The message is a straight pass through from pcap_open_offline(), which would seem to me to indicate that there is no file named 'dump' in directory /usr/local/share/ntop/log/. You can see it in the open() call too!
All the other stuff seems irrelevant. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of John Wilson Sent: Friday, May 06, 2005 11:43 AM To: [EMAIL PROTECTED] Subject: [Ntop-dev] Problem with pcap call (**FATAL_ERROR**pcap_open_offline() ) ? Hi, trying very unsuccessfully to get this command and option, to operate ( SPARC Solaris v2.8). Ending portion of truss "ntop -i hme0 -f /usr/local/share/ntop/log/dump -u ntop" output ============================================================================ =========== "time() = 1115321239 open("/usr/local/share/ntop/log/dump", O_RDONLY) = 4 fstat64(4, 0xFFBEF338) = 0 brk(0x001016C8) = 0 brk(0x001036C8) = 0 ioctl(4, TCGETA, 0xFFBEF2C4) Err#25 ENOTTY read(4, 0x0010091C, 8192) = 0 llseek(4, 0, SEEK_CUR) = 0 close(4) = 0 time() = 1115321239 Thu May 05 15:27:19 2005 **FATAL_ERROR** pcap_open_offline(): 'fread: No such file or directory' write(1, " T h u M a y 0 5 1".., 98) = 98 llseek(0, 0, SEEK_CUR) = 220237 _exit(-1)" Here is command & normal output =============================== # ntop -i hme0 -f /usr/local/share/ntop/log/dump -u ntop Thu May 05 15:28:02 2005 ntop v.3.0 SourceForge .tgz MT (SSL) Thu May 05 15:28:02 2005 Configured on Jun 13 2004 5:52:30, built on Jun 13 2004 06:56:02. Thu May 05 15:28:02 2005 Copyright 1998-2004 by Luca Deri <[EMAIL PROTECTED]> Thu May 05 15:28:02 2005 Get the freshest ntop from http://www.ntop.org/ Thu May 05 15:28:02 2005 Initializing ntop Thu May 05 15:28:02 2005 Creating dummy interface, 'none' Thu May 05 15:28:02 2005 **FATAL_ERROR** pcap_open_offline(): 'fread: No such file or directory' What libpcap is installed ? --------------------------- libpcap3264-0.8.3-sol8-sparc-local Where is pcap lib ? ------------------- # find . -name pcap* -print ./usr/local/include/net/pcap-bpf.h ./usr/local/include/net/pcap-namedb.h ./usr/local/include/net/pcap.h ./usr/local/include/pcap-bpf.h ./usr/local/include/pcap-namedb.h ./usr/local/include/pcap.h where is the routine called ? ----------------------------- # cd /usr/local/include # grep offline * pcap.h:pcap_t *pcap_open_offline(const char *, char *); # cd /usr/local/include/net # grep offline * pcap.h:pcap_t *pcap_open_offline(const char *, char *); What is our Lib Path - Does it include them ? --------------------------------------------- # crle Configuration file [version 4]: /var/ld/ld.config Default Library Path (ELF): /usr/lib:/usr/local/lib:/usr/local/include:/usr/local/share:/usr/loca l/include/net Trusted Directories (ELF): /usr/lib/secure (system default) Are the permissions set ? ------------------------- /usr/local/share/ntop -rw-r--r-- 1 ntop ntop 339964 May 5 12:59 addressQueue.db -rw-r--r-- 1 ntop ntop 15073280 May 5 12:59 dnsCache.db drwxr-xr-x 3 ntop ntop 2560 May 3 15:15 html drw-rw-rw- 2 ntop ntop 512 May 5 15:14 log -rw-r--r-- 1 ntop ntop 24576 May 3 16:09 LsWatch.db -rw-r--r-- 1 ntop ntop 1090128 May 3 16:09 macPrefix.db -rw-r--r-- 1 ntop ntop 4 May 3 16:09 ntop.pid -rw-r--r-- 1 ntop ntop 24751 May 3 16:09 ntop_pw.db -rw-r--r-- 1 ntop ntop 24858 May 3 16:09 prefsCache.db drwx------ 5 ntop ntop 512 Apr 28 16:24 rrd # ls -l log -rw-rw-rw- 1 root other 0 May 5 15:14 dump Thanks, John Wilson Descartes Systems Group _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev _______________________________________________ Ntop-dev mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
