Ok after more research i have determined that the
issue is caused when i enable eth0 or eth1. I am
using netflow so i dont really need them so i tried to
disable them and it started working and stoped seg
faulting on the hosts page. eth0 is connected to
nothing and eth0 is connected to a switched port so i
dont need them to work anyways.
the best idea i have is that i am running vmware
server on the machine and it uses eth0 and eth1 for
its virtual machines. i figure its casuing a
conflict, i tried running ntop with -s and promisc
mode off but it still seg faults.
but that is really not a problem since i use netflow
from a cisco router as i mentioned. the issue is that
after doing this, dns is no longer working, in the
config i notice that it has sniffed 0 dns after an
hour, i figure it works when eth1 is connected because
it sees broadcasts that it then picks up the dns from,
but netflow wouldnt have any dns to pick up.
but oddly, it picks up a couple machines and does 10
or so dns lookups. is there a way to fix this?
thanks
--- Mike Liberatore <[EMAIL PROTECTED]> wrote:
> ok sorry for another e-mail, i thought since the cli
> didnt show any errors there was none, well i was
> dumb
> because i checked messages and i got a boat load of
> sefaults when these pages dont load:
>
> Feb 29 04:35:24 sn-vmware1 kernel: [8139663.258315]
> ntop[26748]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001660 error 4
> Feb 29 04:35:46 sn-vmware1 kernel: [8139685.214388]
> ntop[26750]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000042ffc230 error 4
> Feb 29 04:35:59 sn-vmware1 kernel: [8139698.179855]
> ntop[26751]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000042ffc230 error 4
> Feb 29 04:36:09 sn-vmware1 kernel: [8139708.935032]
> ntop[26752]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000042ffc230 error 4
> Feb 29 04:40:15 sn-vmware1 kernel: [8139954.242979]
> ntop[26775]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001570 error 4
> Feb 29 04:40:26 sn-vmware1 kernel: [8139964.633838]
> ntop[26776]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001570 error 4
> Feb 29 04:40:26 sn-vmware1 kernel: [8139965.408970]
> ntop[26777]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001570 error 4
> Feb 29 04:40:27 sn-vmware1 kernel: [8139966.003203]
> ntop[26778]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001570 error 4
> Feb 29 04:40:34 sn-vmware1 kernel: [8139972.714862]
> ntop[26779]: segfault at 00000001006c483f rip
> 00002b4dcf7fa8a6 rsp 0000000043001570 error 4
>
>
>
> just wanted to add that, i have no idea what it
> means
> though :(
> --- Mike Liberatore <[EMAIL PROTECTED]> wrote:
>
> > OK i think i figured it out, i installed rrdtools
> > 1.0.49 as recommened (I was running latest 1.2.x
> > release) and so far i think its ok.
> >
> > weird thing, i dont know if its related before i
> > fixed
> > the rrdtools (on my first run of ntop) many html
> > pages
> > were coming up blank (ip hosts, hosts, etc) but
> > others
> > such as summary, local to local, etc were working.
> > could this be related? i disabled rrd and it
> still
> > wasnt working.
> >
> > after fixing rrdtool and turning back on rrd it
> > seems
> > ok so far, it looks like all pages are working
> now.
> >
> >
> >
> >
> > --- Mike Liberatore <[EMAIL PROTECTED]> wrote:
> >
> > > Hi i finally dumped my old broken windows ntop
> and
> > > installed it on one of my linux boxes. so far
> the
> > > newer version is AWESOME.
> > >
> > > One problem, i am getting CLI errors regarding
> > rrd.
> > > I
> > > did give permission to the ntop directory to the
> > > ntop
> > > user and it doesnt error on creating
> directories,
> > > etc
> > > but i am getting the errors below. i am
> thinking
> > > maybe a rrdtool version issue??? any help would
> > be
> > > great:
> > >
> > > Fri Feb 29 03:01:40 2008 **ERROR** [1]
> > >
> >
>
'/usr/local/share/ntop/rrd/interfaces/NetFlow-device.2/IP_TelnetFlows.rrd'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [2]
> '--start'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [3]
> > '1204272099'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [4] '--step'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [5] '300'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [6]
> > > 'DS:counter:DERIVE:900:0:125000000'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [7]
> > > 'RRA:AVERAGE:0.5:1:864'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [8]
> > > 'RRA:MIN:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [9]
> > > 'RRA:MAX:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [10]
> > > 'RRA:AVERAGE:0.5:12:2160'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [11]
> > > 'RRA:AVERAGE:0.5:288:1080'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [12]
> > > 'RRA:HWPREDICT:1440:0.1:0.0035:20'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [0]
> > 'rrd_create'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [1]
> > >
> >
>
'/usr/local/share/ntop/rrd/interfaces/NetFlow-device.2/IP_TelnetBytes.rrd'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [2]
> '--start'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [3]
> > '1204272099'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [4] '--step'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [5] '300'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [6]
> > > 'DS:counter:DERIVE:900:0:125000000'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [7]
> > > 'RRA:AVERAGE:0.5:1:864'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [8]
> > > 'RRA:MIN:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [9]
> > > 'RRA:MAX:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [10]
> > > 'RRA:AVERAGE:0.5:12:2160'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [11]
> > > 'RRA:AVERAGE:0.5:288:1080'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [12]
> > > 'RRA:HWPREDICT:1440:0.1:0.0035:20'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [0]
> > 'rrd_create'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [1]
> > >
> >
>
'/usr/local/share/ntop/rrd/interfaces/NetFlow-device.2/IP_NBios-IPFlows.rrd'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [2]
> '--start'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [3]
> > '1204272099'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [4] '--step'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [5] '300'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [6]
> > > 'DS:counter:DERIVE:900:0:125000000'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [7]
> > > 'RRA:AVERAGE:0.5:1:864'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [8]
> > > 'RRA:MIN:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [9]
> > > 'RRA:MAX:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [10]
> > > 'RRA:AVERAGE:0.5:12:2160'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [11]
> > > 'RRA:AVERAGE:0.5:288:1080'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [12]
> > > 'RRA:HWPREDICT:1440:0.1:0.0035:20'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [0]
> > 'rrd_create'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [1]
> > >
> >
>
'/usr/local/share/ntop/rrd/interfaces/NetFlow-device.2/IP_NBios-IPBytes.rrd'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [2]
> '--start'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [3]
> > '1204272099'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [4] '--step'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [5] '300'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [6]
> > > 'DS:counter:DERIVE:900:0:125000000'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [7]
> > > 'RRA:AVERAGE:0.5:1:864'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [8]
> > > 'RRA:MIN:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [9]
> > > 'RRA:MAX:0.5:1:72'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [10]
> > > 'RRA:AVERAGE:0.5:12:2160'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [11]
> > > 'RRA:AVERAGE:0.5:288:1080'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [12]
> > > 'RRA:HWPREDICT:1440:0.1:0.0035:20'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [0]
> > 'rrd_create'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [1]
> > >
> >
>
'/usr/local/share/ntop/rrd/interfaces/NetFlow-device.2/IP_DHCP-BOOTPFlows.rrd'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [2]
> '--start'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [3]
> > '1204272099'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [4] '--step'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [5] '300'
> > > Fri Feb 29 03:01:40 2008 **ERROR** [6]
>
=== message truncated ===
____________________________________________________________________________________
Never miss a thing. Make Yahoo your home page.
http://www.yahoo.com/r/hs
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
