If, as you seem to have, you've eliminated the obvious (bugs in that code tend to be an all or nothing), then it's almost certainly a traffic issue.
For some reason, having to do with your setup, ntop really is seeing the same traffic twice. For example, you have the no-mac flag set (implicit with netflow) and are seeing both sides of the router. The second flow representing a->b is a dup of the 1st, but the only place we figure that out is the rrd update. -----Burton From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Friday, May 08, 2009 5:13 PM To: [email protected]; [email protected] Subject: [Ntop] missing pie charts and RRD debugs I had 3.2.1 working "fine" on FreeBSD 6.0 RELEASE. Tried going to the latest on SVN and had some issues. Got past some, but still have missing Pie charts - as in NONE! Installed 3.3.8 and have the same problem. I went down to 3.3.8 because of the problem with "[warn] kevent: Bad file descriptor" I was getting on 3.3.10. Also, I have (3) instances of nTop on the same system. In only one instance rrd is spewing MANY errors similar to those below. I've deleted the rrd dir several times and restarted the rrd plugin and ntop to no avail. I don't quite understand why only one instance is having this issue? Also, I'm using the same prefsCache.db as 3.2.1, so all the settings from rrd are the same as the working 3.2.1 version. I also double-checked them and tweaked a couple, but still no love! This instance DOES have multiple netflow interfaces where there others only have a single one - maybe that's part of it? Each interface has it's own dir so not sure WHY it would have a problem.. TIA for any help! Gary May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: **WARNING** RRD: rrd_update(/usr/local/var/ntop-FieldInet-NEW/rrd/interfaces/Region11-Inet/Ne tFlow/1/ifInOctets.rrd) error: illegal attempt to update using time 1241828575 when last update time is 1241828575 (minimum one second step) May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD: call stack (counter created: 0): May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD: argv[0]: rrd_update May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD: argv[1]: /usr/local/var/ntop-FieldInet-NEW/rrd/interfaces/Region11-Inet/NetFlow/1/ifI nOctets.rrd May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD: argv[2]: 1241828575:872158 May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD_DEBUG: WARNING rrd_update not performed (RRD already updated) May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD_DEBUG: argv[0] = rrd_update May 8 19:23:07 wanmon1 Field.Office.Internet[8536]: RRD_DEBUG: argv[1] = /usr/local/var/ntop-FieldInet-NEW/rrd/interfaces/Region11-Inet/NetFlow/1/ifI nPkts.rr "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
