Brian I need to check this (I see you use a 9k MTU). CAn you please try to debug the core if it happens again?
Thanks Luca On Dec 12, 2011, at 1:19 PM, Brian Behrens wrote: > Luca, > > Looks like I made it two days before a segfault occurred, here is the logs: > > Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop > RUNSTATE: PREINIT(1) > Dec 8 13:14:59 probe ntop[856]: THREADMGMT[t140664941140320]: ntop > RUNSTATE: INIT(2) > Dec 8 13:14:59 probe ntop[856]: ntop v.4.1.2 (64 bit) > Dec 8 13:14:59 probe ntop[856]: Configured on Dec 8 2011 13:13:05, built > on Dec 8 2011 13:13:50. > Dec 8 13:14:59 probe ntop[856]: Copyright 1998-2011 by Luca Deri > <[email protected]> > Dec 8 13:14:59 probe ntop[856]: Get the freshest ntop from > http://www.ntop.org/ > Dec 8 13:14:59 probe ntop[856]: NOTE: ntop is running from '/usr/bin' > Dec 8 13:14:59 probe ntop[856]: NOTE: (but see warning on man page for the > --instance parameter) > Dec 8 13:14:59 probe ntop[856]: NOTE: ntop libraries are in '/usr/lib64' > Dec 8 13:14:59 probe ntop[856]: Initializing ntop > Dec 8 13:14:59 probe kernel: [ 14.553106] (C) 2004-11 L.Deri > <[email protected]> > Dec 8 13:14:59 probe ntop[856]: Checking eth1 for additional devices > Dec 8 13:14:59 probe ntop[856]: Resetting traffic statistics for device > Server > Dec 8 13:14:59 probe ntop[856]: Initializing device eth1 (0) > Dec 8 13:14:59 probe ntop[856]: DLT: Device 0 [eth1] is 1, mtu 9000, > header 14 > Dec 8 13:14:59 probe ntop[856]: Initialized events [mask: 0][path: ] > Dec 8 13:14:59 probe ntop[856]: Initializing gdbm databases > Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading MAC address table. > Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file > Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file > '/etc/ntop/specialMAC.txt.gz' > Dec 8 13:14:59 probe ntop[856]: VENDOR: ...found 61 lines > Dec 8 13:14:59 probe ntop[856]: VENDOR: ...loaded 59 records > Dec 8 13:14:59 probe ntop[856]: VENDOR: Checking for MAC address table file > Dec 8 13:14:59 probe ntop[856]: VENDOR: Loading newer file > '/etc/ntop/oui.txt.gz' > Dec 8 13:15:00 probe ntop[856]: VENDOR: ...found 79133 lines > Dec 8 13:15:00 probe ntop[856]: VENDOR: ...loaded 12449 records > Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading signature file > Dec 8 13:15:00 probe ntop[856]: Fingerprint: Checking for Fingerprint > file... file > Dec 8 13:15:00 probe ntop[856]: Fingerprint: Loading file > '/etc/ntop/etter.finger.os.gz' > Dec 8 13:15:00 probe ntop[856]: Fingerprint: ...loaded 1765 records > Dec 8 13:15:00 probe ntop[856]: Initializing external applications > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: Started > thread for fingerprinting > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: > Fingerprint scan thread starting [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Started > thread for idle hosts detection > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle > host scan thread starting [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): > Started thread for DNS address resolution > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664834225920]: DNSAR(1): > Address resolution thread running > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): > Address resolution thread running > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664825833216]: DNSAR(2): > Started thread for DNS address resolution > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): > Started thread for DNS address resolution > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664608126720]: DNSAR(3): > Address resolution thread running > Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) > Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded config file > /etc/ntop/GeoLiteCity.dat > Dec 8 13:15:00 probe ntop[856]: GeoIP: loaded ASN config file > /etc/ntop/GeoIPASNum.dat > Dec 8 13:15:00 probe ntop[856]: SSL: Initializing... > Dec 8 13:15:00 probe ntop[856]: SSL_PRNG: Automatically initialized! > Dec 8 13:15:00 probe ntop[856]: SSL initialized successfully > Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing web server > Dec 8 13:15:00 probe ntop[856]: INITWEB: Initializing TCP/IP socket > connections for web server > Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized socket, port 3000, > address (any) > Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTP connections on > port 3000 > Dec 8 13:15:00 probe ntop[856]: INITWEB: Initialized ssl socket, port > 3001, address (any) > Dec 8 13:15:00 probe ntop[856]: INITWEB: Waiting for HTTPS (SSL) > connections on port 3001 > Dec 8 13:15:00 probe ntop[856]: INITWEB: Starting web server > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: INITWEB: > Started thread for web server > Dec 8 13:15:00 probe ntop[856]: Listening on [Server] > Dec 8 13:15:00 probe ntop[856]: Loading Plugins > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server > connection thread starting [p856] > Dec 8 13:15:00 probe ntop[856]: Note: SIGPIPE handler set (ignore) > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664599734016]: WEB: Server > connection thread running [p856] > Dec 8 13:15:00 probe ntop[856]: WEB: ntop's web server is now processing > requests > Dec 8 13:15:00 probe ntop[856]: Searching for plugins in > /usr/lib64/ntop/plugins > Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to Round-Robin Database. (C) > 2002-11 by Luca Deri. > Dec 8 13:15:00 probe ntop[856]: LASTSEEN: Welcome to Host Last Seen. (C) > 1999 by Andrea Marangoni > Dec 8 13:15:00 probe ntop[856]: NETFLOW: Welcome to NetFlow.(C) 2002-11 by > Luca Deri > Dec 8 13:15:00 probe ntop[856]: CPACKET: Welcome to cPacket.(C) 2008 by > Luca Deri > Dec 8 13:15:00 probe ntop[856]: PDA: Welcome to PDA. (C) 2001-2004 by > L.Deri and W.Brock > Dec 8 13:15:00 probe ntop[856]: SFLOW: Welcome to sFlow.(C) 2002-11 by > Luca Deri > Dec 8 13:15:00 probe ntop[856]: ICMP: Welcome to ICMPWatch. (C) 1999-2005 > by Luca Deri > Dec 8 13:15:00 probe ntop[856]: Calling plugin start functions (if any) > Dec 8 13:15:00 probe ntop[856]: RRD: Welcome to the RRD plugin > Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new directories is 0700 > Dec 8 13:15:00 probe ntop[856]: RRD: Mask for new files is 0066 > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data > collection thread starting [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT: RRD: Started thread > (t140664582813440) for data collection > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop > RUNSTATE: INITNONROOT(3) > Dec 8 13:15:00 probe ntop[856]: Now running as requested user 'ntop' > (489:486) > Dec 8 13:15:00 probe ntop[856]: Note: Reporting device initally set to 0 > [Server] (merged) > Dec 8 13:15:00 probe ntop[856]: INIT: Created pid file > (/var/nst/ntop/ntop.pid) > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664941140320]: ntop > RUNSTATE: RUN(4) > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(1): > Started thread for network packet sniffing [eth1] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664851011328]: SFP: > Fingerprint scan thread running [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664842618624]: SIH: Idle > host scan thread running [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): > pcapDispatch thread starting [p856] > Dec 8 13:15:00 probe ntop[856]: THREADMGMT[t140664574420736]: NPS(Server): > pcapDispatch thread running [p856] > Dec 8 13:15:05 probe ntop[856]: CHKVER: Checking current ntop version > atversion.ntop.org/version.xml > Dec 8 13:15:05 probe ntop[856]: CHKVER: Version file is from > 'version.ntop.org' > Dec 8 13:15:05 probe ntop[856]: CHKVER: as of date is '2011-08-15T11:00:47' > Dec 8 13:15:05 probe ntop[856]: CHKVER: This version of ntop is a new > DEVELOPMENT version - Be careful! > Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: Started > thread for throughput data collection > Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: > Throughput data collection: Thread starting [p856] > Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664582813440]: RRD: Data > collection thread running [p856] > Dec 8 13:15:10 probe ntop[856]: THREADMGMT[t140664563902208]: RRD: > Throughput data collection: Thread running [p856] > Dec 8 17:12:07 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 8 20:26:11 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 9 01:31:17 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 9 07:12:23 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 9 09:19:27 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 9 15:06:38 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] > Dec 9 19:41:44 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 10 00:41:50 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 10 00:55:50 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1421] > Dec 10 01:25:50 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] > Dec 10 07:47:57 probe ntop[856]: **ERROR** Bad magic number > (expected=1968/real=1290) [deviceId=0] lookupHost()[pbuf.c:1422] > Dec 10 07:51:31 probe kernel: [153334.395431] ntop[939]: segfault at 8 ip > 00007fef1bfe4401 sp 00007fef05fd7510 error 4 in > libntop-4.1.2.so[7fef1bfbe000+75000] > > Any ideas? > > --Brian > _______________________________________________ > Ntop-misc mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop-misc
_______________________________________________ Ntop-misc mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop-misc
