I know there was a seg fault problem - I've posted my trap on it previously, but I don't know if the latest version has fixed it - I'm stuck back a couple of days working on a change.
Best bet is to run it under gdb and capture the relevant information about the failure... One other thing - the 3c509b MAY cause you some problems. It's an old ISA card, and I've had issues with them under promiscuous mode (this was with snort, before I started playing with ntop, but still... it's all libpcap!). Just keep it in mind if you see odd results. You don't have to pay the $ for a 3c905 (although I do love them) - I'm also using $20 NetGear FA310s and 311s and Linksys LNX100 (or whatever it's called) just fine... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of PIERRE-LOIC BAUDET Sent: Friday, February 15, 2002 10:15 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop-dev] ntop seg. fault Hello everyone, Well, I have a problem... I installed ntop (February, 12nd release) and it seemed to work properly. I had no trouble with make and make install phases (except a warning about SSL missing, which doesn't matter). Unfortunately, it crashes after a 3 hours and a half run (segmentation fault). I am sorry to disturb you with this common problem.... Here is the log : (...) 15/Feb/2002 12:22:17 Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri. 15/Feb/2002 12:22:17 Welcome to sflowPlugin. (C) 2002 by Luca Deri. 15/Feb/2002 12:22:17 WARNING: For security reasons it is STRONGLY recommended to15/Feb/2002 12:22:17 WARNING: run ntop as unprivileged user by using the -u option! 15/Feb/2002 12:22:17 Resetting traffic statistics... 15/Feb/2002 12:22:17 Started thread (1026) for network packet analyser. 15/Feb/2002 12:22:17 Started thread (2051) for host traffic statistics. 15/Feb/2002 12:22:17 Started thread (3076) for throughput update. 15/Feb/2002 12:22:17 Started thread (4101) for idle hosts detection. 15/Feb/2002 12:22:17 Started thread (5126) for DNS address resolution. 15/Feb/2002 12:22:17 Started thread (6151) for address purge. 15/Feb/2002 12:22:17 Initializing plugins (if any)... 15/Feb/2002 12:22:17 Welcome to sFlow: listening on UDP port 6343... 15/Feb/2002 12:22:17 Waiting for HTTP connections on port 8080... 15/Feb/2002 12:22:17 Sniffying... 15/Feb/2002 12:22:17 Started thread (9226) for network packet sniffing on eth0. 15/Feb/2002 12:22:17 Started thread (10251) for network packet sniffing on eth1. 15/Feb/2002 12:22:17 Started thread (11276) for network packet sniffing on eth2. 15/Feb/2002 12:23:11 Extending hash size [newSize=64] 15/Feb/2002 12:25:58 Extending hash size [newSize=128] Erreur de segmentation (i.e "seg-fault" !) I wonder if the seg-fault happens just before the next hashtable extension ? This is just a supposition... Actually, I'd like to do the same as G. Serafini (Cf. http://listmanager.unipi.it/pipermail/ntop/2002- February/001094.html) in the near future... ntop runned like this : ntop -i eth0,eth1,eth2 -w 8080 - P /tmp' eth0 and eth1 were not connected to the network. --------- Hard : old IBM Pentium II-300 MHz 160 Mo RAM 1x 3COM 509B (eth0) RJ-45 socket 2x 3COM 905C-TX (eth1 & eth2) RJ-45 socket OS : Linux-Mandrake 8.1 - Kernel 2.4.8-26mdk ntop version : 2002/02/12. (compiled from the source). No extra plugin added Misc. : glibc v. 2.2.4 gcc v. 2.96 wu-ftp, telnet, mysql, postgres running monitoring a LAN, 100 machines approx. Light traffic. Thanks ! Pierre-Loic PS : Raul Alonso Alvarez, thanks a lot for your useful answer ! -------------- Profitez de l'offre sp�ciale Tiscali Liberty Surf ! 50% de temps en plus pendant 3 mois sur tous les forfaits Internet. http://register.libertysurf.fr/subscribe_fr/signup.php3 _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop-dev
