Sflow sample on the firewall device is 60 seconds. The current data through the connection is 2 to 3 mbps.
-Paul -----Original Message----- From: [email protected] [mailto:[email protected]] On Behalf Of Rick Jones Sent: Wednesday, June 08, 2011 4:35 PM To: [email protected] Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... On Wed, 2011-06-08 at 16:20 -0700, Paul A. Spagnola wrote: > Now that I have ntop 4.0.3 working and sflow enabled. Can somebody > interpret this info for me. I believe it should show a lot more data > than this. > > Traffic Report for 'sFlow-device.1' [switch] > Packets > Dropped (ntop) 0.0% 0 > Total Received (ntop) 25 > Total Packets Processed 25 > Unicast 100.0% 25 > Broadcast 0.0% 0 > Multicast 0.0% 0 > Shortest 2,084 bytes > Average Size 0 bytes > Longest 3,544 bytes > Size <= 64 bytes 0.0% 0 > 64 < Size <= 128 bytes 0.0% 0 > 128 < Size <= 256 bytes 0.0% 0 > 256 < Size <= 512 bytes 0.0% 0 > 512 < Size <= 1024 bytes 0.0% 0 > 1024 < Size <= 1518 bytes 0.0% 0 > Size > 1518 bytes 100.0% 25 > Packets too long [> 1514] 100.0% 25 > Bad Packets (Checksum) 0.0% 0 When you configured sFlow on your device, what did you use for the flow sampling rate, and what is the actual packet rate through the device? I believe those are (slightly in error given the packet size distribution) sFlow flow sample statistics rather than sFlow counter sample statistics. rick jones > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 4:05 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > I found a solution. There is a mistake in one of the header files. > > http://www.gossamer-threads.com/lists/ntop/dev/25705 > > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Gary Gatten > Sent: Wednesday, June 08, 2011 3:47 PM > To: '[email protected]' > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > As noted, its over my or at least pushing the limits. Centos is "close" > to RedHat, and I didn't have any probs. Perhaps grep your install dir > for that message "trywrlock" and see what it finds. Then maybe try to > "disable" it somehow, ie; if it's 'yes' set to 'no'. > > I'm headn out, good luck! Just be glad your not trying to build on a > slow FBSD system. It took me weeks to get ntop 331 installed! > > ----- Original Message ----- > From: Paul A. Spagnola [mailto:[email protected]] > Sent: Wednesday, June 08, 2011 05:37 PM > To: [email protected] <[email protected]> > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > CentOS 4.7 > Linux IO 2.6.9-78.0.13.plus.c4smp #1 SMP Tue Jan 20 22:12:33 EST 2009 > i686 i686 i386 GNU/Linux > > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Gary Gatten > Sent: Wednesday, June 08, 2011 3:32 PM > To: '[email protected]' > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > What OS and platform? Maybe you can can tweak the make file so it > doesn't try to use that directive? > > ----- Original Message ----- > From: Paul A. Spagnola [mailto:[email protected]] > Sent: Wednesday, June 08, 2011 05:28 PM > To: [email protected] <[email protected]> > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > I think this error has something to do with my problem. > > undefined reference to `pthread_mutex_trywrlock' > > a google search showed some people in china with the same problem when > they compile ntop 4.0.3 as well. No solution though. > > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Gary Gatten > Sent: Wednesday, June 08, 2011 3:23 PM > To: '[email protected]' > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > No. Maybe you have too old (or new) version of geoip? I THOUGHT ntop > fetched and installed that for you... Maybe this has nothing to do > with geoip! > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 5:12 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > I get a lot of > > "Prerequisite <filename> is older than target <filename>." In my make > output. Is that normal? > > -Paul > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 3:04 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > I figured on the geoip issue myself. Autogen.sh works perfectly now. > New problem error during make command. > > globals-core.h:449: warning: declaration of 'hostCreation' shadows a > global declaration > globals-structtypes.h:1143: warning: shadowed declaration is here > /bin/sh ./libtool --mode=link --tag=CC gcc -g -O2 > -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith > -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC > -DPIC -L/usr/local/lib -L/opt/local/lib -o ntop ntop-main.o > ntop-admin.o libntopreport.la libntop.la -lpthread -lcrypt -lc -lssl > -lcrypto -lrrd_th -lgdbm -lz -lGeoIP -lpcap gcc -g -O2 > -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith > -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC > -DPIC -o .libs/ntop ntop-main.o ntop-admin.o -L/usr/local/lib > -L/opt/local/lib ./.libs/libntopreport.so > /downloads/ntop-4.0.3/.libs/libntop.so ./.libs/libntop.so -lpthread > -lcrypt -lc -lssl -lcrypto -lrrd_th /usr/lib/libgdbm.so -lz -lGeoIP > -lpcap -Wl,--rpath -Wl,/usr/local/lib > /downloads/ntop-4.0.3/.libs/libntop.so: undefined reference to > `pthread_mutex_trywrlock' > collect2: ld returned 1 exit status > make[2]: *** [ntop] Error 1 > make[2]: Leaving directory `/downloads/ntop-4.0.3' > make[1]: *** [all-recursive] Error 1 > make[1]: Leaving directory `/downloads/ntop-4.0.3' > make: *** [all] Error 2 > [root@IO ntop-4.0.3]# > > Tried "make install" just to see what would happen: > > Making install in . > make[1]: Entering directory `/downloads/ntop-4.0.3' > /bin/sh ./libtool --mode=link --tag=CC gcc -g -O2 > -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith > -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC > -DPIC -L/usr/local/lib -L/opt/local/lib -o ntop ntop-main.o > ntop-admin.o libntopreport.la libntop.la -lpthread -lcrypt -lc -lssl > -lcrypto -lrrd_th -lgdbm -lz -lGeoIP -lpcap gcc -g -O2 > -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith > -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC > -DPIC -o .libs/ntop ntop-main.o ntop-admin.o -L/usr/local/lib > -L/opt/local/lib ./.libs/libntopreport.so > /downloads/ntop-4.0.3/.libs/libntop.so ./.libs/libntop.so -lpthread > -lcrypt -lc -lssl -lcrypto -lrrd_th /usr/lib/libgdbm.so -lz -lGeoIP > -lpcap -Wl,--rpath -Wl,/usr/local/lib > /downloads/ntop-4.0.3/.libs/libntop.so: undefined reference to > `pthread_mutex_trywrlock' > collect2: ld returned 1 exit status > make[1]: *** [ntop] Error 1 > make[1]: Leaving directory `/downloads/ntop-4.0.3' > make: *** [install-recursive] Error 1 > [root@IO ntop-4.0.3]# > > -Paul > > > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 2:58 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > That worked. Thank you. > > I saw this message at the end of build: > > Removing dups and misplaced entries from LIBS and INCS... > checking for GeoIP_record_by_ipnum in -lGeoIP... no checking for > GeoIP_name_by_ipnum_v6 in -lGeoIP... no Please install GeoIP > (http://www.maxmind.com/) > > Do I really need to install GeoIP? > > > Paul Spagnola > Desktop Support Manager > IT Dept. Douglas County, Oregon > Phone (Desk): (541) 957-4856 > Phone (Office): (541) 440-4330 > Fax: (541) 440-6129 > Email: [email protected] > > > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Gary Gatten > Sent: Wednesday, June 08, 2011 2:52 PM > To: '[email protected]' > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > You *must* specify the location of rrdtool on the autogen.sh command > line, as this message indicates: > > configure: error: Unable to find RRD at /usr/local: please use > > --with-rrd-home=DIR > > So, ./autogen.sh --with-rrd-home=/something. > > I THINK it would be /usr/bin/ in your instance, but I'm not sure. > Usually it's /usr/local/rrdtool-1.2.3 : where 1.2.3 = version. > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 4:48 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > Yes, I am logged in as root. > > Exact command I am running is: "./autogen.sh" > > Python packages installed: > python-elementtree-1.2.6-5.el4.centos > python-sqlite-1.1.7-1.2.1 > python-2.3.4-14.7.el4 > python-urlgrabber-2.9.8-2 > rpm-python-4.3.3-26_nonptl > libxml2-python-2.6.16-12.6 > > RRDTool install location: > /usr/bin/rrdcgi > /usr/bin/rrdtool > /usr/bin/rrdupdate > /usr/lib/librrd.so.2 > /usr/lib/librrd.so.2.0.10 > /usr/lib/librrd_th.so.2 > /usr/lib/librrd_th.so.2.0.8 > /usr/share/doc/rrdtool-1.2.23 > > RRDTool-devel install location: > /usr/include/rrd.h > /usr/lib/librrd.so > /usr/lib/librrd_th.so > > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Gary Gatten > Sent: Wednesday, June 08, 2011 2:38 PM > To: '[email protected]' > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > Are you running the ./autogen.sh as root or? > > Where exactly are those pkgs installed to? /usr/local/rrd????? > > What is the exact command you are specifying? This part of ntop > usually works no problem. > > BTW, you'll also need python and probably the python dev packages > installed. Do you have those? > > G > > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Paul A. > Spagnola > Sent: Wednesday, June 08, 2011 4:30 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > I have these packages installed: > > perl-rrdtool-1.2.23-1.el4.rf > rrdtool-devel-1.2.23-1.el4.rf > rrdtool-1.2.23-1.el4.rf > > -Paul > > -----Original Message----- > From: [email protected] > [mailto:[email protected]] On Behalf Of Yuri > Francalacci > Sent: Wednesday, June 08, 2011 2:11 PM > To: [email protected] > Subject: Re: [Ntop] Error: configure: error: Unable to find RRD at... > > do you have rrd development package installed? > if not, please install it, or download it directly from rrd web site Y. > On Jun 8, 2011, at 11:08 PM, Paul A. Spagnola wrote: > > > Trying to compile 4.0.3. I still get this error when I run > "autogen.sh". Not sure what to do. I tried specifying many paths, but > nothing works. > > > > configure: error: Unable to find RRD at /usr/local: please use > > --with-rrd-home=DIR > > > > OS is CentOS 4.7 > > > > -Paul > > _______________________________________________ > > Ntop mailing list > > [email protected] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > ############################################### > Yuri Francalacci - [email protected] - http://www.ntop.org > "Simplicity is the ultimate sophistication" - Leonardo da Vinci > ############################################### > > > > > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to > be reviewed by only the intended recipient and may contain > information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to > be reviewed by only the intended recipient and may contain > information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to > be reviewed by only the intended recipient and may contain > information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to > be reviewed by only the intended recipient and may contain > information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > > <font size="1"> > <div style='border:none;border-bottom:double windowtext > 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to > be reviewed by only the intended recipient and may contain > information that is privileged and/or confidential. > If you are not the intended recipient, you are hereby notified that > any review, use, dissemination, disclosure or copying of this email > and its attachments, if any, is strictly prohibited. If you have > received this email in error, please immediately notify the sender by > return email and delete this email from your system." > </font> > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
