-----Ursprüngliche Nachricht-----
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Wiebel,
Rolf
Gesendet: Freitag, 18. April 2008 19:33
An: [email protected]
Betreff: Re: [Ntop] NTOP : Hangs after some days
Sorry,
solved http://www.ntop.org/download.html
Rolf
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von
Wiebel, Rolf
Gesendet: Freitag, 18. April 2008 19:28
An: [email protected]
Betreff: Re: [Ntop] NTOP : Hangs after some days
Hello,
maybe a stupid question. I try to download the latest version ,
but couldn't download
svn co https://svn.ntop.org/trac/browser/trunk ntop
svn: PROPFIND Anfrage fehlgeschlagen auf '/trac/browser/trunk'
svn: PROPFIND von '/trac/browser/trunk': 200 OK
(https://svn.ntop.org)
Is this the correct way to get the latest version ?
Regards
Rolf
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im
Auftrag von Gary Gatten
Gesendet: Freitag, 18. April 2008 17:49
An: [email protected]
Betreff: Re: [Ntop] NTOP : Hangs after some days
If you're going to reinstall. I'd get the latest
version and compile it on your system. There are some handy tweaks you can do
in files such as globals-defines.h.
Gary
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Wiebel, Rolf
Sent: Friday, April 18, 2008 7:12 AM
To: [email protected]
Subject: Re: [Ntop] NTOP : Hangs after some days
Hello,
there is one cronjob (mrtg), starting every 15 minutes
, no specific in the login scripts.
Additional software installed : Nagios / Nagvis
Is it a good idea to reinstall ntop ?
Regards
Rolf
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL
PROTECTED] Im Auftrag von Gary Gatten
Gesendet: Donnerstag, 17. April 2008 20:09
An: [email protected]
Betreff: Re: [Ntop] NTOP : Hangs after some days
I misspoke - I do understand that it spawns
multiple instances on its own. I just thought it was odd that it could do this
as I assumed any instance using the same directory and files would encounter
similar file sharing issues I experienced when accidentally starting ntop when
an instance with the same runtime parms was already active.
The dnsCache.db issue usually causes ntop to
die - on my system it was causing segfaults. I'm not sure if this will have
any impact on your issue where ntop seems to replicate itself. That's just
really weird behavior. Are you sure there's nothing in cron, login scipts,
etc. that could be starting these?
G
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL
PROTECTED] On Behalf Of Wiebel, Rolf
Sent: Thursday, April 17, 2008 11:37 AM
To: [email protected]
Subject: AW: [Ntop] NTOP : Hangs after some days
Hello,
maybe there is a misunderstanding . I start it
only once. Not serveral times. This is done automaticaly during the next days.
If I start ntop from command line with
/usr/bin/ntop -t 5 -K -P /var/lib/ntop -i
eth0,eth1,eth2 -u wwwrun -w 205.191.7.249:3000
several times, it starts only once
ps -ef | grep ntop
wwwrun 9049 1 4 18:14 ? 00:00:29
/usr/bin/ntop -t 5 -K -P /var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
root 10971 8136 0 18:25 pts/0 00:00:00
grep ntop
I've setup 5 systems with Suse 9.3 / Ntop 3.2
and 2 System with Suse 10.2 / Ntop3.3. Only one NTOP 3.3 system has this
problem.
I've now followed the hint to delete the
dnsCache.db ( size was only 4 MB ) and restart NTOP.
Keep you informed if this helps
Regards
Rolf
Here is the output with setting the flags
/usr/bin/ntop -t 5 -K -P /var/lib/ntop -i
eth0,eth1,eth2 -u wwwrun -w 205.191.7.249:3000
Thu Apr 17 18:14:53 2008 NOTE: Interface merge
enabled by default
Thu Apr 17 18:14:53 2008 Initializing gdbm
databases
Thu Apr 17 18:14:53 2008 Opening database
'/var/lib/ntop/prefsCache.db'
Thu Apr 17 18:14:53 2008 Opening database
'/var/lib/ntop/ntop_pw.db'
Thu Apr 17 18:14:53 2008 NOTE: Reading
preferences file entries
Thu Apr 17 18:14:53 2008 NOTE: Processing
parameters (pass2)
Thu Apr 17 18:14:53 2008 ntop v.3.3
Thu Apr 17 18:14:53 2008 Configured on Sep 22
2007 3:29:05, built on Sep 22 2007 03:29:23.
Thu Apr 17 18:14:53 2008 Copyright 1998-2007
by Luca Deri <[EMAIL PROTECTED]>
Thu Apr 17 18:14:53 2008 Get the freshest ntop
from http://www.ntop.org/
Thu Apr 17 18:14:53 2008 NOTE: ntop is running
from '/usr/bin'
Thu Apr 17 18:14:53 2008 NOTE: (but see
warning on man page for the --instance parameter)
Thu Apr 17 18:14:53 2008 NOTE: ntop libraries
are in '/usr/lib'
Thu Apr 17 18:14:53 2008 Initializing ntop
Thu Apr 17 18:14:53 2008 Initializing IP
services
Thu Apr 17 18:14:53 2008 Initializing network
devices
Thu Apr 17 18:14:54 2008 Found interface
[index=0] 'eth0'
Thu Apr 17 18:14:54 2008 Found interface
[index=1] 'eth1'
Thu Apr 17 18:14:54 2008 Found interface
[index=2] 'eth2'
Thu Apr 17 18:14:54 2008 Found interface
[index=3] 'any'
Thu Apr 17 18:14:54 2008 Found interface
[index=4] 'lo'
Thu Apr 17 18:14:54 2008 Checking requested
device 'eth0'
Thu Apr 17 18:14:54 2008 Adding network device
eth0
Thu Apr 17 18:14:54 2008 Interface 'eth0'
(netmask 255.255.255.0) computed network size is 606 hosts
Thu Apr 17 18:14:54 2008 MEMORY:
ipTrafficMatrix base (no TrafficEntry) for interface 'eth0' is 1.45MB
Thu Apr 17 18:14:54 2008 Checking eth0 for
additional devices
Thu Apr 17 18:14:54 2008 Checking eth0:0
Thu Apr 17 18:14:54 2008 Checking eth0:1
Thu Apr 17 18:14:54 2008 Checking eth0:2
Thu Apr 17 18:14:54 2008 Checking eth0:3
Thu Apr 17 18:14:54 2008 Checking eth0:4
Thu Apr 17 18:14:54 2008 Checking eth0:5
Thu Apr 17 18:14:54 2008 Checking eth0:6
Thu Apr 17 18:14:54 2008 Checking eth0:7
Thu Apr 17 18:14:54 2008 Resetting traffic
statistics for device eth0
Thu Apr 17 18:14:54 2008 Initializing device
eth0 (0)
Thu Apr 17 18:14:54 2008 DLT: Device 0 [eth0]
is 1, mtu 1514, header 14
Thu Apr 17 18:14:54 2008 Checking requested
device 'eth1'
Thu Apr 17 18:14:54 2008 Adding network device
eth1
Thu Apr 17 18:14:54 2008 Interface 'eth1'
(netmask 255.255.255.0) computed network size is 606 hosts
Thu Apr 17 18:14:54 2008 MEMORY:
ipTrafficMatrix base (no TrafficEntry) for interface 'eth1' is 1.45MB
Thu Apr 17 18:14:54 2008 Checking eth1 for
additional devices
Thu Apr 17 18:14:54 2008 Checking eth1:0
Thu Apr 17 18:14:54 2008 Checking eth1:1
Thu Apr 17 18:14:54 2008 Checking eth1:2
Thu Apr 17 18:14:54 2008 Checking eth1:3
Thu Apr 17 18:14:54 2008 Checking eth1:4
Thu Apr 17 18:14:54 2008 Checking eth1:5
Thu Apr 17 18:14:54 2008 Checking eth1:6
Thu Apr 17 18:14:54 2008 Checking eth1:7
Thu Apr 17 18:14:54 2008 Resetting traffic
statistics for device eth1
Thu Apr 17 18:14:54 2008 Initializing device
eth1 (1)
Thu Apr 17 18:14:54 2008 DLT: Device 1 [eth1]
is 1, mtu 1514, header 14
Thu Apr 17 18:14:54 2008 Checking requested
device 'eth2'
Thu Apr 17 18:14:54 2008 Adding network device
eth2
Thu Apr 17 18:14:54 2008 Interface 'eth2'
(netmask 255.255.255.0) computed network size is 606 hosts
Thu Apr 17 18:14:54 2008 MEMORY:
ipTrafficMatrix base (no TrafficEntry) for interface 'eth2' is 1.45MB
Thu Apr 17 18:14:54 2008 Checking eth2 for
additional devices
Thu Apr 17 18:14:54 2008 Checking eth2:0
Thu Apr 17 18:14:54 2008 Checking eth2:1
Thu Apr 17 18:14:54 2008 Checking eth2:2
Thu Apr 17 18:14:54 2008 Checking eth2:3
Thu Apr 17 18:14:54 2008 Checking eth2:4
Thu Apr 17 18:14:54 2008 Checking eth2:5
Thu Apr 17 18:14:54 2008 Checking eth2:6
Thu Apr 17 18:14:54 2008 Checking eth2:7
Thu Apr 17 18:14:54 2008 Resetting traffic
statistics for device eth2
Thu Apr 17 18:14:54 2008 Initializing device
eth2 (2)
Thu Apr 17 18:14:54 2008 DLT: Device 2 [eth2]
is 1, mtu 1514, header 14
Thu Apr 17 18:14:54 2008 Initializing gdbm
databases
Thu Apr 17 18:14:54 2008 Creating database
'/var/lib/ntop/addressQueue.db'
Thu Apr 17 18:14:54 2008 Opening database
'/var/lib/ntop/dnsCache.db'
Thu Apr 17 18:14:54 2008 Opening database
'/var/lib/ntop/macPrefix.db'
Thu Apr 17 18:14:54 2008 Opening database
'/var/lib/ntop/fingerprint.db'
Thu Apr 17 18:14:54 2008 VENDOR: Loading MAC
address table.
Thu Apr 17 18:14:54 2008 VENDOR: Checking for
MAC address table file
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'./specialMAC.txt.gz'
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'./specialMAC.txt'
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'/etc/ntop/specialMAC.txt.gz'
Thu Apr 17 18:14:54 2008 VENDOR: ...Found
Thu Apr 17 18:14:54 2008 VENDOR: Database
created/last modified Thu Apr 17 18:06:56 2008
Thu Apr 17 18:14:54 2008 VENDOR: Input file
created/last modified Tue Feb 26 14:27:20 2008
Thu Apr 17 18:14:54 2008 VENDOR: File
'/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Thu Apr 17 18:14:54 2008 VENDOR: ntop
continues ok
Thu Apr 17 18:14:54 2008 VENDOR: Checking for
MAC address table file
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'./oui.txt.gz'
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'./oui.txt'
Thu Apr 17 18:14:54 2008 VENDOR: Checking
'/etc/ntop/oui.txt.gz'
Thu Apr 17 18:14:54 2008 VENDOR: ...Found
Thu Apr 17 18:14:54 2008 VENDOR: Database
created/last modified Thu Apr 17 18:06:56 2008
Thu Apr 17 18:14:54 2008 VENDOR: Input file
created/last modified Tue Feb 26 14:27:20 2008
Thu Apr 17 18:14:54 2008 VENDOR: File
'/etc/ntop/oui.txt.gz' does not need to be reloaded
Thu Apr 17 18:14:54 2008 VENDOR: ntop
continues ok
Thu Apr 17 18:14:54 2008 Fingerprint: Loading
signature file
Thu Apr 17 18:14:54 2008 Fingerprint: Checking
for Fingerprint file... file
Thu Apr 17 18:14:54 2008 Fingerprint: Checking
'./etter.finger.os.gz'
Thu Apr 17 18:14:54 2008 Fingerprint: Checking
'./etter.finger.os'
Thu Apr 17 18:14:54 2008 Fingerprint: Checking
'/etc/ntop/etter.finger.os.gz'
Thu Apr 17 18:14:54 2008 Fingerprint: ...Found
Thu Apr 17 18:14:54 2008 Fingerprint: Loading
file '/etc/ntop/etter.finger.os.gz'
Thu Apr 17 18:14:54 2008 Fingerprint:
...loaded 1765 records
Thu Apr 17 18:14:54 2008 INIT: Parent process
is exiting (this is normal)
Thu Apr 17 18:14:54 2008 INIT: Bye bye: I'm
becoming a daemon...
________________________________
Von: [EMAIL PROTECTED] im Auftrag von Gary
Gatten
Gesendet: Do 17.04.2008 18:10
An: [email protected]
Betreff: Re: [Ntop] NTOP : Hangs after some days
I have not seen this before. If I try to start
mine more than once I
get errors relating to file reads/locks and it
aborts. I'm not even
sure where to start on this. Does it always
try to start more than one
instance or just after a reboot? Maybe try the
-t 5 and -K flags and
see if there's more detailed messages?
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL
PROTECTED] On Behalf Of
Wiebel, Rolf
Sent: Thursday, April 17, 2008 8:42 AM
To: [email protected]
Subject: [Ntop] NTOP : Hangs after some days
Hello,
I've a problem that NTOP hangs after a while
NTOP is running , but several times
ps -ef | grep ntop
wwwrun 5909 1 51 Mar25 ?
12-00:22:33 /usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
wwwrun 4043 5909 0 Mar26 ? 00:00:00
/usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
wwwrun 28053 5909 0 Mar28 ? 00:00:00
/usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
wwwrun 8190 5909 0 Mar28 ? 00:00:00
/usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
wwwrun 13164 5909 0 Mar28 ? 00:00:00
/usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
wwwrun 24066 5909 0 Apr01 ? 00:00:00
/usr/bin/ntop -P
/var/lib/ntop -i eth0,eth1,eth2 -u wwwrun -w
205.191.7.249:3000
Any idea why it start several times ?
Then on 4.4. it stops getting data.
If I stop and start ntop all is working fine.
Regards
Rolf
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
<font size="1">
<div style='border:none;border-bottom:double
windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only
the intended recipient
and may contain information that is privileged
and/or confidential.
If you are not the intended recipient, you are
hereby notified that
any review, use, dissemination, disclosure or
copying of this email
and its attachments, if any, is strictly
prohibited. If you have
received this email in error, please
immediately notify the sender by
return email and delete this email from your
system."
</font>
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
"This email is intended to be reviewed by only
the intended recipient and may contain information that is privileged and/or
confidential. If you are not the intended recipient, you are hereby notified
that any review, use, dissemination, disclosure or copying of this email and
its attachments, if any, is strictly prohibited. If you have received this
email in error, please immediately notify the sender by return email and delete
this email from your system."
"This email is intended to be reviewed by only the
intended recipient and may contain information that is privileged and/or
confidential. If you are not the intended recipient, you are hereby notified
that any review, use, dissemination, disclosure or copying of this email and
its attachments, if any, is strictly prohibited. If you have received this
email in error, please immediately notify the sender by return email and delete
this email from your system."
This e-mail message and any attachments may contain
legally privileged, confidential or proprietary Information,
or information otherwise protected by law of EMCON
Technologies, its affiliates, or third parties. This notice
serves as marking of its Confidential status as defined
in any confidentiality agreements concerning the sender
and recipient. If you are not the intended recipient(s),
or the employee or agent responsible for delivery of this
message to the intended recipient(s), you are hereby
notified that any dissemination, distribution or copying
of this e-mail message is strictly prohibited.
If you have received this message in error, please
immediately notify the sender and delete this e-mail
message from your computer.
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
