Thorsten I should better fly to Hamburg with Ryanair rather than explain this via email :-)
The steps are more or less these: - download and build ntop from svn http://www.ntop.org/download.html - start the ntop you have compiled with the options you currently use - wait until ntop presents the problem - do "ps auxw|grep ntop" and get the lt-ntop PID - cd <dir where the ntop you compiled is>/.libs - gdb lt-ntop - inside gdb do "attach <ntop PID above>" -type a few commands like "bt", "show threads" etc. Better if at this time I can connect to you PC so see what's happening. Cheers, Luca Thorsten Volkmer-Wolf wrote: > Luca, > > ....eeeeer.....yes. I'm unexperienced using a debugger on linux.....but i'm > not totally dumb, so if you could lend me a hand and tell me how to start. > Ntop is installed as a package, i have not compiled it. So the first step > sould be to download the source and compile it? > > Thanks for your quick reply, > Thorsten > > > --------- > Dipl.-Ing. > Thorsten Volkmer-Wolf > IT-Support & Services > > AEROTEC Engineering GmbH > Hein-Saß-Weg 38 > 21129 Hamburg / Germany > > fon +49 (0)40/742 198-241 > fax +49 (0)40/742 198-111 > http://www.aerotec.de > > Geschäftsführer: Jürgen Hoffmann, Rainer Feddersen, Amtsgericht Itzehoe HRB > 1512 > > > -----Ursprüngliche Nachricht----- > Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Luca Deri > Gesendet: Donnerstag, 11. Oktober 2007 09:35 > An: [email protected] > Betreff: Re: [Ntop] ntop records "null"...... > > Thorsten > I bet it's a packet that causes a loop while decoding it. A DNS/DHCP packet > is a good candidate. Can you please investigate with a debugger and report to > me? > > Thanks, Luca > > Thorsten Volkmer-Wolf wrote: > >> Hello community, >> >> It's been a while since i've been here.....so: 'hello again'. And, as it >> nearly allways happens, i'm back 'cause i've got a problem. >> >> My installation of ntop runs fine for a couple of hours or even a day, all >> over a sudden it keeps recording null values into it's rrd databases. I've >> read that it might be a daemon in the background resetting the interface, >> investigation in this direction lead to nothing. There are even no >> broadcasts beeing counted. In the messages log there's no entry showing the >> change of promiscuous mode. >> >> A tcpdump shows that there's still loads of traffic on the interface, but >> ntop doesn't recognize it. The plugin "host last seen' also shows no >> updates, it seems like the interface has been taken from 'wire' completely, >> allthough traffic is still going through it as allready mentioned. >> >> Are there any ideas in which direction to search for the fault? Thanks >> for any hints in advance, >> >> Thorsten >> >> --------- >> Dipl.-Ing. >> Thorsten Volkmer-Wolf >> IT-Support & Services >> >> AEROTEC Engineering GmbH >> Hein-Saß-Weg 38 >> 21129 Hamburg / Germany >> >> fon +49 (0)40/742 198-241 >> fax +49 (0)40/742 198-111 >> http://www.aerotec.de <http://www.aerotec.de/> >> >> Geschäftsführer: Jürgen Hoffmann, Rainer Feddersen, Amtsgericht >> Itzehoe HRB 1512 >> >> >> >> >> ---------------------------------------------------------------------- >> -- >> >> _______________________________________________ >> Ntop mailing list >> [email protected] >> http://listgateway.unipi.it/mailman/listinfo/ntop >> >> > > > -- Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/ skype://lucaderi/ Don't be encumbered by past history. Go off and do something wonderful - Robert Noyce _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
