Glad it helped - hopefully it will last! If this issue continues don't forget the basic stuff, like enough real and virtual memory, enough free space on the volumes ntop uses, dir/file perms, etc. Sometimes the little stuff causes big issues.
Also, Luca did ask for a copy of a suspect dnsCache.db file. Mine are currently relatively small and don't "appear" to be the reason for my signal 11 / segfault issues. If you think it's the culprit, maybe zip it up and let me / Luca know you have one ready and we'll figure out a way to get it from you. Gary ________________________________ From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of frederick sonnichsen Sent: Wednesday, March 05, 2008 11:33 AM To: [email protected] Subject: Re: [Ntop] ntop crashes with magic number error Gary thanks for your help on this issue. I looked at the db's and the DNS cache had grown quite large. After deleting it and restarting ntop it has run flawlessly for about a week. The DNS cache does continue to grow again. I will set up some periodic maintenance scripts to keep it under control Cheers Fritz Gary Gatten wrote: I don't think the -x/-X will fix the magic number. I monitor thousands of hosts that in turn talk to dozens of hosts - so that's 10's of thousands. The default -x/-X were too small for that many hosts. If you're confident your system memory is good, try deleting the db's and see if that helps. If not, you may have to run in debug mode. There's docs on how to do this - I need to read them myself to figure out why mine keeps crashing with a segfault / signal 11. G -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of frederick sonnichsen Sent: Thursday, February 28, 2008 7:51 AM To: [email protected] Subject: Re: [Ntop] ntop crashes with magic number error I have adjusted the startup parms for ntop, parallel to Gary's values, however I still get the message: **ERROR** Bad magic number (expected=1968/real=0) getNextHost()[address.c/54] followed by either a crash or a hang-up. My startup is: /usr/bin/ntop -i eth3 @/etc/ntop.conf -d -t 5 -x 131072 -X 131072 -O -K -d I have tried various combinations of x and X hoping to adjust the hash tables but this did not help. 1) Is there an older stable release of ntop that will circumvent this 2) Or is there a fix that I am unaware of Perhaps there is a way to track file and memory usage to arrive at more objective values for the x's Thanks Fritz =========================================================== Gary Gatten wrote: I think if you google ntop + whatever you'll find some stuff. I've had the bad magic number before as well: http://www.mail-archive.com/[email protected]/msg11633.html Haven't had it in some time, but still have some segfault problems I'm "trying" to fix. Gary -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of frederick sonnichsen Sent: Monday, February 25, 2008 10:33 AM To: [email protected] Subject: [Ntop] ntop crashes with magic number error I am new to ntop and I have just installed it on redhat/ Fedora core 6. Our ntop release is v.3.2.3 After startup I get the following error but ntop still seems to run OK: Feb 19 09:18:28 chakotay ntop[2299]: **ERROR** Sanity check failed (2) [Low memory?] Later on, ntop crashes with the following error: Feb 19 21:26:16 chakotay ntop[2299]: **ERROR** Bad magic number (expected=1968/real=0) [deviceId=0] lookupHost()[pbuf.c/1209] I could not find an archive for this mailing list so hopefully I am not posting something that has been discussed before, Thank You, Fritz _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font> _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
