Hi All, I have ntop setup recently in ubuntu 10.04 server. After running 3 days, I got some logs from ntop:
Mon Jun 28 08:32:57 2010 **ERROR** NULL host detected Mon Jun 28 08:33:23 2010 **ERROR** NULL host detected Mon Jun 28 08:34:00 2010 **ERROR** NULL host detected Mon Jun 28 08:35:21 2010 **ERROR** NULL host detected Mon Jun 28 08:36:44 2010 **ERROR** mVLAN: Host (identical IP/MAC) found on multiple VLANs Mon Jun 28 08:36:44 2010 mVLAN: ntop continues but will consolidate and thus probably overcount this traffic Mon Jun 28 08:38:54 2010 **ERROR** NULL host detected Mon Jun 28 08:40:53 2010 EPIPE during sending of page to web client Mon Jun 28 08:40:58 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:01 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:10 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:14 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:17 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:21 2010 EPIPE during sending of page to web client Mon Jun 28 08:43:16 2010 **ERROR** NULL host detected Mon Jun 28 08:45:11 2010 **ERROR** NULL host detected Mon Jun 28 08:45:35 2010 **ERROR** NULL host detected Mon Jun 28 08:48:13 2010 **ERROR** NULL host detected Here, I think I have couple issues with ntop: 1. NULL host detected. What does it mean? 2. mVLAN issue. That means ntop find the same host in different vlans? I checked my log, I did change the SPAN in switch at that time. I guess that's why I have this message in the host. 3. EPIPE during sending of page to web client. This means the ntop has problem to send the traffic to the web client (That's me!) ? Do I need do something to get rid of "NULL host detected" message? It seems pop up every second. Thanks for your input!! Lou
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
