Increase memory, increse max num hash entries in the ntop configuration....see below
2009/1/4 [email protected] <[email protected]> > Ntop is pretty cool, i just can't seem to keep it running. It crashes > anywhere from a couple of hours to a day. Any tips? > > Running 1.2.1 RELASE, with 512mb memory, 30gb Hard drive, 2.4ghz P4 > Processor. > > Adam > > Jan 3 22:53:58 kernel: fxp0: promiscuous mode disabled Jan 3 22:53:58 > kernel: > pid 1788 (ntop), uid 0: exited on signal 11 (core dumped) Jan 3 18:43:38 > dhcpd: > Abandoning IP address 10.71.29.200: declined. Jan 3 15:40:49 kernel: > WARNING: pseudo-random number generator used for IPsec processing Jan 3 > 11:54:31 kernel: xl0: tx underrun, increasing tx start threshold to 120 > bytes Jan 3 11:54:31 kernel: xl0: transmission error: 90 Jan 2 23:25:00 > check_reload_status: > check_reload_status is starting Jan 2 22:50:00 check_reload_status: > check_reload_status is starting > VVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVVV > Jan 2 18:44:16 ntop[1788]: **ERROR** Sanity check failed (2) [Low > memory?] Jan 2 18:44:16 ntop[1788]: **ERROR** Sanity check failed (2) > [Low memory?] > > Jan 2 18:44:16 ntop[1788]: WARNING: Max num hash entries (8102) reached > (see -x) Jan 2 18:44:16 ntop[1788]: WARNING: Max num hash entries (8102) > reached (see -x) > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > Jan 2 17:18:57 dhcpd: Abandoning IP address 10.71.19.218: declined. Jan > 2 16:12:00 dnsmasq[599]: nameserver X.X.X.X refused to do a recursive > query Jan 2 16:12:00 dnsmasq[599]: nameserver X.X.X.X refused to do a > recursive query Jan 2 15:12:31 ntop[17826]: EPIPE during sending of page > to web client Jan 2 15:12:31 ntop[17826]: EPIPE during sending of page to > web client Jan 2 14:59:44 ntop[1788]: Unable to accept HTTP(S) request > (errno=53: Software caused connection abort) Jan 2 14:59:44 ntop[1788]: > Unable to accept HTTP(S) request (errno=53: Software caused connection > abort) Jan 2 14:59:44 ntop[1788]: Unable to accept HTTP(S) request > (errno=53: Software caused connection abort) Jan 2 14:59:44 ntop[1788]: > Unable to accept HTTP(S) request (errno=53: Software caused connection > abort) Jan 2 14:31:36 ntop[1788]: Unable to accept HTTP(S) request > (errno=53: Software caused connection abort) Jan 2 14:31:36 ntop[1788]: > Unable to accept HTTP(S) request (errno=53: Software caused connection > abort) Jan 2 14:12:02 ntop[1788]: Unable to accept HTTP(S) request > (errno=53: Software caused connection abort) Jan 2 14:12:02 ntop[1788]: > Unable to accept HTTP(S) request (errno=53: Software caused connection > abort) Jan 2 14:12:02 ntop[1788]: LASTSEEN: Done Jan 2 14:12:02 ntop[1788]: > LASTSEEN: Done Jan 2 14:12:01 ntop[1788]: LASTSEEN: Thanks for using > LsWatch Jan 2 14:12:01 ntop[1788]: LASTSEEN: Thanks for using LsWatch Jan > 2 14:06:51 ntop[1788]: THREADMGMT[t683680512]: RRD: Throughput data > collection: Thread running [p1788] Jan 2 14:06:51 ntop[1788]: > THREADMGMT[t683680512]: RRD: Throughput data collection: Thread running > [p1788] Jan 2 14:06:51 ntop[1788]: THREADMGMT[t683680512]: RRD: > Throughput data collection: Thread starting [p1788] Jan 2 14:06:51 > ntop[1788]: > THREADMGMT[t683680512]: RRD: Throughput data collection: Thread starting > [p1788] Jan 2 14:06:51 ntop[1788]: THREADMGMT[t683680000]: RRD: Data > collection thread running [p1788] Jan 2 14:06:51 ntop[1788]: > THREADMGMT[t683680000]: RRD: Data collection thread running [p1788] Jan 2 > 14:06:51 ntop[1788]: THREADMGMT[t683680512]: RRD: Started thread for > throughput data collection Jan 2 14:06:51 ntop[1788]: > THREADMGMT[t683680512]: RRD: Started thread for throughput data collection > Jan > 2 14:06:41 ntop[1788]: THREADMGMT[t683676160]: SFP: Fingerprint scan > thread running [p1788] Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683676160]: > SFP: Fingerprint scan thread running [p1788] Jan 2 14:06:41 ntop[1788]: > THREADMGMT[t683680256]: NPS(fxp0): pcapDispatch thread running [p1788] Jan > 2 14:06:41 ntop[1788]: THREADMGMT[t683680256]: NPS(fxp0): pcapDispatch > thread running [p1788] Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683680256]: > NPS(fxp0): pcapDispatch thread starting [p1788] Jan 2 14:06:41 ntop[1788]: > THREADMGMT[t683680256]: NPS(fxp0): pcapDispatch thread starting [p1788] Jan > 2 14:06:41 ntop[1788]: THREADMGMT[t683676416]: SIH: Idle host scan thread > running [p1788] Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683676416]: SIH: > Idle host scan thread running [p1788] Jan 2 14:06:41 ntop[1788]: > THREADMGMT[t683680000]: RRD: Data collection thread starting [p1788] Jan > 2 14:06:41 ntop[1788]: THREADMGMT[t683680000]: RRD: Data collection thread > starting [p1788] Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683680256]: > NPS(1): Started thread for network packet sniffing [fxp0] Jan 2 14:06:41 > ntop[1788]: > THREADMGMT[t683680256]: NPS(1): Started thread for network packet sniffing > [fxp0] Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683675904]: ntop RUNSTATE: > RUN(4) Jan 2 14:06:41 ntop[1788]: THREADMGMT[t683675904]: ntop RUNSTATE: > RUN(4) Jan 2 14:06:41 ntop[1788]: Note: Reporting device initally set to > 0 [fxp0] Jan 2 14:06:41 ntop[1788]: Note: Reporting device initally set > to 0 [fxp0] Jan 2 14:06:41 ntop[1788]: Now running as requested user > 'root' (0:0) Jan 2 14:06:41 ntop[1788]: Now running as requested user > 'root' (0:0) Jan 2 14:06:41 ntop[1788]: INIT: Created pid file > (/var/run/ntop.pid) Jan 2 14:06:41 ntop[1788]: INIT: Created pid file > (/var/run/ntop.pid) Jan 2 14:06:41 ntop[1788]: SFLOW: no devices to > initialize Jan 2 14:06:41 ntop[1788]: SFLOW: no devices to initialize Jan > 2 14:06:41 ntop[1788]: THREADMGMT: RRD: Started thread (t683680000) for > data collection Jan 2 14:06:41 ntop[1788]: THREADMGMT: RRD: Started > thread (t683680000) for data collection Jan 2 14:06:41 ntop[1788]: > RRD_DEBUG: DirPerms 0700 Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: DirPerms > 0700 Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: umask 0066 Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: umask 0066 Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: rrdPath > /var/db/ntop/rrd [dynamic/volatile] Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > rrdPath /var/db/ntop/rrd [dynamic/volatile] Jan 2 14:06:41 ntop[1788]: > RRD_DEBUG: rrdPath /var/db/ntop/rrd [normal] Jan 2 14:06:41 ntop[1788]: > RRD_DEBUG: rrdPath /var/db/ntop/rrd [normal] Jan 2 14:06:41 ntop[1788]: > RRD_DEBUG: hostsFilter Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: hostsFilter Jan > 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpDetail medium Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: dumpDetail medium Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > dumpMatrix no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpMatrix no Jan 2 > 14:06:41 ntop[1788]: RRD_DEBUG: dumpASs no Jan 2 14:06:41 ntop[1788]: > RRD_DEBUG: dumpASs no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > dumpInterfaces yes Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpInterfaces > yes Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpHosts no Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: dumpHosts no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpSubnets > no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpSubnets no Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: dumpFlows no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpFlows > no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpDomains no Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: dumpDomains no Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > dumpMonths 36 months by day Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > dumpMonths 36 months by day Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: > dumpDays 90 days by hour Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpDays > 90 days by hour Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpHours 72 hours > by 300 seconds Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpHours 72 hours > by 300 seconds Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpShortInterval 10 > seconds Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpShortInterval 10 > seconds Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpInterval 300 seconds Jan > 2 14:06:41 ntop[1788]: RRD_DEBUG: dumpInterval 300 seconds Jan 2 14:06:41 > ntop[1788]: > RRD_DEBUG: Parameters: Jan 2 14:06:41 ntop[1788]: RRD_DEBUG: Parameters: Jan > 2 14:06:41 ntop[1788]: RRD: Mask for new files is 0066 > > --------------------------------------------------------------------- To > unsubscribe, e-mail: [email protected] For additional > commands, e-mail: [email protected] Commercial support available - > https://portal.pfsense.org > -- === m i c h a e l - s c h u h . n e t === Michael Schuh Postfach 10 21 52 66021 Saarbrücken phone: 0681/8319664 mobil: 0177/9738644 @: m i c h a e l . s c h u h @ g m a i l . c o m === Ust-ID: DE251072318 ===
