What you are seeing is the RESULT of the crash the OS shuts down, realized nobody wants the NIC in promiscuous mode, etc.
You need to run under gdb (the debugger) and capture the failure point itself. Instructions are in ntops FAQ. -----Burton From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jonathan BAROU Sent: Monday, October 06, 2008 9:35 AM To: [email protected] Subject: [Ntop] Ntop stop after x minutes Hello, Im using Ntop 3.3.8 on RedHat 4 release(2.6.9-5.EL) version(#1 Wed Jan 5 19:22:18 EST 2005) machine(i686). I start Ntop like that /usr/bin/ntop -i eth0,eth1,eth2 -d -L -u ntop -P /usr/local/var/ntop and after x minutes it crashes. In the logs I have that : Oct 6 15:51:40 localhost kernel: device eth0 left promiscuous mode Oct 6 15:51:40 localhost kernel: device eth1 left promiscuous mode Oct 6 15:51:40 localhost kernel: device eth2 left promiscuous mode Oct 6 15:56:51 localhost kernel: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1a:a0:44:ce:d5:08:00 SRC=192.168.2.20 DST=192.168.2.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=20351 PROTO=UDP SPT=137 DPT=137 LEN=58 Oct 6 15:56:51 localhost kernel: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1a:a0:44:ce:d5:08:00 SRC=192.168.2.20 DST=192.168.2.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=20362 PROTO=UDP SPT=137 DPT=137 LEN=58 Oct 6 15:56:52 localhost kernel: IN=eth1 OUT= MAC=ff:ff:ff:ff:ff:ff:00:1a:a0:44:ce:d5:08:00 SRC=192.168.2.20 DST=192.168.2.255 LEN=78 TOS=0x00 PREC=0x00 TTL=128 ID=20369 PROTO=UDP SPT=137 DPT=137 LEN=58 And nothing in the Ntop logs. I have tried to run ntop with the option s (--no-promiscious) but the problem is the same. Basic Information ntop Version.....3.3.8 (Dag Apt RPM Repository) Configured on.....Oct 6 2008 1:42:07 Built on.....Oct 6 2008 01:42:58 OS.....i686-redhat-linux-gnu [32 bit] libpcap Version.....libpcap version 0.8.3 RRD Version.....1.2023 Running from...../usr/bin Libraries in...../usr/lib Library path.....(nil) ntop Process Id.....14963 http Process Id.....14963 Run State.....Run Command Line Started as........./usr/bin/ntop -i eth0,eth1,eth2 -d -L -u ntop -P /usr/local/var/ntop Resolved to........./usr/bin/ntop -i eth0,eth1,eth2 -d -L -u ntop -P /usr/local/var/ntop Does someone have any idea? Thanks Jonathan BAROU [EMAIL PROTECTED]
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
