetty: 4. lokakuuta 2006 19:30 Vastaanottaja: '[email protected]' Aihe: Ntop 3.2 Host Clusters Hello All! I'm wandering what could be wrong when using "Host Clusters" to define aggregate views for different IP addresses and networks to get summarized views how these are receiving and sending traffics!? When I define just some clusters it seems to work, but when adding more clusters maybe some over 10 clusters -> every cluster shows same amount of data. When I drill down from clusters to show host based stuff - data seems right!? I can't find resolution for this dilemma, can somebody tell what to do or what could be wrong? Best Regards, Marko Seppanen System Specialist ------------------------------ _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop End of Ntop Digest, Vol 30, Issue 1 *********************************** _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
