Seems to be very similar to the bug tracked (and fixed) here: https://github.com/ntop/nProbe/issues/174
However this is on v.9.1.200629 of nProbe and the bug above was in *v.7.5.170419. *Possible regression? Tim Nichols On Fri, Jul 3, 2020 at 3:48 PM Timothy Nichols <[email protected]> wrote: > Also, some System information : > > pi@ntop:~ $ df -h > Filesystem Size Used Avail Use% Mounted on > /dev/root 57G 6.6G 48G 13% / > devtmpfs 1.8G 0 1.8G 0% /dev > tmpfs 2.0G 0 2.0G 0% /dev/shm > tmpfs 2.0G 57M 1.9G 3% /run > tmpfs 5.0M 4.0K 5.0M 1% /run/lock > tmpfs 2.0G 0 2.0G 0% /sys/fs/cgroup > /dev/mmcblk0p6 253M 52M 202M 21% /boot > tmpfs 391M 0 391M 0% /run/user/1000 > > pi@ntop:~ $ free -mh > total used free shared buff/cache > available > Mem: 3.8Gi 301Mi 2.8Gi 76Mi 780Mi > 3.3Gi > Swap: 99Mi 0B 99Mi > > pi@ntop:~ $ uname -a > Linux ntop 4.19.118-v7l+ #1311 SMP Mon Apr 27 14:26:42 BST 2020 armv7l > GNU/Linux > > pi@ntop:~ $ cat /etc/*release* > PRETTY_NAME="Raspbian GNU/Linux 10 (buster)" > NAME="Raspbian GNU/Linux" > VERSION_ID="10" > VERSION="10 (buster)" > VERSION_CODENAME=buster > ID=raspbian > ID_LIKE=debian > HOME_URL="http://www.raspbian.org/"; > SUPPORT_URL="http://www.raspbian.org/RaspbianForums"; > BUG_REPORT_URL="http://www.raspbian.org/RaspbianBugs"; > > Tim Nichols > > > On Fri, Jul 3, 2020 at 3:05 PM Timothy Nichols <[email protected]> > wrote: > >> Hi All, >> I'm new to using ntopng/nprobe so forgive me if this is a noob issue. >> >> I've configured ntopng (pro license) and nprobe on a raspberry pi 4 to >> receive netflow traffic from the DD-WRT based router (using sflow). The >> DD-WRT host points sflow traffic to the nprobe on the rpi on port 2205, and >> nprobe should collect the flows and forward via zmq to ntopng on the same >> rpi. >> >> However, when I configure the zmq settings for nprobe, it crashes on >> startup with a SEGV and no error message. I haven't purchased a license >> for nprobe yet as I want to prove function first. >> >> Here are my configs, and the nprobe output to daemon.log: >> >> Thanks for the help >> >> nprobe.conf ---------------- >> -i=none >> -n=none >> -3=2055 >> -b=1 >> --zmq="tcp://127.0.0.1:5556" >> --zmq-probe-mode >> -T="@NTOPNG@" >> >> ntopng.conf ---------------- >> -G=/var/run/ntopng.pid >> -i=tcp://127.0.0.1:5556c >> -m=192.168.1.0/24 >> >> daemon.log [nprobe] ---------------- >> Jul 3 14:59:51 ntop systemd[1]: nprobe.service: Service RestartSec=5s >> expired, scheduling restart. >> Jul 3 14:59:51 ntop systemd[1]: nprobe.service: Scheduled restart job, >> restart counter is at 73. >> Jul 3 14:59:51 ntop systemd[1]: Stopped nprobe extensible NetFlow >> v5/v9/IPFIX probe/collector for IPv4/v6. >> Jul 3 14:59:51 ntop systemd[1]: Starting nprobe extensible NetFlow >> v5/v9/IPFIX probe/collector for IPv4/v6... >> Jul 3 14:59:51 ntop systemd[1]: Started nprobe extensible NetFlow >> v5/v9/IPFIX probe/collector for IPv4/v6. >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:5054] >> Reading configuration file /run/nprobe.conf >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [plugin.c:177] >> No plugins found in ./plugins >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [plugin.c:185] >> Loading 23 plugins [.so] from /usr/local/lib/nprobe/plugins >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4620] >> ERROR: Invalid license (/etc/nprobe.license) [Missing license file] >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4627] >> ERROR: ***************************************************** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4628] >> ERROR: ** ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4629] >> ERROR: ** Switching to DEMO MODE (missing valid license) ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4630] >> ERROR: ** ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4632] >> ERROR: ** Purchase your license at ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4633] >> ERROR: ** https://shop.ntop.org/ ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4634] >> ERROR: ** ** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:4636] >> ERROR: ***************************************************** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6677] >> WARNING: The output interfaceId is set to 0: did you forget to use -Q >> perhaps ? >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6680] >> WARNING: The input interfaceId is set to 0: did you forget to use -u >> perhaps ? >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6771] >> Flow cache is disabled in flow collection mode >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6774] >> Welcome to nProbe v.9.1.200629 ($Revision: 6903 $) for >> armv7l-unknown-linux-gnueabihf >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6785] >> Running on Raspbian GNU/Linux 10 (buster) >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6796] >> [LICENSE] nProbe SystemId: 4491C28A5E6BA0A5 >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:6867] >> Sample rate [packet: 1][flow collection/export: 1/1] >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9734] >> ERROR: *************************************************************** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9735] >> ERROR: * NOTE: This is a DEMO version limited to 25000 flows export. * >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9736] >> ERROR: *************************************************************** >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9743] >> Welcome to nProbe v.9.1.200629 for armv7l-unknown-linux-gnueabihf >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:8557] >> WARNING: Adding %EXPORTER_IPV4_ADDRESS to the template as nProbe is working >> as collector >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:8675] >> Using NetFlow Packet Payload Len: 1472 >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:8595] >> @NTOPNG@ expanded to " %IN_SRC_MAC %OUT_DST_MAC %INPUT_SNMP %OUTPUT_SNMP >> %SRC_VLAN %IPV4_SRC_ADDR %IPV4_DST_ADDR %L4_SRC_PORT %L4_DST_PORT >> %IPV6_SRC_ADDR %IPV6_DST_ADDR %IP_PROTOCOL_VERSION %PROTOCOL %L7_PROTO >> %IN_BYTES %IN_PKTS %OUT_BYTES %OUT_PKTS %FIRST_SWITCHED %LAST_SWITCHED >> %CLIENT_TCP_FLAGS %SERVER_TCP_FLAGS %EXPORTER_IPV4_ADDRESS" >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:8710] >> Flow export type: bidirectional flows >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [plugin.c:1171] >> 0 plugin(s) enabled >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9177] >> Each flow is 104 bytes long >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9178] >> The # flows per packet has been set to 13 >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:9181] >> IP TOS is ignored >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:10026] >> Flows ASs will not be computed (no GeoDB files loaded) >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:10131] >> Not capturing packet from interface (collector mode) >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [util.c:5117] >> Initializing ZMQ as client >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [util.c:5190] >> Exporting flows towards ZMQ endpoint tcp://127.0.0.1:5556 >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [util.c:4114] >> Enlarged socket buffer [echo 8388608 > /proc/sys/net/core/rmem_max] >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [util.c:4155] >> nProbe changed user to 'nprobe' >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [collect.c:192] >> Flow collector listening on port 2055 (IPv4/v6) >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [export.c:540] >> Using TLV as serialization format >> Jul 3 14:59:51 ntop nprobe[24756]: 03/Jul/2020 14:59:51 [nprobe.c:10394] >> nProbe started successfully >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3612] >> --------------------------------- >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3631] >> L7 Proto Diff Total >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3645] >> #011Unknown/0 12.14 KB 12.14 KB >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3664] >> Flows exports (including drops) [1 flows][avg: 1.0 flows/sec][latest 1 sec >> avg: 1.0 flows/sec] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3672] >> Flow drops [export queue full: 0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3675] >> Packet drops [too many flow buckets: 0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3678] >> Flow Buckets [active: 1][allocated: 1][toBeExported: 0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3682] >> Export Queue [current: 0][max: 512000][fill level: 0.0%] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3712] >> ZMQ Export [1 exporters][1 flows][total avg: 9.97 Kb/sec][236.0 >> bytes/flow][latest 1 sec avg: 9.97 Kb/sec] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3774] >> Collector Threads: [1 pkts@0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3428] >> Processed packets: 0 (max bucket search: 0) >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3411] >> Fragment queue length: 0 >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3439] >> UDP collection stats: [collected pkts: 1][UDP socket drops: 0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3446] >> Flow collection stats: [processed: 2][dropped (holes in collected flow >> sequence): 0] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3452] >> Flow export stats: [0 bytes/0 pkts][0 flows/0 pkts sent] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3458] >> Flow export drop stats: [0 bytes/0 pkts][0 flows] >> Jul 3 14:59:52 ntop nprobe[24756]: 03/Jul/2020 14:59:52 [nprobe.c:3463] >> Total flow stats: [0 bytes/0 pkts][0 flows/0 pkts sent] >> Jul 3 14:59:54 ntop systemd[1]: nprobe.service: Main process exited, >> code=killed, status=11/SEGV >> Jul 3 14:59:54 ntop systemd[1]: nprobe.service: Failed with result >> 'signal'. >> >> daemon.log [ntopng] ------------------------------ >> Jul 3 14:44:04 ntop systemd[1]: Starting ntopng high-speed web-based >> traffic monitoring and analysis tool... >> Jul 3 14:44:04 ntop systemd[1]: Started ntopng high-speed web-based >> traffic monitoring and analysis tool. >> Jul 3 14:44:04 ntop ntopng[21947]: 03/Jul/2020 14:44:04 [Ntop.cpp:2254] >> Setting local networks to 192.168.1.0/24 >> Jul 3 14:44:04 ntop ntopng[21947]: 03/Jul/2020 14:44:04 [Redis.cpp:157] >> Successfully connected to redis 127.0.0.1:6379@0 >> Jul 3 14:44:04 ntop ntopng[21947]: 03/Jul/2020 14:44:04 [Redis.cpp:157] >> Successfully connected to redis 127.0.0.1:6379@0 >> Jul 3 14:44:04 ntop ntopng[21947]: 03/Jul/2020 14:44:04 >> [NtopPro.cpp:299] [LICENSE] Reading license from /etc/ntopng.license >> Jul 3 14:44:04 ntop ntopng[21947]: 03/Jul/2020 14:44:04 >> [NtopPro.cpp:429] [LICENSE] /etc/ntopng.license: found valid Professional >> Embedded license >> Jul 3 14:44:05 ntop ntopng[21947]: 03/Jul/2020 14:44:05 [Ntop.cpp:2359] >> Registered interface tcp://127.0.0.1:5556c [id: 8] >> Jul 3 14:44:05 ntop ntopng[21947]: 03/Jul/2020 14:44:05 [main.cpp:316] >> PID stored in file /var/run/ntopng.pid >> Jul 3 14:44:05 ntop ntopng[21947]: 03/Jul/2020 14:44:05 >> [Geolocation.cpp:150] Running without geolocation support. >> Jul 3 14:44:05 ntop ntopng[21947]: 03/Jul/2020 14:44:05 >> [Geolocation.cpp:151] To enable geolocation follow the instructions at >> Jul 3 14:44:05 ntop ntopng[21947]: 03/Jul/2020 14:44:05 >> [Geolocation.cpp:152] >> https://github.com/ntop/ntopng/blob/dev/doc/README.geolocation.md >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [HTTPserver.cpp:1498] Web server dirs >> [/usr/share/ntopng/httpdocs][/usr/share/ntopng/scripts] >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [HTTPserver.cpp:1501] HTTP server listening on 3000 >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 [Utils.cpp:761] >> User changed to ntopng >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 [main.cpp:386] >> Working directory: /var/lib/ntopng >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 [main.cpp:388] >> Scripts/HTML pages directory: /usr/share/ntopng >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 [Ntop.cpp:455] >> Welcome to ntopng armv7l v.4.1.200629 - (C) 1998-20 ntop.org >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 [Ntop.cpp:465] >> Built on Raspbian GNU/Linux 10 (buster) >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [NtopPro.cpp:699] [LICENSE] System Id:#[removed] >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [NtopPro.cpp:700] [LICENSE] Edition:#011Professional Embedded >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [NtopPro.cpp:701] [LICENSE] License Type:#011Permanent License >> [license removed for email] >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [NtopPro.cpp:725] [LICENSE] Maintenance:#011Until Thu Jul 1 12:34:46 2021 >> [362 days left] >> Jul 3 14:44:06 ntop ntopng[21947]: 03/Jul/2020 14:44:06 >> [PeriodicActivities.cpp:105] Started periodic activities loop... >> Jul 3 14:44:12 ntop ntopng[21947]: 03/Jul/2020 14:44:12 >> [PeriodicActivities.cpp:165] Each periodic activity script will use 2 >> threads >> Jul 3 14:44:12 ntop ntopng[21947]: 03/Jul/2020 14:44:12 >> [NetworkInterface.cpp:2358] Started packet polling on interface >> tcp://127.0.0.1:5556c [id: 8]... >> Jul 3 14:44:12 ntop ntopng[21947]: 03/Jul/2020 14:44:12 >> [ZMQCollectorInterface.cpp:255] Collecting flows on tcp://127.0.0.1:5556c >> Tim Nichols >> >
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
