Hi,
after Google'ing around a few people seem to have issues running Ntop on
SPARC architecture so I have no idea if there is a solution for this or
if it's just 'discontinued support' but I thought I'd give it a shot anyway.
As per all other bug reports running Ntop on Debian SPARC gives "bus
error" as output.
# gdb /usr/local/bin/ntop
GNU gdb (GDB) 7.0.1-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later
<http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "sparc-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/bin/ntop...done.
(gdb) r
Starting program: /usr/local/bin/ntop
[Thread debugging using libthread_db enabled]
Sun Oct 28 21:11:09 2012 Initializing gdbm databases
Sun Oct 28 21:11:09 2012 ntop will be started as user nobody
Sun Oct 28 21:11:09 2012 ntop v.5.0.1 (32 bit)
Sun Oct 28 21:11:09 2012 Configured on Oct 28 2012 19:48:35, built on
Oct 28 2012 19:52:14.
Sun Oct 28 21:11:09 2012 Copyright 1998-2012 by Luca Deri <[email protected]>
Sun Oct 28 21:11:09 2012 Get the freshest ntop from http://www.ntop.org/
Sun Oct 28 21:11:09 2012 NOTE: ntop is running from '/usr/local/bin'
Sun Oct 28 21:11:09 2012 NOTE: (but see warning on man page for the
--instance parameter)
Sun Oct 28 21:11:09 2012 Initializing ntop
Sun Oct 28 21:11:09 2012 Checking eth0 for additional devices
Sun Oct 28 21:11:09 2012 Resetting traffic statistics for device eth0
Sun Oct 28 21:11:09 2012 Initializing device eth0 (0)
Sun Oct 28 21:11:09 2012 DLT: Device 0 [eth0] is 1, mtu 1514, header 14
Sun Oct 28 21:11:09 2012 Initialized events [mask: 0][path: ]
Sun Oct 28 21:11:09 2012 Initializing gdbm databases
Sun Oct 28 21:11:09 2012 VENDOR: Loading MAC address table.
Sun Oct 28 21:11:09 2012 VENDOR: Checking for MAC address table file
Sun Oct 28 21:11:09 2012 VENDOR: File
'/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Sun Oct 28 21:11:09 2012 VENDOR: ntop continues ok
Sun Oct 28 21:11:09 2012 VENDOR: Checking for MAC address table file
Sun Oct 28 21:11:09 2012 VENDOR: File '/usr/local/etc/ntop/oui.txt.gz'
does not need to be reloaded
Sun Oct 28 21:11:09 2012 VENDOR: ntop continues ok
Sun Oct 28 21:11:09 2012 Fingerprint: Loading signature file
Sun Oct 28 21:11:09 2012 Fingerprint: Checking for Fingerprint file... file
Sun Oct 28 21:11:09 2012 Fingerprint: Loading file
'/usr/local/etc/ntop/etter.finger.os.gz'
Sun Oct 28 21:11:09 2012 Fingerprint: ...loaded 1765 records
Sun Oct 28 21:11:09 2012 Initializing external applications
[New Thread 0xf56fdb70 (LWP 12386)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4117748592]: SFP: Started thread
for fingerprinting
Sun Oct 28 21:11:09 2012 THREADMGMT[t4117748592]: SFP: Fingerprint scan
thread starting [p12382]
[New Thread 0xf4efdb70 (LWP 12387)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4109359984]: SIH: Started thread
for idle hosts detection
Sun Oct 28 21:11:09 2012 THREADMGMT[t4109359984]: SIH: Idle host scan
thread starting [p12382]
[New Thread 0xf46fdb70 (LWP 12388)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4100971376]: DNSAR(1): Started
thread for DNS address resolution
Sun Oct 28 21:11:09 2012 THREADMGMT[t4100971376]: DNSAR(1): Address
resolution thread running
[New Thread 0xf3efdb70 (LWP 12389)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4092582768]: DNSAR(2): Started
thread for DNS address resolution
Sun Oct 28 21:11:09 2012 THREADMGMT[t4092582768]: DNSAR(2): Address
resolution thread running
[New Thread 0xf36fdb70 (LWP 12390)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4084194160]: DNSAR(3): Started
thread for DNS address resolution
Sun Oct 28 21:11:09 2012 Calling plugin start functions (if any)
Sun Oct 28 21:11:09 2012 GeoIP: loaded config file
/usr/local/etc/ntop/GeoLiteCity.dat
Sun Oct 28 21:11:09 2012 GeoIP: loaded ASN config file
/usr/local/etc/ntop/GeoIPASNum.dat
Sun Oct 28 21:11:09 2012 NOTE: Interface merge enabled by default
Sun Oct 28 21:11:09 2012 SSL is present but https is disabled: use -W
<https port> for enabling it
Sun Oct 28 21:11:09 2012 INITWEB: Initializing web server
Sun Oct 28 21:11:09 2012 INITWEB: Initializing TCP/IP socket
connections for web server
Sun Oct 28 21:11:09 2012 INITWEB: Initialized socket, port 3000,
address (any)
Sun Oct 28 21:11:09 2012 INITWEB: Waiting for HTTP connections on port 3000
Sun Oct 28 21:11:09 2012 INITWEB: Starting web server
Sun Oct 28 21:11:09 2012 THREADMGMT[t4084194160]: DNSAR(3): Address
resolution thread running
[New Thread 0xf2efdb70 (LWP 12391)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4075805552]: INITWEB: Started
thread for web server
Sun Oct 28 21:11:09 2012 Listening on [eth0]
Sun Oct 28 21:11:09 2012 Loading Plugins
Sun Oct 28 21:11:09 2012 Searching for plugins in
/usr/local/lib/ntop/plugins
Sun Oct 28 21:11:09 2012 THREADMGMT[t4075805552]: WEB: Server
connection thread starting [p12382]
Sun Oct 28 21:11:09 2012 Note: SIGPIPE handler set (ignore)
Sun Oct 28 21:11:09 2012 THREADMGMT[t4075805552]: WEB: Server
connection thread running [p12382]
Sun Oct 28 21:11:09 2012 WEB: ntop's web server is now processing requests
Sun Oct 28 21:11:09 2012 RRD: Welcome to Round-Robin Database. (C)
2002-12 by Luca Deri.
Sun Oct 28 21:11:09 2012 SFLOW: Welcome to sFlow.(C) 2002-12 by Luca Deri
Sun Oct 28 21:11:09 2012 NETFLOW: Welcome to NetFlow.(C) 2002-12 by
Luca Deri
Sun Oct 28 21:11:09 2012 Calling plugin start functions (if any)
Sun Oct 28 21:11:09 2012 RRD: Welcome to the RRD plugin
Sun Oct 28 21:11:09 2012 RRD: Mask for new directories is 0700
Sun Oct 28 21:11:09 2012 RRD: Mask for new files is 0066
[New Thread 0xf26afb70 (LWP 12392)]
Sun Oct 28 21:11:09 2012 THREADMGMT: RRD: Started thread (t4067097456)
for data collection
Sun Oct 28 21:11:09 2012 THREADMGMT[t4067097456]: RRD: Data collection
thread starting [p12382]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4160687008]: ntop RUNSTATE:
INITNONROOT(3)
Sun Oct 28 21:11:09 2012 Now running as requested user 'nobody'
(65534:65534)
Sun Oct 28 21:11:09 2012 Note: Reporting device initally set to 0
[eth0] (merged)
Sun Oct 28 21:11:09 2012 **WARNING** INIT: Unable to create pid file
(/usr/local/var/ntop/ntop.pid)
Sun Oct 28 21:11:09 2012 THREADMGMT[t4160687008]: ntop RUNSTATE: RUN(4)
Sun Oct 28 21:11:09 2012 THREADMGMT[t4109359984]: SIH: Idle host scan
thread running [p12382]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4117748592]: SFP: Fingerprint scan
thread running [p12382]
[New Thread 0xf1eafb70 (LWP 12393)]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4058708848]: NPS(1): Started
thread for network packet sniffing [eth0]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4058708848]: NPS(eth0):
pcapDispatch thread starting [p12382]
Sun Oct 28 21:11:09 2012 THREADMGMT[t4058708848]: NPS(eth0):
pcapDispatch thread running [p12382]
Sun Oct 28 21:11:09 2012 **WARNING** Packet truncated (65226->8232):
using LRO perhaps ?
Program received signal SIGBUS, Bus error.
[Switching to Thread 0xf1eafb70 (LWP 12393)]
ipq_init_packet_header (ipoque_struct=0x1d9e10, flow=0x45d9c8,
packet=<value optimized out>, packetlen=292, current_tick=2838938447,
src=0x45da48,
dst=0x45db88) at ipq_main.c:2006
2006 if (decaps_iph->version == 4 && decaps_iph->ihl >= 5) {
I basically followed this guide:
http://diatel.wordpress.com/2011/12/07/installing-ntop-debian-squeeze/
to ensure that I was doing things correctly and that no other compile
options/libraries or extra stuff was needed.....
The default package in Debian seems to be version 2.6.x which is
obsolete and also I think the location portion of the software is broken
too as activating DNS lookups with -n2 on startup shows each domain
however, when used in conjunction with the Google Maps API nothing shows
up on the grid as a location.
Further Googling for the SIGBus error came up with quite a few hits
which indicated libc to be doing funky things and taking Iceweasel as an
example:
http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=634261
I can't comment on the programming side as unfortunately my programming
skills were limited to Turbo Pascal back at school in the late 90s
(Windows 98 was already out so don't ask why MSDOS but that was what was
taught), but if someone has any suggestions or thoughts it would be
great to get a fix :-)
Unfortunately I don't have any spare x64 systems to make my life
easy..... :-(
Regards,
Kaya
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop