Definitely a problem here. I'm on RHEL 5; myhostname 2.6.18-128.1.16.el5 Ntop process "running" - not doing anything. http server unresponsive, netflow "ports" (udp sockets) RCVQ maxed out.
I'll run in gdb - but any ideas would be great! G ________________________________ From: Gary Gatten Sent: Tuesday, May 31, 2011 11:00 AM To: '[email protected]' Subject: 4.0.3 "crashes" with netflow Hello, I'm having issues with 4.0.3 and netflow. My previous version (3.4-pre) worked ok. I've tweaked some stuff in globals-defines.h, so MAYBE that's causing it. But, I just built an instance with VERY minor tweaks with the same (similar) results. I'll build one with zero tweaks and see what happens. Some symptoms: With this version I had a tweak for a catching silent netflow crashes enabled. 2011-05-27T17:22:27.382040-05:00 monpapp1 ntop[16093]: RRD: Cycle 0 ended, 3132 RRDs updated, 0.268 seconds 2011-05-27T17:22:39.373225-05:00 monpapp1 ntop[16093]: **FATAL_ERROR** NETFLOW: caught signal 13 SIGPIPE 2011-05-27T17:22:39.373305-05:00 monpapp1 ntop[16093]: **FATAL_ERROR** NETFLOW: caught signal 2 SIGINT 2011-05-27T17:22:39.373696-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: backtrace is: 2011-05-27T17:22:39.373736-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 1. [0xf81420] 2011-05-27T17:22:39.373756-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 2. /ntop-403/lib/libntop-4.0.3.so(traceEvent+0x41) [0x1dc7c1] 2011-05-27T17:22:39.373777-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 3. /ntop-403/lib/ntop/plugins/netflowPlugin.so(netflowcleanup+0x144) [0x667b74] 2011-05-27T17:22:39.373796-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 4. [0xf81420] 2011-05-27T17:22:39.373814-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 5. /lib/libc.so.6 [0x9f20f1] 2011-05-27T17:22:39.373833-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 6. /lib/libc.so.6(cfree+0x90) [0x9f5bc0] 2011-05-27T17:22:39.373852-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 7. /ntop-403/lib/libntop-4.0.3.so(ntop_safefree+0x2c) [0x1b1cac] 2011-05-27T17:22:39.373871-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 8. /ntop-403/lib/libntop-4.0.3.so(dequeueAddress+0x4aa) [0x1a55fa] 2011-05-27T17:22:39.373890-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 9. /lib/libpthread.so.0 [0xb0349b] 2011-05-27T17:22:39.373931-05:00 monpapp1 ntop[16093]: **ERROR** NETFLOW: BACKTRACE: 10. /lib/libc.so.6(clone+0x5e) [0xa5a42e] 2011-05-27T17:22:39.373951-05:00 monpapp1 ntop[16093]: **FATAL_ERROR** NETFLOW: ntop shutting down... This is with very minor tweaks, most notably I increased netflow probe count to 40 as I have several netflow interfaces that receive flows from 35+ devices. Ps and top both show the process running: root 2095 1 9 10:24 ? 00:03:11 ./ntop @./ntop-FieldInet.conf But, not taking any cpu tim and the udp receive queues are maxed out and holding. The flow rate from these exporters is low... Also to note, I was using my prefsCache and rrds from my old version. I will build 4.0.3 with zero tweaks and a new directory structure and gradually add things and see what happens. Any other idea's? G <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
