Hello Yuan,
"Fri Jul 11 09:48:09 2008 NOTE: Interface merge enabled by default"
try ntop -M -i eth1
Regards
Rolf
________________________________
Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Yu Wan
Gesendet: Donnerstag, 10. Juli 2008 19:52
An: [email protected]
Betreff: Re: [Ntop] **ERROR** pcap_open_live(): 'bind: Network is down'
[EMAIL PROTECTED] ~]# ntop -i eth1
Fri Jul 11 09:48:09 2008 NOTE: Interface merge enabled by default
Fri Jul 11 09:48:09 2008 Initializing gdbm databases
Fri Jul 11 09:48:09 2008 ntop will be started as user nobody
Fri Jul 11 09:48:09 2008 ntop v.3.3.6 (Dag Apt RPM Repository)
Fri Jul 11 09:48:09 2008 Configured on Jun 12 2008 11:27:52, built on
Jun 12 2008 11:30:05.
Fri Jul 11 09:48:09 2008 Copyright 1998-2007 by Luca Deri <[EMAIL
PROTECTED]>
Fri Jul 11 09:48:09 2008 Get the freshest ntop from
http://www.ntop.org/
Fri Jul 11 09:48:09 2008 NOTE: ntop is running from 'ntop'
Fri Jul 11 09:48:09 2008 NOTE: (but see warning on man page for the
--instance parameter)
Fri Jul 11 09:48:09 2008 NOTE: ntop libraries are in '/usr/lib'
Fri Jul 11 09:48:09 2008 Initializing ntop
Fri Jul 11 09:48:09 2008 No patterns to load: protocol guessing
disabled.
Fri Jul 11 09:48:09 2008 **ERROR** pcap_open_live(): 'bind: Network is
down'
Fri Jul 11 09:48:09 2008 Please correct the problem or select a
different interface using the -i flag
Fri Jul 11 09:48:09 2008 **FATAL_ERROR** Not root, ntop shutting
down...
Fri Jul 11 09:48:09 2008 CLEANUP[t3086214848]: ntop caught signal 2
[state=2]
Fri Jul 11 09:48:09 2008 ntop is now quitting...
2008/7/11 Gary Gatten <[EMAIL PROTECTED]>:
Don't use the @/etc/ntop.conf. Whatever args you have in that
file add them to the command. For example:
Ntop -i eth1
If you don't use root - and you really shouldn't - make sure
the user (typically ntop) has all necessary file/directory permissions.
G
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Yu Wan
Sent: Thursday, July 10, 2008 11:03 AM
To: [email protected]
Subject: Re: [Ntop] **ERROR** pcap_open_live(): 'bind: Network
is down'
I try with ntop @/etc/ntop.conf -i eth1, the same error
2008/7/10 Gary Gatten <[EMAIL PROTECTED]>:
Specify the args you want (interface, user, etc.) on the
command line.
________________________________
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
Yu Wan
Sent: Thursday, July 10, 2008 10:54 AM
To: [email protected]; [EMAIL PROTECTED]
Subject: Re: [Ntop] **ERROR** pcap_open_live(): 'bind: Network
is down'
Hi Yuri,
Thanks for your reply.
I running ntop without using the config file (issue ntop on
console) without any error, but it only capture eth0, that's not my wanted.
in my ocnfig file, I used --user=root, but from the running
result, it show runing by user "ntop", do you think is that problem?
2008/7/10 Yuri Francalacci <[EMAIL PROTECTED]>:
do you have the same error even running ntop without using the
config file?
Try to run ntop on interface eth0 just to check that package is
working
as expected.
Yuri
Yu Wan wrote, On 09/07/2008 17.00:
> Dear ALL,
> I have problem on ntop v.3.3.6 (Dag Apt RPM Repository) on
CentOS 5.0
>
> I have one PC with 256M memory and 2 NIC, eth0 used for
management, and
> eth1 was spaned from switch for my internet router.
> When I run with "ntop @/etc/ntop.conf", the system complain
"**ERROR**
> pcap_open_live(): 'bind: Network is down'"
> Please check the error message:
> [EMAIL PROTECTED] ~]# ntop @/etc/ntop.conf
> Processing file /etc/ntop.conf for parameters...
> Thu Jul 10 06:48:44 2008 NOTE: Interface merge enabled by
default
> Thu Jul 10 06:48:44 2008 Initializing gdbm databases
> Thu Jul 10 06:48:44 2008 ntop v.3.3.6 (Dag Apt RPM
Repository)
> Thu Jul 10 06:48:44 2008 Configured on Jun 12 2008 11:27:52,
built on
> Jun 12 2008 11:30:05.
> Thu Jul 10 06:48:44 2008 Copyright 1998-2007 by Luca Deri
> <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>>
> Thu Jul 10 06:48:44 2008 Get the freshest ntop from
http://www.ntop.org/
> Thu Jul 10 06:48:44 2008 NOTE: ntop is running from 'ntop'
> Thu Jul 10 06:48:44 2008 NOTE: (but see warning on man page
for the
> --instance parameter)
> Thu Jul 10 06:48:44 2008 NOTE: ntop libraries are in
'/usr/lib'
> Thu Jul 10 06:48:44 2008 Initializing ntop
> Thu Jul 10 06:48:44 2008 No patterns to load: protocol
guessing disabled.
> Thu Jul 10 06:48:45 2008 **ERROR** pcap_open_live(): 'bind:
Network is
> down'
> Thu Jul 10 06:48:45 2008 Please correct the problem or
select a
> different interface using the -i flag
> Thu Jul 10 06:48:45 2008 **FATAL_ERROR** Not root, ntop
shutting down...
> Thu Jul 10 06:48:45 2008 CLEANUP[t3086829248]: ntop caught
signal 2
> [state=2]
> Thu Jul 10 06:48:45 2008 ntop is now quitting...
>
>
> But I was very sure the link with eth1 was up.Does anyboy who
can help
> me to check it?
> Many thanks！
>
> Please check OS information:
> [EMAIL PROTECTED] ~]# uname -a
> Linux localhost.localdomain 2.6.18-8.el5 #1 SMP Thu Mar 15
19:57:35 EDT
> 2007 i686 i686 i386 GNU/Linux
>
> And the way I installed the ntop
> rpm -Uhv
>
http://apt.sw.be/redhat/el5/en/i386/rpmforge/RPMS/rpmforge-release-0.3.6-1.el5.rf.i386.rpm
> yum install ntop
>
> The configuration of ntop:
> --user root
>
> ### Sets the directory that ntop runs from.
> --db-file-path /var/ntop
>
> ### Interface(s) that ntop will capture on (default: eth0)
> --interface eth1
>
> ### Configures ntop not to trust MAC addrs. This is used
when port
> mirroring or SPAN
> --no-mac
>
> ### Logging messages to syslog (instead of the console):
> ### NOTE: To log to a specific facility, use
--use-syslog=local3
> ### NOTE: The = is REQUIRED and no spaces are permitted.
> #--use-syslog
>
> ### Tells ntop to track only local hosts as specified by the
> --local-subnets option
> #--track-local-hosts
>
> ### Sets the port that the HTTP webserver listens on
> ### NOTE: --http-server 3000 is the default
> #--http-server 3000
>
> ### Sets the port that the optional HTTPS webserver listens on
> #--https-server 3001
>
> ### Sets the networks that ntop should consider as local.
> ### NOTE: Uses dotted decimal and CIDR notation. Example:
> 192.168.0.0/24 <http://192.168.0.0/24>
> ### The addresses of the interfaces are always local
and don't
> need to be specified.
> #--local-subnets xx.xx.xx.xx/yy
> ### Sets program to run as a daemon
> ### NOTE: For more than casual use, you probably want this.
>
>
>
>
------------------------------------------------------------------------
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
--
############################################################
Yuri Francalacci
E-Mail: [EMAIL PROTECTED] Internet: http://www.ntop.org/
*** Esse Quam Videri -- To Be, Rather Than To Seem ***
############################################################
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
"This email is intended to be reviewed by only the intended
recipient and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that any review,
use, dissemination, disclosure or copying of this email and its attachments, if
any, is strictly prohibited. If you have received this email in error, please
immediately notify the sender by return email and delete this email from your
system."
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
"This email is intended to be reviewed by only the intended
recipient and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that any review,
use, dissemination, disclosure or copying of this email and its attachments, if
any, is strictly prohibited. If you have received this email in error, please
immediately notify the sender by return email and delete this email from your
system."
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
