Some new developments in my dilemma -- Some background here: The four interfaces that I'm monitoring are on network taps. My primary interface, I tested while disabling the other four, seemed to work with no packet loss at first just like the others but once again I got packet loss (100% over time). I'm frustrated because this worked before. Any help on troubleshooting this issue would be appreciated.
On Tue, Nov 24, 2015 at 12:46 AM, Luca Deri <[email protected]> wrote: > Hi Aneip, > can you please move this discussion to github and specify how you have > started ntopng (exact command line )? > > Thanks Luca > > On 24 Nov 2015, at 03:17, aneip <[email protected]> wrote: > > Happen to me also on vmware. If I got to interface page, than the capture > will start. Then I upgrade to nightly build, then the problem disappear. > > > > On Tuesday, 24 November 2015, 2:57, "Bidwell, Christopher" < > [email protected]> wrote: > > > The console logs don't show anything out of the ordinary. Here is my > interface info: > > p2p1: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 > inet6 fe80::210:18ff:fef5:5e88 prefixlen 64 scopeid 0x20<link> > inet6 2001:49c8:8004:c:210:18ff:fef5:5e88 prefixlen 64 scopeid > 0x0<global> > ether 00:10:18:f5:5e:88 txqueuelen 1000 (Ethernet) > RX packets 472063327 bytes 459189177218 (427.6 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 390 bytes 39148 (38.2 KiB) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 48 > > p2p2: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 > ether 00:10:18:f5:5e:89 txqueuelen 1000 (Ethernet) > RX packets 331838275 bytes 71318212775 (66.4 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 0 bytes 0 (0.0 B) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 52 > > p2p3: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 > ether 00:10:18:f5:5e:8a txqueuelen 1000 (Ethernet) > RX packets 711698467 bytes 373968329299 (348.2 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 0 bytes 0 (0.0 B) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 48 > > p2p4: flags=4419<UP,BROADCAST,RUNNING,PROMISC,MULTICAST> mtu 1500 > ether 00:10:18:f5:5e:8b txqueuelen 1000 (Ethernet) > RX packets 792712602 bytes 648435476003 (603.9 GiB) > RX errors 0 dropped 0 overruns 0 frame 0 > TX packets 0 bytes 0 (0.0 B) > TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0 > device interrupt 52 > > On Mon, Nov 23, 2015 at 11:23 AM, Simone Mainardi <[email protected]> > wrote: > > Could you please check ntopng console output? Do you notice any error? > > May I ask you the average load of these interfaces? thanks > > simone > > On Mon, Nov 23, 2015 at 7:19 PM, Bidwell, Christopher <[email protected]> > wrote: > > Thanks for the quick response. I've narrowed it down to one host and have > disabled sticky hosts as well, restarted ntop and it worked for about 15 > seconds and then packet loss starts to build up again. Hmmm...This used to > work with an older version of ntop. I upgraded and am experiencing these > issues. > > I'm stumped. > > On Mon, Nov 23, 2015 at 11:14 AM, Simone Mainardi <[email protected]> > wrote: > > Chris, thanks for contacting us. I would suggest to follow up using the > issue tracker here https://github.com/ntop/ntopng/issues/266 > > thanks > simone > > On Mon, Nov 23, 2015 at 7:08 PM, Bidwell, Christopher <[email protected]> > wrote: > > Hi all, > > I've submitted this as a bug but I'm not so sure it's a bug as it may be > something local that I haven't been able to figure out. > > I've got 4 interfaces running ntop and they all have 100% packet loss. If > I restart ntop, it works for a short while but then starts to lose packets > again. > > Does anyone have any ides? > > Here are all my version info and specs: > > Version 2.1.151120 - Professional Edition > Platform x86_64-unknown-linux-gnu (x86_64) - 64 bit > Built on CentOS Linux release 7.1.1503 (Core) > Currently Logged User cbidwell [Administrator] > Uptime 2 days, 23 h, 39 min, 28 sec > > nDPI 1.7.1-dev-248-ec034da > Twitter Bootstrap 3.x > Font Awesome 4.x > RRDtool 1.4.8 > Redis Server 2.8.19 > Mongoose web server 3.7 > LuaJIT LuaJIT 2.0.3 > ØMQ 4.0.5 > GeoIP 1.5.0 > > This product includes GeoLite data created by MaxMind. > Data-Driven Documents (d3js) 2.9.1 / 3.0 > > Thanks, > Chris > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > > -- > Chris Bidwell, CISSP, CEH, CPT > National Earthquake Information Center > US Geological Survey > email: [email protected] > work: 303-273-8642 > mobile: 303-435-6362 > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > _______________________________________________ > Ntop mailing list > [email protected] > http://listgateway.unipi.it/mailman/listinfo/ntop > -- Chris Bidwell, CISSP, CEH, CPT National Earthquake Information Center US Geological Survey email: [email protected] work: 303-273-8642 mobile: 303-435-6362
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
