Re: [Ntop] Ntop crashing (segmentation fault)
Luca Deri wrote: Hello please update to the code that's in SVN that should have fixed this issue Luca Luca, I'll try, thank you. ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] Ntop crashing (segmentation fault)
Hello please update to the code that's in SVN that should have fixed this issue Luca On Sep 4, 2009, at 2:46 PM, Gary Gatten wrote: Try deleting your dnsCache.db and address*.db. Do NOT delete your prefscache.db. Although, in 3.3.9 it MAY do this by itself... Also you can try to disable name resolution, and/or "sessions". Just for testing unless of course you don't really need this info in your deployment. Check the man on args to disable this stuff. - Original Message - From: ntop-boun...@unipi.it To: ntop@unipi.it Sent: Fri Sep 04 05:01:46 2009 Subject: [Ntop] Ntop crashing (segmentation fault) Hallo, I have been running Ntop 3.33.9 for about three months flawlessy on Ubuntu Jaunty (2.6.28-15-server). Since some days it keeps crashing after some time (from 15 minutes to some hours after I launch it). I use it to have a raw measure of the traffic in our network, so it works collecting traffic from a mitrror of a trunk switch port. Running gdb (gdb: set args -u root -w 3001 -i eth1 -K) here is what I got: 11:34:14 %a %d %b %Y %r %Z **ERROR** Bad magic number (expected=1968/real=0) [deviceId=0] lookupHost()[pbuf.c:1262] *** glibc detected *** /usr/local/bin/ntop: malloc(): memory corruption: 0x098e8338 *** Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xb3ef9b90 (LWP 16527)] 0xb74d5586 in ?? () from /usr/lib/libgdbm.so.3 Can someone please point me in the right direction to solve the problem or to give you more useful info? Forgive my poor explanation, my linux and programming kung-fu is very weak:) Thanks a lot ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] Ntop crashing (segmentation fault)
Try deleting your dnsCache.db and address*.db. Do NOT delete your prefscache.db. Although, in 3.3.9 it MAY do this by itself... Also you can try to disable name resolution, and/or "sessions". Just for testing unless of course you don't really need this info in your deployment. Check the man on args to disable this stuff. - Original Message - From: ntop-boun...@unipi.it To: ntop@unipi.it Sent: Fri Sep 04 05:01:46 2009 Subject: [Ntop] Ntop crashing (segmentation fault) Hallo, I have been running Ntop 3.33.9 for about three months flawlessy on Ubuntu Jaunty (2.6.28-15-server). Since some days it keeps crashing after some time (from 15 minutes to some hours after I launch it). I use it to have a raw measure of the traffic in our network, so it works collecting traffic from a mitrror of a trunk switch port. Running gdb (gdb: set args -u root -w 3001 -i eth1 -K) here is what I got: 11:34:14 %a %d %b %Y %r %Z **ERROR** Bad magic number (expected=1968/real=0) [deviceId=0] lookupHost()[pbuf.c:1262] *** glibc detected *** /usr/local/bin/ntop: malloc(): memory corruption: 0x098e8338 *** Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0xb3ef9b90 (LWP 16527)] 0xb74d5586 in ?? () from /usr/lib/libgdbm.so.3 Can someone please point me in the right direction to solve the problem or to give you more useful info? Forgive my poor explanation, my linux and programming kung-fu is very weak:) Thanks a lot ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] ntop crashing
Did you compile this or get a package from somewhere? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Chad Bailey Sent: Friday, March 30, 2007 3:47 PM To: ntop@unipi.it Subject: [Ntop] ntop crashing Ever since I added a couple of netflow interfaces, ntop crashes on start up. Below is log of what's happening. Can anyone shed some light on what I need to do to fix this? Thanks for any help... [EMAIL PROTECTED]:/$ sudo ntop Password: Fri Mar 30 15:42:55 2007 NOTE: Interface merge enabled by default Fri Mar 30 15:42:55 2007 Initializing gdbm databases Fri Mar 30 15:42:55 2007 NOTE: Interface merge disabled from prefs file Fri Mar 30 15:42:55 2007 ntop will be started as user nobody Fri Mar 30 15:42:55 2007 **WARNING** -s set so will ATTEMPT to open interface w/o promisc mode (this will probably fail below) Fri Mar 30 15:42:55 2007 ntop v.3.2 SourceForge .tgz Fri Mar 30 15:42:55 2007 Configured on Jul 6 2006 5:25:06, built on Jul 6 2006 05:26:05. Fri Mar 30 15:42:55 2007 Copyright 1998-2005 by Luca Deri <[EMAIL PROTECTED]> Fri Mar 30 15:42:55 2007 Get the freshest ntop from http://www.ntop.org/ Fri Mar 30 15:42:55 2007 NOTE: ntop is running from 'ntop' Fri Mar 30 15:42:55 2007 NOTE: (but see warning on man page for the --instance parameter) Fri Mar 30 15:42:55 2007 NOTE: ntop libraries are in '/usr/lib' Fri Mar 30 15:42:55 2007 Initializing ntop Fri Mar 30 15:42:55 2007 Checking eth0 for additional devices Fri Mar 30 15:42:55 2007 Resetting traffic statistics for device eth0 Fri Mar 30 15:42:55 2007 DLT: Device 0 [eth0] is 1, mtu 1514, header 14 Fri Mar 30 15:42:55 2007 Initializing gdbm databases Fri Mar 30 15:42:55 2007 VENDOR: Loading MAC address table. Fri Mar 30 15:42:55 2007 VENDOR: Checking for MAC address table file Fri Mar 30 15:42:55 2007 VENDOR: File '/etc/ntop/specialMAC.txt' does not need to be reloaded Fri Mar 30 15:42:55 2007 VENDOR: ntop continues ok Fri Mar 30 15:42:55 2007 VENDOR: Checking for MAC address table file Fri Mar 30 15:42:55 2007 VENDOR: File '/etc/ntop/oui.txt' does not need to be reloaded Fri Mar 30 15:42:55 2007 VENDOR: ntop continues ok Fri Mar 30 15:42:55 2007 Fingeprint: Loading signature file. Fri Mar 30 15:42:55 2007 Fingeprint: ...loaded 1697 records Fri Mar 30 15:42:55 2007 INIT: Parent process is exiting (this is normal) [EMAIL PROTECTED]:/$ Fri Mar 30 15:42:55 2007 INIT: Bye bye: I'm becoming a daemon... *** glibc detected *** ntop: free(): invalid pointer: 0xb67e18d7 *** === Backtrace: = /lib/tls/i686/cmov/libc.so.6[0xb67278bd] /lib/tls/i686/cmov/libc.so.6(__libc_free+0x84)[0xb6727a44] [SNIPPED] ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop === "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." ___ Ntop mailing list Ntop@unipi.it http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Ntop crashing
To proceed further, you need to give us the relevant information - please see the instructions for running under gdb in docs/FAQ and post the information. Otherwise, well, it's about the same amount of information as saying there's a crash on the highway, can you fix it? -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of I. Dwayne Koonce Sent: Sunday, November 02, 2003 7:10 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] Ntop crashing I've now tried it with today's current CVS version, and it still crashes. With 2.2c, it actually logs the segmentation fault to the syslog, but in 2.2.96 it does not. Command line: ./ntop -u ntop -P /var/ntop2 -w 2001 -c -g -m -L Running on RedHat 8.0. > Dwayne, > please move to ntop 2.2.96. > > Regards, Luca > > > I. Dwayne Koonce wrote: > > >Okay, I originally wrote that I had this problem on RedHat 8.0 and 9, but I > >have since tried it out on 7.3 and seen the same thing. It occurs with both > >version 2.2c and 2.2.93, and apparently it is somehow related to the nature > >of the actual traffic seen. It occurs every 2-10 minutes during the day, > >but almost never during the night, so I got the idea that it might be > >something that one or more customers was sending during the day but not at > >night. ntop is running on the monitor port of a switch, so I disabled the > >monitoring for most of the ports and gradually added them back in. There > >are only two not being monitored now, and one of them is causing the problem > >because ntop isn't crashing. > > > >Sound like a known problem to anyone? I know "some kind of traffic" isn't > >much to go on, but my boss is using ntop today and I don't have the > >opportunity to let it crash. When I can, I'll try to get an actual capture > >of the killer packets. > > > >___ > >Ntop mailing list > >[EMAIL PROTECTED] > >http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > > -- > Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/ > Hacker: someone who loves to program and enjoys being > clever about it - Richard Stallman > > > ___ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > I. Dwayne Koonce E-mail: [EMAIL PROTECTED] Chief Network Administrator Phone: (979) 268-6800 Cybercom Corporation Fax: (979) 260-2652 ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] Ntop crashing
I've now tried it with today's current CVS version, and it still crashes. With 2.2c, it actually logs the segmentation fault to the syslog, but in 2.2.96 it does not. Command line: ./ntop -u ntop -P /var/ntop2 -w 2001 -c -g -m -L Running on RedHat 8.0. > Dwayne, > please move to ntop 2.2.96. > > Regards, Luca > > > I. Dwayne Koonce wrote: > > >Okay, I originally wrote that I had this problem on RedHat 8.0 and 9, but I > >have since tried it out on 7.3 and seen the same thing. It occurs with both > >version 2.2c and 2.2.93, and apparently it is somehow related to the nature > >of the actual traffic seen. It occurs every 2-10 minutes during the day, > >but almost never during the night, so I got the idea that it might be > >something that one or more customers was sending during the day but not at > >night. ntop is running on the monitor port of a switch, so I disabled the > >monitoring for most of the ports and gradually added them back in. There > >are only two not being monitored now, and one of them is causing the problem > >because ntop isn't crashing. > > > >Sound like a known problem to anyone? I know "some kind of traffic" isn't > >much to go on, but my boss is using ntop today and I don't have the > >opportunity to let it crash. When I can, I'll try to get an actual capture > >of the killer packets. > > > >___ > >Ntop mailing list > >[EMAIL PROTECTED] > >http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > > -- > Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/ > Hacker: someone who loves to program and enjoys being > clever about it - Richard Stallman > > > ___ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > I. Dwayne Koonce E-mail: [EMAIL PROTECTED] Chief Network Administrator Phone: (979) 268-6800 Cybercom Corporation Fax: (979) 260-2652 ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] Ntop crashing
On Wed, 29 Oct 2003, Luca Deri wrote: > Dwayne, > please move to ntop 2.2.96. Where can I find that? Or is that only in CVS? ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
Re: [Ntop] Ntop crashing
Dwayne, please move to ntop 2.2.96. Regards, Luca I. Dwayne Koonce wrote: Okay, I originally wrote that I had this problem on RedHat 8.0 and 9, but I have since tried it out on 7.3 and seen the same thing. It occurs with both version 2.2c and 2.2.93, and apparently it is somehow related to the nature of the actual traffic seen. It occurs every 2-10 minutes during the day, but almost never during the night, so I got the idea that it might be something that one or more customers was sending during the day but not at night. ntop is running on the monitor port of a switch, so I disabled the monitoring for most of the ports and gradually added them back in. There are only two not being monitored now, and one of them is causing the problem because ntop isn't crashing. Sound like a known problem to anyone? I know "some kind of traffic" isn't much to go on, but my boss is using ntop today and I don't have the opportunity to let it crash. When I can, I'll try to get an actual capture of the killer packets. ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop -- Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/ Hacker: someone who loves to program and enjoys being clever about it - Richard Stallman ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Ntop crashing
You've given ZERO information about your setup. Read HowTo ask for help in the docs/FAQ file and/or at http://snapshot.ntop.org. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Bubba Sent: Wednesday, February 26, 2003 9:45 PM To: [EMAIL PROTECTED] Subject: [Ntop] Ntop crashing I'm using Debian sid, and after awhile ntop will crash for what seems no good reason, and I have to start it back up again. Is this a known problem and/or can I have it restart after crashing? Or maybe some other way to fix this? Thanks -- Bubba <[EMAIL PROTECTED]> ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Ntop crashing and memory usage
You need more memory. We do not recommend routinely using swap space at all - when ntop walks it's structures to compute throughput et al, it will thrash. Host Hash counts Actual Hash Size.69632 Stored hosts.263069 [377 %] ^^^ > 100% is a dead giveaway 80% of a /20 is around 3200 LOCAL hosts, plus the 2, 3, 30, 500 that each of them is exchanging information with (I've been told that a busy Kazza user can have sessions w/ 5000! remote hosts). Your hash size is 69K. It looks like ntop isn't properly handling a failing malloc() - I'll have to check around for that, so it fails gracefully. Still, the answer is more memory. It does take a while to free memory - it has to walk all the structures and free each of the individually allocated parts. Plus, depending on the OS and library version, it may be consolidating freed areas for reuse or to return to the OS in large chunks (mmap)... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of listuser Sent: Thursday, January 30, 2003 2:22 AM To: [EMAIL PROTECTED] Subject: [Ntop] Ntop crashing and memory usage Hello all, I am using ntop to observe a /20 network which is nearly full, ie approx 80% hosts are up. (it's a cable ISP). my ntop box is a P4 1.7GHz 512 MB ram, 512 swap. My ntop is compiled from the jan 26 (or 27) snapshot. When ntop runs it takes up memory progressievly untill the swap becomes 0 (ram has about 1M free), and then the process is killed. In between I get messages like ntop[12890]: WARNING: releaseMutex() call with an UN-LOCKED mutex [address.c:347] VPN ntop[12889]: WARNING: releaseMutex() call with an UN-LOCKED mutex [hash.c:150] Another interesting observation was that when I stopped ntop running with 0 swap from web interface it took about half hour to free the memory ___ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
