Luca, Looks like I made it two days before a segfault occurred, here is the logs:
Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: PREINIT(1) Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: INIT(2) Dec 8 13:14:59 probe ntop[856]: ntop v.4.1.2 (64 bit) Dec 8 13:14:59 probe ntop[856]: Configured on Dec 8 2011 13:13:05, built on Dec 8 2011 13:13:50. Dec 8 13:14:59 probe ntop[856]: Copyright 1998-2011 by Luca Deri <[email protected]> Dec 8 13:14:59 probe ntop[856]: Get the freshest ntop from http://www.ntop.org/ Dec 8 13:14:59 probe ntop[856]: NOTE: ntop is running from '/usr/bin' Dec 8 13:14:59 probe ntop[856]: NOTE: (but see warning on man page for the --instance parameter) Dec 8 13:14:59 probe ntop[856]: NOTE: ntop libraries are in '/usr/lib64' Dec 8 13:14:59 probe ntop[856]: Initializing ntop Dec 8 13:14:59 probe kernel: [ 14.553106] (C) 2004-11 L.Deri <[email protected]> Dec 8 13:14:59 probe ntop[856]: Checking eth1 for additional devices Dec 8 13:14:59 probe ntop[856]: Resetting traffic statistics for device Server Dec 8 13:14:59 probe ntop[856]: Initializing device eth1 (0) Dec 8 13:14:59 probe ntop[856]: DLT: Device 0 [eth1] is 1, mtu 9000, header 14 Dec 8 13:14:59 probe ntop[856]: Initialized events [mask: 0][path: ] Dec 8 13:14:59 probe ntop[856]: Initializing gdbm databases Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading MAC address table. Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file '/etc/ntop/specialMAC.txt.gz' Dec 8 13:14:59 probe ntop[856]: VENDOR: ...found 61 lines Dec 8 13:14:59 probe ntop[856]: VENDOR: ...loaded 59 records Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file '/etc/ntop/oui.txt.gz' Dec 8 13:15:00 probe ntop[856]: VENDOR: ...found 79133 lines Dec 8 13:15:00 probe ntop[856]: VENDOR: ...loaded 12449 records Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading signature file Dec 8 13:15:00 probe ntop[856]: Fingerprint: Checking for Fingerprint file... file Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading file '/etc/ntop/etter.finger.os.gz' Dec 8 13:15:00 probe ntop[856]: Fingerprint: ...loaded 1765 records Dec 8 13:15:00 probe ntop[856]: Initializing external applications Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Started thread for fingerprinting Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Fingerprint scan thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Started thread for idle hosts detection Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle host scan thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): Started thread for DNS address resolution Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): Address resolution thread running Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded config file /etc/ntop/GeoLiteCity.dat Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded ASN config file /etc/ntop/GeoIPASNum.dat Dec 8 13:15:00 probe ntop[856]: SSL: Initializing... Dec 8 13:15:00 probe ntop[856]: SSL_PRNG: Automatically initialized! Dec 8 13:15:00 probe ntop[856]: SSL initialized successfully Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing web server Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing TCP/IP socket connections for web server Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized socket, port 3000, address (any) Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTP connections on port 3000 Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized ssl socket, port 3001, address (any) Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTPS (SSL) connections on port 3001 Dec 8 13:15:00 probe ntop[856]: INITWEB: Starting web server Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: INITWEB: Started thread for web server Dec 8 13:15:00 probe ntop[856]: Listening on [Server] Dec 8 13:15:00 probe ntop[856]: Loading Plugins Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server connection thread starting [p856] Dec 8 13:15:00 probe ntop[856]: Note: SIGPIPE handler set (ignore) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server connection thread running [p856] Dec 8 13:15:00 probe ntop[856]: WEB: ntop's web server is now processing requests Dec 8 13:15:00 probe ntop[856]: Searching for plugins in /usr/lib64/ntop/plugins Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to Round-Robin Database. (C) 2002-11 by Luca Deri. Dec 8 13:15:00 probe ntop[856]: LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni Dec 8 13:15:00 probe ntop[856]: NETFLOW: Welcome to NetFlow.(C) 2002-11 by Luca Deri Dec 8 13:15:00 probe ntop[856]: CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri Dec 8 13:15:00 probe ntop[856]: PDA: Welcome to PDA. (C) 2001-2004 by L.Deri and W.Brock Dec 8 13:15:00 probe ntop[856]: SFLOW: Welcome to sFlow.(C) 2002-11 by Luca Deri Dec 8 13:15:00 probe ntop[856]: ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to the RRD plugin Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new directories is 0700 Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new files is 0066 Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data collection thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT: RRD: Started thread (t140664582813440) for data collection Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: INITNONROOT(3) Dec 8 13:15:00 probe ntop[856]: Now running as requested user 'ntop' (489:486) Dec 8 13:15:00 probe ntop[856]: Note: Reporting device initally set to 0 [Server] (merged) Dec 8 13:15:00 probe ntop[856]: INIT: Created pid file (/var/nst/ntop/ntop.pid) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop RUNSTATE: RUN(4) Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(1): Started thread for network packet sniffing [eth1] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Fingerprint scan thread running [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle host scan thread running [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): pcapDispatch thread starting [p856] Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): pcapDispatch thread running [p856] Dec 8 13:15:05 probe ntop[856]: CHKVER: Checking current ntop version at version.ntop.org/version.xml Dec 8 13:15:05 probe ntop[856]: CHKVER: Version file is from 'version.ntop.org' Dec 8 13:15:05 probe ntop[856]: CHKVER: as of date is '2011-08-15T11:00:47' Dec 8 13:15:05 probe ntop[856]: CHKVER: This version of ntop is a new DEVELOPMENT version - Be careful! Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Started thread for throughput data collection Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Throughput data collection: Thread starting [p856] Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data collection thread running [p856] Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Throughput data collection: Thread running [p856] Dec 8 17:12:07 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 8 20:26:11 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 01:31:17 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 07:12:23 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 09:19:27 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 9 15:06:38 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 9 19:41:44 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 00:41:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 00:55:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] Dec 10 01:25:50 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 10 07:47:57 probe ntop[856]: **ERROR** Bad magic number (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] Dec 10 07:51:31 probe kernel: [153334.395431] ntop[939]: segfault at 8 ip 00007fef1bfe4401 sp 00007fef05fd7510 error 4 in libntop-4.1.2.so[7fef1bfbe000+75000] Any ideas? --Brian
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
