Hi all please update to 4.0.1 Luca
On Aug 20, 2010, at 7:03 PM, Gary Gatten wrote: > Good catch. Hopefully Luca et al notice this thread and can check it out! > > From: [email protected] <[email protected]> > To: [email protected] <[email protected]> > Sent: Fri Aug 20 10:49:37 2010 > Subject: [Ntop] RES: Ntop processing only one packet > > Well, just to keep everyone posted, and the others that may have the same > problem and may search the list archive sometime in the future, I have > downgraded ntop to 3.3.10, the last stable before 3.4, and everything looks > to be working fine. > Changelog for 3.4 informs: “a partially rewritten ntop processing engine to > address reliability and performance.” Maybe this change in the processing > engine have caused a bug in my setup, as the behavior that I see is that > almost all the packets (besides the first), no matter the source (internal > NIC or flow), is queued and never gets processed. Maybe that new processing > engine is getting stuck somehow. I do not think it is a loop because my CPU > does not get busy, ntop seems to run idle. I will post a bug on ntop-dev > list. > > Thanks for your help. > > <image001.gif> > Rafael Sarres de Almeida > Analista > Departamento de Tecnologia da Informação > Divisão de Administração de Redes > Tel.:+55 (61) 3414-4148 > E-mail: [email protected] > > De: [email protected] > [mailto:[email protected]] Em nome de Gary Gatten > Enviada em: quarta-feira, 18 de agosto de 2010 19:06 > Para: '[email protected]' > Assunto: Re: [Ntop] Ntop processing only one packet > > Do all the threads start and then stay running, or does something die right > away? Perhaps start with ‘–t 5’ and see if anything interesting gets logged. > > G > > > From: [email protected] > [mailto:[email protected]] On Behalf Of Rafael Sarres de > Almeida > Sent: Wednesday, August 18, 2010 4:44 PM > To: [email protected] > Subject: [Ntop] RES: Ntop processing only one packet > > Hi; > Just to add some info, I discovered in the info.html that all packets are > being queued by ntop after the first being processed. Does anyone knows why? > Packets > Received 1,895 > Processed Immediately 1 (0.1 %) > Queued 1,894 (99.9 %) > Current Queue (none) 0 > Maximum Queue (none) 0 (Limit 2048) > Current Queue (sFlow-device.2) 1894 > Maximum Queue (sFlow-device.2) 1894 (Limit 2048) > > <image001.gif> > Rafael Sarres de Almeida > Analista > Departamento de Tecnologia da Informação > Divisão de Administração de Redes > Tel.:+55 (61) 3414-4148 > E-mail: [email protected] > > De: [email protected] > [mailto:[email protected]] Em nome de Rafael Sarres de Almeida > Enviada em: quarta-feira, 18 de agosto de 2010 15:34 > Para: [email protected] > Assunto: [Ntop] Ntop processing only one packet > > Hi all; > I have a problem on my fresh ntop 4.0 installation: Only one packet is > processed. I am using sFlow plugin (no interface capture: “-i none” option) > and it reports to be receiving a lot of sFlow packets, ntop receives them but > only processes one packet. I tried running ntop with root user, > --disable-stopcap, and other options with no luck. I did not see any problem > in the ntop log, just the plugin Lastseen that fails to start with this > message: > LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni > Wed Aug 18 15:27:19 2010 **ERROR** LASTSEEN: Unable to open LsWatch database > ((null)/LsWatch.db)- the plugin will be disabled > Wed Aug 18 15:27:19 2010 **WARNING** Plugin 'lastSeenPlugin.so' discarded: > compiled for a different ntop version > Wed Aug 18 15:27:19 2010 **WARNING** Expected ntop version '3.3.10', actual > plugin ntop version '4.0'. > > Some data: > Ntop statistics for the sFlow device: > Traffic Report for 'sFlow-device.2' [switch] > Packets > Dropped (ntop) 0.0% 0 > Total Received (ntop) 1,606 > Total Packets Processed 1 > Unicast 100.0% 1 > Broadcast 0.0% 0 > Multicast 0.0% 0 > > Here are the statistics from sFlow plugin: > Flow Statistics > Received Flows > Flow Senders 172.17.205.39 [2,362 pkts] > > Number of sFlow Packets Rcvd 2,362 > Number of sFlow Packets with Bad Version 0 > Number of sFlow Packets Processed 2,362 > Number of v2 Flows Rcvd 0 > Number of v4 Flows Rcvd 0 > Number of v5 Flows Rcvd 2,362 > > Discarded Flows > Number of Flows with Bad Data 0 > Total Number of Flows Processed 0 > > Flow Analisys > Number of sFlow Samples Rcvd 1,615 > Number of sFlow Counter Updates Rcvd 1,734 > > Any help is greatly appreciated. > Thanks. > > <image001.gif> > Rafael Sarres de Almeida > Analista > Departamento de Tecnologia da Informação > Divisão de Administração de Redes > Tel.:+55 (61) 3414-4148 > E-mail: [email protected] > > "This email is intended to be reviewed by only the intended recipient and may > contain information that is privileged and/or confidential. If you are not > the intended recipient, you are hereby notified that any review, use, > dissemination, disclosure or copying of this email and its attachments, if > any, is strictly prohibited. If you have received this email in error, please > immediately notify the sender by return email and delete this email from your > system." > "This email is intended to be reviewed by only the intended recipient and may > contain information that is privileged and/or confidential. If you are not > the intended recipient, you are hereby notified that any review, use, > dissemination, disclosure or copying of this email and its attachments, if > any, is strictly prohibited. If you have received this email in error, please > immediately notify the sender by return email and delete this email from your > system." _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop --- Keep looking, don't settle - Steve Jobs _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
