You have some duplicate args in your conf file, but I doubt that's making any sort of difference - just FYI.
IIRC, 4.0.3 still have a configure option to disable ipv6 - so I'd use that as well as specify ipv4 in the arg list. G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Hart, Michael Sent: Wednesday, June 08, 2011 11:00 AM To: [email protected] Subject: Re: [Ntop] double free or corruption (fasttop) I am running: *flow listener / plugin I will try disabling all name resolution as suggested to see if that make a difference. I will also double check IPv6, but I believe I have that disabled already. Here is some of the pertinent information I sent in earlier. Startup options Command Line Started as.... /usr/local/bin/ntop @/etc/ntop.conf -d -L Resolved to.... /usr/local/bin/ntop --user=ntop --db-file-path=/usr/local/var/ntop --interface=eth1 --use-syslog=daemon --http-server=3000 --local-subnets=10.0.0.0/8,172.16.0.0/12,192.168.0.0/16 --domain=smccd.net --daemon -d -L Networks eth1 Local Network 10.0.90.0/24 NetFlow-device.2 Local Network 10.192.0.0/10 NetFlow-device.3 Local Network 10.128.0.0/10 NetFlow-device.4 Local Network 10.64.0.0/10 NetFlow-device.5 Local Network 10.0.0.0/10 Known Networks 10.0.90.0/24 Server is a Dell 2850 server running CentOS 5.5 x86_64 [root@smc-netflow ~]# uname -a Linux smc-netflow.smccd.net 2.6.18-238.9.1.el5 #1 SMP Tue Apr 12 18:10:13 EDT 2011 x86_64 x86_64 x86_64 GNU/Linux From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Wednesday, June 08, 2011 8:48 AM To: '[email protected]' Subject: Re: [Ntop] double free or corruption (fasttop) If yours is THAT bad, try disabling name resolution all together. And, perhaps ipv6 if you don't need it. FWIW, are you running a *flow listener / plugin, or just libpcap / packet capture? TIA! Gary PS: Luca mentioned he'd try to get to some of these ASAP. He's kinda swamped right now! I'm sure he'd appreciate any patches, as would we all! ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Hart, Michael Sent: Wednesday, June 08, 2011 10:45 AM To: [email protected] Subject: Re: [Ntop] double free or corruption (fasttop) I certainly am. It has ended up being worthless for me to even start NTOP. I posted a message to ntop-devl (thinking that was the place for such a discussion) well over a week ago, but haven't heard a peep about it. mlh From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: Wednesday, June 08, 2011 8:10 AM To: '[email protected]' Subject: [Ntop] double free or corruption (fasttop) I'm getting lots of these - way too many. I'm running in gdb to catch them; 4.0.3 with these args: --ipv4 -n 2 -L -u root -K -b -t 5 --instance Test.Sites -P /usr/local/var/ntop-403/TestSites -o -x 65536 -X 95536 -m {several networks defined here} -i none -w 1.1.2.1:3003 -W 1.1.2.1:3004 Seems to be related to address / name resolution: /ntop-403-mintweaks/lib/libntop-4.0.3.so(dequeueAddress+0x4aa)[0x11d5ea] (gdb) info stack #0 0x00c70402 in __kernel_vsyscall () #1 0x009b1d80 in raise () from /lib/libc.so.6 #2 0x009b3691 in abort () from /lib/libc.so.6 #3 0x009ea24b in __libc_message () from /lib/libc.so.6 #4 0x009f20f1 in _int_free () from /lib/libc.so.6 #5 0x009f5bc0 in free () from /lib/libc.so.6 #6 0x00129c9c in ntop_safefree (ptr=0xaca140, file=0x178e2c "address.c", line=260) at leaks.c:182 #7 0x0011d5ea in dequeueAddress (_i=0x1) at address.c:260 #8 0x00b0349b in start_thread () from /lib/libpthread.so.0 #9 0x00a5a42e in clone () from /lib/libc.so.6 Is anyone else experiencing similar issues? I have 4.1.0 running also, but some features "seem" to be missing from it... G "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
