CLI options: "ntop /c"
Plugins:
Enabled Netflow plugin
Set interface name to "Core1"
Set Local Collector UDP Port to 8991
Virtual NetFlow Interface Network Address: 10.0.0.0/255.0.0.0 (I also
tried just 10.128.1.0/255.255.255.0 with same error)
Enable Session Handling: Yes
Save Flows into SQL DB: Yes
Database is configured properly and it logs fine into it.. Logging
also stops when the error i mentioned is recieved
On 6/25/07, Luca Deri <[EMAIL PROTECTED]> wrote:
Martin
how did you configure ntop (CLI options + plugins)?
Luca
Martin W Jørgensen wrote:
> Hi
>
> I compiled NTOP for Windows, but i have some problems with the Netflow
> plugin.
> I tried to enable the HASH_DEBUG to see whats wrong, but i have no
> idea whats causing it.
> After #626 NTOP doesn't respond anymore. (webserver is dead too)
> Any ideas whats wrong?
>
> Best Regards,
> Martin
>
>
> Message log with HASH_DEBUG enabled...
> 06/25/07 09:31:53 HASH_DEBUG: Adding /212.97.206.162
> [idx=26209][device=1][actu
> alHashSize=32768][#hosts=620]
> 06/25/07 09:31:53 HASH_DEBUG: Adding /62.199.234.12
> [idx=6019][device=1][actual
> HashSize=32768][#hosts=621]
> 06/25/07 09:31:53 HASH_DEBUG: Adding /193.124.83.69
> [idx=20925][device=1][actua
> lHashSize=32768][#hosts=622]
> 06/25/07 09:31:54 HASH_DEBUG: Adding /10.8.15.157
> [idx=7053][device=1][actualHa
> shSize=32768][#hosts=623]
> 06/25/07 09:31:54 HASH_DEBUG: Adding /212.23.32.66
> [idx=2156][device=1][actualH
> ashSize=32768][#hosts=624]
> 06/25/07 09:31:54 HASH_DEBUG: Adding /193.50.53.3
> [idx=14183][device=1][actualH
> ashSize=32768][#hosts=625]
> 06/25/07 09:31:54 HASH_DEBUG: Adding /10.136.46.15
> [idx=15135][device=1][actual
> HashSize=32768][#hosts=626]
> 06/25/07 09:32:12 **WARNING** Unlock failed for 0x523C
> [c:\ntop\src\source\ntop
> -src\util.c:2279] (LastError=288)
>
>
>
>
> Message log without HASH_DEBUG enabled:
> 06/25/07 09:39:05 Calling plugin start functions (if any)
> 06/25/07 09:39:05 NETFLOW: Welcome to the netFlow plugin
> 06/25/07 09:39:05 NETFLOW: initializing '2' devices
> 06/25/07 09:39:05 NETFLOW: createNetFlowDevice(2)
> 06/25/07 09:39:05 Creating dummy interface, 'NetFlow-device.2'
> 06/25/07 09:39:05 NETFLOW: initializing deviceId=1
> 06/25/07 09:39:05 NETFLOW: White list initialized to ''
> 06/25/07 09:39:05 NETFLOW: Black list initialized to ''
> 06/25/07 09:39:05 NETFLOW: Created a UDP socket (132608)
> 06/25/07 09:39:05 NETFLOW: Collector listening on port 8991
> 06/25/07 09:39:05 THREADMGMT[t132620]: NETFLOW: Started thread for
> receiving fl
> ows on port 8991
> 06/25/07 09:39:05 Initializing device NetFlow-device.2 (1)
> 06/25/07 09:39:05 THREADMGMT[t2272]: NETFLOW: thread starting [p6068]
> 06/25/07 09:39:05 NETFLOW: createNetFlowDevice created device 1
> 06/25/07 09:39:05 RRD: Welcome to the RRD plugin
> 06/25/07 09:39:05 RRD_DEBUG: Parameters:
> 06/25/07 09:39:05 RRD_DEBUG: dumpInterval 300 seconds
> 06/25/07 09:39:05 RRD_DEBUG: dumpShortInterval 10 seconds
> 06/25/07 09:39:05 RRD_DEBUG: dumpHours 72 hours by 300 seconds
> 06/25/07 09:39:05 RRD_DEBUG: dumpDays 90 days by hour
> 06/25/07 09:39:05 RRD_DEBUG: dumpMonths 36 months by day
> 06/25/07 09:39:05 RRD_DEBUG: dumpDomains no
> 06/25/07 09:39:05 RRD_DEBUG: dumpFlows no
> 06/25/07 09:39:05 RRD_DEBUG: dumpHosts no
> 06/25/07 09:39:05 RRD_DEBUG: dumpInterfaces yes
> 06/25/07 09:39:05 RRD_DEBUG: dumpASs yes
> 06/25/07 09:39:05 RRD_DEBUG: dumpMatrix no
> 06/25/07 09:39:05 RRD_DEBUG: dumpDetail high
> 06/25/07 09:39:05 RRD_DEBUG: hostsFilter
> 06/25/07 09:39:05 RRD_DEBUG: rrdPath
> c:\ntop\src\ntopWin32\Debug\146507011\
> rrd
> 06/25/07 09:39:05 THREADMGMT: RRD: Started thread (t132648) for data
> collection
>
> 06/25/07 09:39:05 THREADMGMT[t5172]: RRD: Data collection thread
> starting [p606
> 8]
> 06/25/07 09:39:05 Note: Reporting device initally set to 0 [Broadcom
> NetXtreme
> Gigabit Ethernet Driver_0]
> 06/25/07 09:39:05 THREADMGMT[t4764]: ntop RUNSTATE: RUN(4)
> 06/25/07 09:39:05 THREADMGMT[t132656]: NPS(1): Started thread for
> network packe
> t sniffing [_Device_NPF_{D702740D-ED66-49A7-9826-0859534A0C3F}]
> 06/25/07 09:39:05 THREADMGMT[t3936]: NPS(Broadcom NetXtreme Gigabit
> Ethernet Dr
> iver_0): pcapDispatch thread starting [p6068]
> 06/25/07 09:39:05 THREADMGMT[t3936]: NPS(Broadcom NetXtreme Gigabit
> Ethernet Dr
> iver_0): pcapDispatch thread running [p6068]
> 06/25/07 09:39:05 THREADMGMT[t3016]: SFP: Fingerprint scan thread
> running [p606
> 8]
> 06/25/07 09:39:05 THREADMGMT[t4768]: SIH: Idle host scan thread
> running [p6068]
>
> 06/25/07 09:39:05 THREADMGMT[t2272]: NETFLOW: (port 8991) thread
> running [p6068
> ]
> 06/25/07 09:39:15 THREADMGMT[t260]: RRD: Throughput data collection:
> Thread sta
> rting [p6068]
> 06/25/07 09:39:15 THREADMGMT[t132680]: RRD: Started thread for
> throughput data
> collection
> 06/25/07 09:39:15 THREADMGMT[t260]: RRD: Throughput data collection:
> Thread run
> ning [p6068]
> 06/25/07 09:39:15 THREADMGMT[t5172]: RRD: Data collection thread
> running [p6068
> ]
> 06/25/07 09:41:19 **WARNING** Unlock failed for 0x5144
> [c:\ntop\src\source\ntop
> -src\util.c:2279] (LastError=288)
>
>
>
> Call stack:
>> ntop.exe!_releaseMutex(pthreadMutex * mutexId=0x009faff8, char *
> fileName=0x007b43d4, int fileLine=2279) Line 350 C
> ntop.exe!_unlockHostsHashMutex(hostTraffic * host=0x053f3ce8, char *
> file=0x0078b230, int line=1189) Line 2279 + 0x26 bytes C
> ntop.exe!_lookupHost(hostAddr * hostIpAddress=0x0537d428, unsigned
> char * ether_addr=0x0537dd18, unsigned short vlanId=65535, unsigned
> char checkForMultihoming=' ', unsigned char forceUsingIPaddress=0, int
> actualDeviceId=0, char * file=0x007969e0, int line=1212) Line 1189 +
> 0x3d bytes C
> ntop.exe!processIpPkt(const unsigned char * bp=0x0537de22, const
> pcap_pkthdr * h=0x01d76178, unsigned int length=1470, unsigned char *
> ether_src=0x0537dd1e, unsigned char * ether_dst=0x0537dd18, int
> actualDeviceId=0, int vlanId=65535) Line 1212 + 0x2d bytes C
> ntop.exe!processPacket(unsigned char * _deviceId=0x00000000, const
> pcap_pkthdr * h=0x01d76178, const unsigned char * p=0x0537de14) Line
> 3676 + 0x31 bytes C
> ntop.exe!queuePacket(unsigned char * _deviceId=0x00000000, const
> pcap_pkthdr * h=0x01d76178, const unsigned char * p=0x01d7618c) Line
> 2456 + 0x14 bytes C
> wpcap.dll!1000a79a()
> [Frames below may be incorrect and/or missing, no symbols loaded for
> wpcap.dll]
> wpcap.dll!10008491()
> ntop.exe!pcapDispatch(void * _i=0x00000000) Line 92 + 0x24
> bytes C
> kernel32.dll!7c80b50b()
> kernel32.dll!7c8399f3()
> _______________________________________________
> Ntop-dev mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
--
Luca Deri <[EMAIL PROTECTED]> http://luca.ntop.org/
skype://lucaderi/
Don't be encumbered by past history. Go off and do
something wonderful - Robert Noyce
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
_______________________________________________
Ntop-dev mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
