I use ntop with netflow exclusively right now - no libpcap. My startup switches are:
-i none -u ntop --disable-instantsessionpurge --instance Field.Office.Internet -P /usr/local/var/ntop-FieldInet -o -d -L -w 3001 -x 32768 -X 65536 -m 10.0.0.0/8,192.168.0.0/16,12.154.38.1/23 This is one of two instances I run - the other has same parms except for the instance ones of course. Keep in mind that high CPU is not necessarily "bad". I've seen several cases where a process will run at 100%, but it relinquishes control when asked and behaves well. As long as all processes / threads are being served in a timely manner I don't really care "too" much. However, when mine runs at 100% on 3.3.3, the http server doesn't respond and the netflow listeners aren't servicing the flows effectively. Gary -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Robert Cerny Sent: Wednesday, October 31, 2007 3:29 AM To: [email protected] Subject: Re: [Ntop] ntop cpu usage on Mac OS X Server 10.4.10 Hi, thanks for your response. Do you use ntop on your machine? Which startup parameters did you set? Robert On 30.10.2007, at 17:36, Gary Gatten wrote: > I've had similar questions with not much helpful response. V3.2.1 > seems > to work great for me and uses maybe 50% CPU average, but 3.3.x uses > 100% > all the time. > > There's a "polling" option that replaces some interrupt driven > processes > to polled - maybe check that out. Also turn on verbose logging. > There > might be an error of somekind that's causing extra load. > > Gary > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf > Of > Robert Cerny > Sent: Monday, October 29, 2007 4:44 AM > To: [email protected] > Subject: [Ntop] ntop cpu usage on Mac OS X Server 10.4.10 > > Hi folks, > I installed ntop 3.2 using darwinports on Mac OS X Server 10.4.10 > and it > takes 99% of CPU since start. I did try to use --disable- > mutexextrainfo > to lower it, but still no luck. Does anybody have any idea how to > lower > CPU usage? > > Thanks > Robert > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > = > = > = > = > = > ====================================================================== > > > > > > "This email is intended to be reviewed by only the intended recipient > and may contain information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop =========================================================================== "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
