Do all the threads start and then stay running, or does something die right away? Perhaps start with '-t 5' and see if anything interesting gets logged.
G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Rafael Sarres de Almeida Sent: Wednesday, August 18, 2010 4:44 PM To: [email protected] Subject: [Ntop] RES: Ntop processing only one packet Hi; Just to add some info, I discovered in the info.html that all packets are being queued by ntop after the first being processed. Does anyone knows why? Packets Received 1,895 Processed Immediately 1 (0.1 %) Queued 1,894 (99.9 %) Current Queue (none) 0 Maximum Queue (none) 0 (Limit 2048) Current Queue (sFlow-device.2) 1894 Maximum Queue (sFlow-device.2) 1894 (Limit 2048) [cid:[email protected]] Rafael Sarres de Almeida Analista Departamento de Tecnologia da Informação Divisão de Administração de Redes Tel.:+55 (61) 3414-4148 E-mail: [email protected] De: [email protected] [mailto:[email protected]] Em nome de Rafael Sarres de Almeida Enviada em: quarta-feira, 18 de agosto de 2010 15:34 Para: [email protected] Assunto: [Ntop] Ntop processing only one packet Hi all; I have a problem on my fresh ntop 4.0 installation: Only one packet is processed. I am using sFlow plugin (no interface capture: "-i none" option) and it reports to be receiving a lot of sFlow packets, ntop receives them but only processes one packet. I tried running ntop with root user, --disable-stopcap, and other options with no luck. I did not see any problem in the ntop log, just the plugin Lastseen that fails to start with this message: LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni Wed Aug 18 15:27:19 2010 **ERROR** LASTSEEN: Unable to open LsWatch database ((null)/LsWatch.db)- the plugin will be disabled Wed Aug 18 15:27:19 2010 **WARNING** Plugin 'lastSeenPlugin.so' discarded: compiled for a different ntop version Wed Aug 18 15:27:19 2010 **WARNING** Expected ntop version '3.3.10', actual plugin ntop version '4.0'. Some data: Ntop statistics for the sFlow device: Traffic Report for 'sFlow-device.2' [switch] Packets Dropped (ntop) 0.0% 0 Total Received (ntop) 1,606 Total Packets Processed 1 Unicast 100.0% 1 Broadcast 0.0% 0 Multicast 0.0% 0 Here are the statistics from sFlow plugin: Flow Statistics Received Flows Flow Senders 172.17.205.39 [2,362 pkts] Number of sFlow Packets Rcvd 2,362 Number of sFlow Packets with Bad Version 0 Number of sFlow Packets Processed 2,362 Number of v2 Flows Rcvd 0 Number of v4 Flows Rcvd 0 Number of v5 Flows Rcvd 2,362 Discarded Flows Number of Flows with Bad Data 0 Total Number of Flows Processed 0 Flow Analisys Number of sFlow Samples Rcvd 1,615 Number of sFlow Counter Updates Rcvd 1,734 Any help is greatly appreciated. Thanks. [cid:[email protected]] Rafael Sarres de Almeida Analista Departamento de Tecnologia da Informação Divisão de Administração de Redes Tel.:+55 (61) 3414-4148 E-mail: [email protected] <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
<<inline: image001.gif>>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
