Thorsten
I bet it's a packet that causes a loop while decoding it. A DNS/DHCP
packet is a good candidate. Can you please investigate with a debugger
and report to me?

Thanks, Luca

Thorsten Volkmer-Wolf wrote:
> Hello community,
>  
> It's been a while since i've been here.....so: 'hello again'. And, as it 
> nearly allways happens, i'm back 'cause i've got a problem.
>  
> My installation of ntop runs fine for a couple of hours or even a day, all 
> over a sudden it keeps recording null values into it's rrd databases. I've 
> read that it might be a daemon in the background resetting the interface, 
> investigation in this direction lead to nothing. There are even no broadcasts 
> beeing counted. In the messages log there's no entry showing the change of 
> promiscuous mode.
>  
> A tcpdump shows that there's still loads of traffic on the interface, but 
> ntop doesn't recognize it. The plugin "host last seen' also shows no updates, 
> it seems like the interface has been taken from 'wire' completely, allthough 
> traffic is still going through it as allready mentioned.
>  
> Are there any ideas in which direction to search for the fault? Thanks for 
> any hints in advance,
>  
>     Thorsten
>  
> ---------
> Dipl.-Ing.
> Thorsten Volkmer-Wolf
> IT-Support & Services
>
> AEROTEC Engineering GmbH
> Hein-Saß-Weg 38
> 21129 Hamburg / Germany
>
> fon +49 (0)40/742 198-241
> fax +49 (0)40/742 198-111
> http://www.aerotec.de <http://www.aerotec.de/> 
>
> Geschäftsführer: Jürgen Hoffmann, Rainer Feddersen, Amtsgericht Itzehoe HRB 
> 1512 
>
>  
>
>   
> ------------------------------------------------------------------------
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>   


-- 
Luca Deri <[EMAIL PROTECTED]>   http://luca.ntop.org/
                                skype://lucaderi/
Don't be encumbered by past history. Go off and do
something wonderful - Robert Noyce

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to