gdb has all kinds of included help, and frankly that's all I know...
(gdb) help info thread
IDs of currently known threads.
(gdb) info thread
13 Thread 11276 (LWP 8967) 0x405f651e in __select () from
/lib/i686/libc.so.6
12 Thread 10251 (LWP 8966) 0x405f651e in __select () from
/lib/i686/libc.so.6
11 Thread 9226 (LWP 8965) 0x405f651e in __select () from
/lib/i686/libc.so.6
10 Thread 8201 (LWP 8964) 0x405f651e in __select () from
/lib/i686/libc.so.6
9 Thread 7176 (LWP 8963) 0x405f651e in __select () from
/lib/i686/libc.so.6
8 Thread 6151 (LWP 8962) 0x405ca071 in __libc_nanosleep () from
/lib/i686/libc.so.6
7 Thread 5126 (LWP 8961) 0x4053db85 in __sigsuspend (set=0x4300998c)
at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
6 Thread 4101 (LWP 8960) 0x405ca071 in __libc_nanosleep () from
/lib/i686/libc.so.6
5 Thread 3076 (LWP 8959) 0x405ca071 in __libc_nanosleep () from
/lib/i686/libc.so.6
4 Thread 2051 (LWP 8958) 0x405ca071 in __libc_nanosleep () from
/lib/i686/libc.so.6
3 Thread 1026 (LWP 8957) 0x4053db85 in __sigsuspend (set=0x4100967c)
at ../sysdeps/unix/sysv/linux/sigsuspend.c:45
2 Thread 2049 (LWP 8956) 0x405f4e17 in __poll (fds=0x823dbec, nfds=1,
timeout=2000)
at ../sysdeps/unix/sysv/linux/poll.c:63
* 1 Thread 1024 (LWP 8952) 0x405ca027 in __libc_pause () from
/lib/i686/libc.so.6
(gdb) thread 7
**You get the #s from the ntop messages, e.g.
Apr 11 09:58:34 tigger ntop[8952]: Started thread (5126) for DNS address
resolution
(gdb) info stack
#0 0x4053db85 in __sigsuspend (set=0x4300998c) at
../sysdeps/unix/sysv/linux/sigsuspend.c:45
#1 0x404db1c9 in __pthread_wait_for_restart_signal (self=0x43009be0) at
pthread.c:969
#2 0x404dc1ec in __new_sem_wait (sem=0x804d5c8) at restart.h:34
#3 0x402960e0 in waitSem (semId=0x804d5c8) at util.c:1126
#4 0x4027ae0f in dequeueAddress (notUsed=0x0) at address.c:425
#5 0x404d8c6f in pthread_start_thread (arg=0x43009be0) at manager.c:284
(gdb) help stack
Examining the stack.
The stack is made up of stack frames. Gdb assigns numbers to stack frames
counting from zero for the innermost (currently executing) frame.
At any time gdb identifies one frame as the "selected" frame.
Variable lookups are done with respect to the selected frame.
When the program being debugged stops, gdb selects the innermost frame.
The commands below can be used to select other frames by number or address.
List of commands:
backtrace -- Print backtrace of all stack frames
bt -- Print backtrace of all stack frames
down -- Select and print stack frame called by this one
frame -- Select and print a stack frame
return -- Make selected stack frame return to its caller
select-frame -- Select a stack frame without printing anything
up -- Select and print stack frame that called this one
Type "help" followed by command name for full documentation.
Command name abbreviations are allowed if unambiguous.
(gdb) select-frame 4
(gdb) help list
List specified function or line.
With no argument, lists ten more lines after or around previous listing.
"list -" lists the ten lines before a previous ten-line listing.
One argument specifies a line, and ten lines are listed around that line.
Two arguments with comma between specify starting and ending lines to list.
Lines can be specified in these ways:
LINENUM, to list around that line in current file,
FILE:LINENUM, to list around that line in that file,
FUNCTION, to list around beginning of that function,
FILE:FUNCTION, to distinguish among like-named static functions.
*ADDRESS, to list around the line containing that address.
With two args if one is empty it stands for ten lines away from the other
arg.
(gdb) list address.c:425
420
421 while((myGlobals.addressQueueLen == 0)
422 && (myGlobals.capturePackets) /* Courtesy of Wies-Software
<[EMAIL PROTECTED]> */
423 ) {
424 #ifdef USE_SEMAPHORES
425 waitSem(&myGlobals.queueAddressSem);
426 #else
427 waitCondvar(&myGlobals.queueAddressCondvar);
428 #endif
429 key_data.dptr = data_data.dptr = NULL;
(gdb)
(gdb) help print
Print value of expression EXP.
Variables accessible are those of the lexical environment of the selected
stack frame, plus all those whose scope is global or an entire file.
$NUM gets previous value number NUM. $ and $$ are the last two values.
$$NUM refers to NUM'th value back from the last one.
Names starting with $ refer to registers (with the values they would have
if the program were to return to the stack frame now selected, restoring
all registers saved by frames farther in) or else to debugger
"convenience" variables (any such name not a known register).
Use assignment expressions to give values to convenience variables.
{TYPE}ADREXP refers to a datum of data type TYPE, located at address ADREXP.
@ is a binary operator for treating consecutive data objects
anywhere in memory as an array. FOO@NUM gives an array whose first
element is FOO, whose second element is stored in the space following
where FOO is stored, etc. FOO must be an expression whose value
resides in memory.
EXP may be preceded with /FMT, where FMT is a format letter
but no count or size letter (see "x" command).
(gdb) print key_data
$3 = {dptr = 0x0, dsize = 1076452514}
(gdb) print data_data
$4 = {dptr = 0x0, dsize = 4}
(gdb)
-----Burton
-----Original Message-----
From: Stuart Herd - IT Dept. [mailto:[EMAIL PROTECTED]]
Sent: Thursday, April 11, 2002 11:18 AM
To: Ntop
Cc: 'Burton M. Strauss III'
Subject: RE: [Ntop] -b switch causes seg fault...
I see where you are going and have attempted to follow your instructions but
i am not getting anything back....
Could you give an example of what the syntax i am to use at the gdb prompt
to get the info needed??
TIA,
output is as follows:
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 10251 (LWP 16804)]
0x4050a106 in _IO_vfprintf (s=0x45f56bec,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", ap=0x45f56d1c)
at ../sysdeps/i386/i486/bits/string.h:530
530 ../sysdeps/i386/i486/bits/string.h: No such file or directory.
[Switching to Thread 10251 (LWP 16804)]
0x4050a106 in _IO_vfprintf (s=0x45f56bec,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", ap=0x45f56d1c)
---Type <return> to continue, or q <return> to quit---
at ../sysdeps/i386/i486/bits/string.h:530
530 ../sysdeps/i386/i486/bits/string.h: No such file or directory.
(gdb) print client
No symbol "client" in current context.
(gdb) print client->hostNumIpAddress
No symbol "client" in current context.
(gdb) print client hostNumIpAddress
No symbol "client" in current context.
(gdb) print server
No symbol "server" in current context.
(gdb) print --help
No symbol "help" in current context.
(gdb) print
The history is empty.
(gdb) list
525 in ../sysdeps/i386/i486/bits/string.h
(gdb) info stack
#0 0x4050a106 in _IO_vfprintf (s=0x45f56bec,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", ap=0x45f56d1c)
at ../sysdeps/i386/i486/bits/string.h:530
#1 0x4052b465 in _IO_vsnprintf (
string=0x45f56d5c "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('@", maxlen=1024,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", args=0x45f56d18) at vsnprintf.c:129
#2 0x4051263b in __snprintf (
s=0x45f56d5c "INSERT INTO TCPsessions (Client, Server, ClientPort,
ServerPor
t, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('@", maxlen=1024,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')") at snprintf.c:37
#3 0x4027b136 in notifyTCPSession (session=0x84d5550, actualDeviceId=0)
at sql.c:339
#4 0x4027ebe6 in handlePluginSessionTermination (sessionToPurge=0x84d5550,
actualDeviceId=0) at sessions.c:1637
#5 0x4027bae7 in freeSession (sessionToPurge=0x84d5550, actualDeviceId=0)
at sessions.c:315
#6 0x4027e1dd in handleSession (h=0x45f579ac, fragmentedData=0, tcpWin=0,
srcHostIdx=19, sport=135, dstHostIdx=12, dport=4239, length=60,
tp=0x45f5762c, packetDataLength=0,
packetData=0x8230dfe "
\004\002�\227�\224��+�\020\at���\177ݯ�\r��;~�o�
-�������\235��w}���=�����?�\a��\037�#\177�\217��?�'��\237�3\177������\027��_
�+\1
77������7����;\177����\177�\017��?�'��\237}�?�\027��_��\177�o�ݿ�\017��?����
_\23
7\225g�Y{�\237\215g��z�\237\235g�y��=����gg��s�\234>g��s�\\>W��s��>w����y�".
..,
actualDeviceId=0) at sessions.c:1385
#7 0x4027eafc in handleTCPSession (h=0x45f579ac, fragmentedData=0,
tcpWin=0,
srcHostIdx=19, sport=135, dstHostIdx=12, dport=4239, length=60,
tp=0x45f5762c, tcpDataLength=0,
packetData=0x8230dfe "
\004\002�\227�\224��+�\020\at���\177ݯ�\r��;~�o�
-�������\235��w}���=�����?�\a��\037�#\177�\217��?�'��\237�3\177������\027��_
�+\1
77������7����;\177����\177�\017��?�'��\237}�?�\027��_��\177�o�ݿ�\017��?����
_\23
7\225g�Y{�\237\215g��z�\237\235g�y��=����gg��s�\234>g��s�\\>W��s��>w����y�".
..,
actualDeviceId=0) at sessions.c:1579
#8 0x4027472c in processIpPkt (bp=0x8230dd6 "E", h=0x45f579ac, length=60,
ether_src=0x45f57962 "", ether_dst=0x45f5795c "", actualDeviceId=0)
at pbuf.c:941
#9 0x40277a75 in processPacket (_deviceId=0x0, h=0x45f579ac, p=0x8230dc8
"")
at pbuf.c:2307
#10 0x40286112 in pcap_read_packet () from /usr/local/lib/libntop-2.0.so.99
#11 0x40271097 in pcapDispatch (_i=0x0) at ntop.c:106
#12 0x40215bfd in pthread_start_thread (arg=0x45f57c00) at manager.c:262
#13 0x40215cdf in pthread_start_thread_event (arg=0x45f57c00) at
manager.c:285
(gdb) print client
No symbol "client" in current context.
(gdb) print client->hostNumIpAddress
No symbol "client" in current context.
(gdb) print
The history is empty.
(gdb) list
525 in ../sysdeps/i386/i486/bits/string.h
(gdb) print ->bytesSent
A parse error in expression, near `bytesSent'.
(gdb) help print
Print value of expression EXP.
Variables accessible are those of the lexical environment of the selected
stack frame, plus all those whose scope is global or an entire file.
$NUM gets previous value number NUM. $ and $$ are the last two values.
$$NUM refers to NUM'th value back from the last one.
Names starting with $ refer to registers (with the values they would have
if the program were to return to the stack frame now selected, restoring
all registers saved by frames farther in) or else to debugger
"convenience" variables (any such name not a known register).
Use assignment expressions to give values to convenience variables.
{TYPE}ADREXP refers to a datum of data type TYPE, located at address ADREXP.
@ is a binary operator for treating consecutive data objects
anywhere in memory as an array. FOO@NUM gives an array whose first
element is FOO, whose second element is stored in the space following
where FOO is stored, etc. FOO must be an expression whose value
resides in memory.
EXP may be preceded with /FMT, where FMT is a format letter
but no count or size letter (see "x" command).
(gdb) print (session->bytesSent)
No symbol "session" in current context.
(gdb) print ->bytesSent
A parse error in expression, near `bytesSent'.
(gdb) print hostNumIpAddress
No symbol "hostNumIpAddress" in current context.
(gdb) print ->hostNumIpAddress
A parse error in expression, near `hostNumIpAddress'.
(gdb) server->hostNumIpAddress
Undefined command: "server-". Try "help".
(gdb) print (session->bytesSent)
No symbol "session" in current context.
(gdb) print client->hostNumIpAddress
No symbol "client" in current context.
(gdb)
Cheers,
S.
-----Original Message-----
X-Sybari-Space: 00000000 00000000 00000000 00000000
From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 7:29 PM
To: Ntop
Cc: [EMAIL PROTECTED]
Subject: RE: [Ntop] -b switch causes seg fault...
OK, you also need to print the values of the variables - I'll bet that one
of them isn't set...
Follow along in the trace... (it flows backwards #1 was called by #2 etc.)
This:
#3 0x4027b136 in notifyTCPSession (session=0x84d6ab8, actualDeviceId=0) at
sql.c:339
is the last real piece in ntop's code (#1 and #2 are library routines)
(alright, technically, #2, snprintf is defined in util.c, but that's just if
it's not defined in standard library and it's a passthrough (And, this isn't
magic knowledge - you just learn from the names and locations and looking at
the source at the given line #s):
#ifndef HAVE_SNPRINTF
int snprintf(char *string, size_t maxlen, const char *format, ...) {
int ret=0;
va_list args;
va_start(args, format);
vsprintf(string,format,args);
va_end(args);
return ret;
}
#endif
(The nice thing about having the util.c routine is that the stack trace
shows some of the values, unfortunately not the ones we care about:)
#2 0x4051263b in __snprintf (s=0x45f56d5c "INSERT INTO TCPsessions (Client,
Server, ClientPort,
ServerPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('@\214o�E",
maxlen=1024,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
ServerPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s',
'%d', '%d', '%llu', '%llu', '%s', '%s')") at snprintf.c:37
What we need to see is the parameters from sql.c. Here's the code from
sql.c (see how you just follow it back and read the source?):
...
if(snprintf(sqlBuf, sizeof(sqlBuf), "INSERT INTO TCPsessions (Client,
Server, ClientPort, "
"ServerPort, DataSent, DataRcvd, FirstSeen, LastSeen)"
" VALUES ('%s', '%s', '%d', '%d', '%llu', '%llu', '%s',
'%s')",
client->hostNumIpAddress,
server->hostNumIpAddress,
session->sport,
session->dport,
(session->bytesSent),
(session->bytesRcvd),
dt1, dt2) < 0)
BufferOverflow();
...
So, run it again and print the variables...
print client
print client->hostNumIpAddress
print server
print server->hostNumIpAddress
etc.
You will probably find one of them is a null pointer, and then we'll know
where to begin to look...
-----Burton
-----Original Message-----
From: Stuart Herd - IT Dept. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 4:55 PM
To: [EMAIL PROTECTED]
Cc: 'Burton M. Strauss III'
Subject: RE: [Ntop] -b switch causes seg fault...
ok, got it, thanks Burton.
Here is the result...
(gdb) run /usr/local/bin/./ntop -P /var/log/ntop -p
/usr/local/share/ntop/protoc\
ol -m 172.19.0.0/255.255.252.0 -u root -E -w 3000 -S 1 -r 240 -k -i
eth1,eth0 -b\
localhost:4000
<snip>
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 10251 (LWP 2625)]
0x4050a106 in _IO_vfprintf (s=0x45f56bec,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", ap=0x45f56d1c)
---Type <return> to continue, or q <return> to quit---
at ../sysdeps/i386/i486/bits/string.h:530
530 ../sysdeps/i386/i486/bits/string.h: No such file or directory.
(gdb) list
525 in ../sysdeps/i386/i486/bits/string.h
(gdb) info stack
#0 0x4050a106 in _IO_vfprintf (s=0x45f56bec,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", ap=0x45f56d1c)
at ../sysdeps/i386/i486/bits/string.h:530
#1 0x4052b465 in _IO_vsnprintf (
string=0x45f56d5c "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('@\214o�E",
maxlen=1024,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')", args=0x45f56d18) at vsnprintf.c:129
#2 0x4051263b in __snprintf (
s=0x45f56d5c "INSERT INTO TCPsessions (Client, Server, ClientPort,
ServerPor
t, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('@\214o�E", maxlen=1024,
format=0x40291aa0 "INSERT INTO TCPsessions (Client, Server, ClientPort,
Serv
erPort, DataSent, DataRcvd, FirstSeen, LastSeen) VALUES ('%s', '%s', '%d',
'%d',
'%llu', '%llu', '%s', '%s')") at snprintf.c:37
#3 0x4027b136 in notifyTCPSession (session=0x84d6ab8, actualDeviceId=0)
at sql.c:339
#4 0x4027ebe6 in handlePluginSessionTermination (sessionToPurge=0x84d6ab8,
actualDeviceId=0) at sessions.c:1637
#5 0x4027bae7 in freeSession (sessionToPurge=0x84d6ab8, actualDeviceId=0)
at sessions.c:315
#6 0x4027e1dd in handleSession (h=0x45f579ac, fragmentedData=0, tcpWin=0,
srcHostIdx=2, sport=80, dstHostIdx=16, dport=2888, length=60,
tp=0x45f5762c, packetDataLength=0, packetData=0x8230dfe "",
actualDeviceId=0) at sessions.c:1385
#7 0x4027eafc in handleTCPSession (h=0x45f579ac, fragmentedData=0,
tcpWin=0,
srcHostIdx=2, sport=80, dstHostIdx=16, dport=2888, length=60,
tp=0x45f5762c, tcpDataLength=0, packetData=0x8230dfe "",
actualDeviceId=0)
at sessions.c:1579
#8 0x4027472c in processIpPkt (bp=0x8230dd6 "E", h=0x45f579ac, length=60,
ether_src=0x45f57962 "", ether_dst=0x45f5795c "", actualDeviceId=0)
at pbuf.c:941
#9 0x40277a75 in processPacket (_deviceId=0x0, h=0x45f579ac, p=0x8230dc8
"")
at pbuf.c:2307
#10 0x40286112 in pcap_read_packet () from /usr/local/lib/libntop-2.0.so.99
#11 0x40271097 in pcapDispatch (_i=0x0) at ntop.c:106
#12 0x40215bfd in pthread_start_thread (arg=0x45f57c00) at manager.c:262
#13 0x40215cdf in pthread_start_thread_event (arg=0x45f57c00) at
manager.c:285
-----Original Message-----
From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 4:28 PM
To: [EMAIL PROTECTED]
Cc: Stuart Herd - IT Dept.
Subject: RE: [Ntop] -b switch causes seg fault...
(gdb) is the prompt, but you forgot the set args (command). Also, it needs
to be all on one (LONG) line, no returns, etc.
(gdb) set args -P ...
^^^^^^^^
-----Burton
-----Original Message-----
From: Stuart Herd - IT Dept. [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 12:08 PM
To: '[EMAIL PROTECTED]'
Cc: 'Burton M. Strauss III'
Subject: RE: [Ntop] -b switch causes seg fault...
I cannot get gdb to function as in the faq,
Disclaimer: This is the first time i have used gdb, i am not a programmer,
merely a lowly network geek :-)
>From the FAQ...
> gdb /usr/bin/ntop (or wherever ntop is installed)
[That is, add the -K argument. While you are at it, don't give it the -d
argument and add -u root (replace any existing -u value) - yes, it's
insecure running as root, but you're not planning on doing this in
production nor as a routine situation!]
root@ESPL062-000-001(/)# gdb /usr/local/bin/ntop
GNU gdb 5.0
Copyright 2000 Free Software Foundation, Inc.
GDB is free software, covered by the GNU General Public License, and you are
welcome to change it and/or distribute copies of it under certain
conditions.
Type "show copying" to see the conditions.
There is absolutely no warranty for GDB. Type "show warranty" for details.
This GDB was configured as "i686-pc-linux-gnu"...
...
(gdb) set args (your usual arg string) -K
(gdb) -P /var/log/ntop -p /usr/local/share/ntop/protocol -m
172.19.0.0/255.255.2
52.0 -u root -E -w 3000 -S 1 -r 240 -i eth1,eth0 -b localhost:4000
Undefined command: "-P". Try "help".
hmm, ok, try stripping the args...
(gdb) -u root -E -w 3000 -S 1 -r 240 -i eth1,eth0 -k -b localhost:4000
Undefined command: "-u". Try "help".
(gdb)
>From reading help the args it is asking for is gdb arg's ?? now i'm
confused.
where to go...?
-----Original Message-----
From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]]
Sent: Wednesday, April 10, 2002 9:38 AM
To: [EMAIL PROTECTED]
Cc: [EMAIL PROTECTED]
Subject: RE: [Ntop] -b switch causes seg fault...
Two things --
1. try running under gdb (see http://snapshot.ntop.org for instructions if
you don't know how)
2. apply the (attached, experimental) traceback patch
and (either way) post the results as to where it's failing...
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
Stuart Herd - IT Dept.
Sent: Monday, April 08, 2002 4:52 PM
To: '[EMAIL PROTECTED]'
Subject: [Ntop] -b switch causes seg fault...
Running latest snapshot on RH 7.1 w' updates
Issue is outputting data into mySQL database NTOP, constant seg faults when
using the -b switch.
I have been using this startup string since march 14 snapshots and all was
well in my world until i upgraded to the latest snap. I did this as i needed
the TCP session history. Lauching without -b works like a charm.
What can i do to give more info into this problem??
root@ESPL062-000-001(/root)# /usr/local/bin/./ntop -P /var/log/ntop -p
/usr/loca
l/share/ntop/protocol -u ntop -w 3000 -E -S 1 -r 240 -i eth1,eth0 -b
localhost:4
000
08/Apr/2002 17:32:36 Open channel with ntop SQL client running @
localhost:4000
Wait please: ntop is coming up...
08/Apr/2002 17:32:36 Initializing IP services...
SSL is present but https is disabled: use -W <https port> for enabling it
08/Apr/2002 17:32:36 Initializing GDBM...
08/Apr/2002 17:32:36 Initializing network devices...
08/Apr/2002 17:32:36 ntop v.2.0.99 MT (SSL) [i686-pc-linux-gnu] (04/08/02
01:33:
57 PM build)
08/Apr/2002 17:32:36 Listening on [eth1,eth0]
08/Apr/2002 17:32:36 Copyright 1998-2002 by Luca Deri <[EMAIL PROTECTED]>
08/Apr/2002 17:32:36 Get the freshest ntop from http://www.ntop.org/
08/Apr/2002 17:32:36 Initializing...
08/Apr/2002 17:32:36 Loading plugins (if any)...
08/Apr/2002 17:32:36 Searching plugins in /usr/local/lib/ntop/plugins
08/Apr/2002 17:32:36 Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri.
08/Apr/2002 17:32:36 Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea
Marangoni.
08/Apr/2002 17:32:36 Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri.
08/Apr/2002 17:32:36 Welcome to sFlowPlugin. (C) 2002 by Luca Deri.
08/Apr/2002 17:32:36 Welcome to NetFlow. (C) 2002 by Luca Deri.
08/Apr/2002 17:32:36 Welcome to PDAPlugin. (C) 2001-2002 by L.Deri and
W.Brock
08/Apr/2002 17:32:36 Processing protocol file:
'/usr/local/share/ntop/protocol', size: 343
08/Apr/2002 17:32:36 Resetting traffic statistics...
08/Apr/2002 17:32:37 Started thread (1026) for lsof support.
08/Apr/2002 17:32:37 Started thread (2051) for network packet analyser.
08/Apr/2002 17:32:37 Started thread (3076) for host traffic statistics.
08/Apr/2002 17:32:37 Started thread (4101) for throughput update.
08/Apr/2002 17:32:37 Started thread (5126) for idle hosts detection.
08/Apr/2002 17:32:37 Started thread (6151) for DB update.
08/Apr/2002 17:32:37 Started thread (7176) for DNS address resolution.
08/Apr/2002 17:32:37 Started thread (8201) for address purge.
08/Apr/2002 17:32:37 Initializing plugins (if any)...
08/Apr/2002 17:32:37 NetFlow export disabled
08/Apr/2002 17:32:37 Waiting for HTTP connections on port 3000...
08/Apr/2002 17:32:37 Started thread (0) for web server.
08/Apr/2002 17:32:37 Sniffying...
08/Apr/2002 17:32:37 Started thread (10251) for network packet sniffing on
eth1.
**08/Apr/2002 17:32:37 Started thread (11276) for network packet sniffing on
eth
0.
*****************************************08/Apr/2002 17:32:40 Extending hash
siz
e [newSize=64][deviceId=0]
*********Segmentation fault
---------------------------------------------------------------
Stuart Herd /"\
Royal Group Technologies Limited \ / ASCII Ribbon Campaign
Ph. 905.326.7381 x223 X Against HTML Mail
http://www.royplas.com / \
---------------------------------------------------------------
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message. If
you are not the addressee indicated in this message or the employee or agent
responsible for delivering it to the addressee, you are hereby on notice
that you are in possession of confidential and privileged information. Any
dissemination, distribution, or copying of this e-mail is strictly
prohibited. In such case, you should destroy this message and kindly notify
the sender by reply e-mail. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.
Opinions, conclusions, and other information in this message that do not
relate to the official business of the sender's firm shall be understood as
neither given nor endorsed by it. E-mail cannot be guaranteed to be secure,
error free or free from viruses. Royal does not accept any liability
whatsoever for any loss or damage which may be caused as a result of the
transmission of this e-mail.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop << File:
BMS0040-autobacktrace.patch >>
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message. If
you are not the addressee indicated in this message or the employee or agent
responsible for delivering it to the addressee, you are hereby on notice
that you are in possession of confidential and privileged information. Any
dissemination, distribution, or copying of this e-mail is strictly
prohibited. In such case, you should destroy this message and kindly notify
the sender by reply e-mail. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.
Opinions, conclusions, and other information in this message that do not
relate to the official business of the sender's firm shall be understood as
neither given nor endorsed by it. E-mail cannot be guaranteed to be secure,
error free or free from viruses. Royal does not accept any liability
whatsoever for any loss or damage which may be caused as a result of the
transmission of this e-mail.
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message. If
you are not the addressee indicated in this message or the employee or agent
responsible for delivering it to the addressee, you are hereby on notice
that you are in possession of confidential and privileged information. Any
dissemination, distribution, or copying of this e-mail is strictly
prohibited. In such case, you should destroy this message and kindly notify
the sender by reply e-mail. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.
Opinions, conclusions, and other information in this message that do not
relate to the official business of the sender's firm shall be understood as
neither given nor endorsed by it. E-mail cannot be guaranteed to be secure,
error free or free from viruses. Royal does not accept any liability
whatsoever for any loss or damage which may be caused as a result of the
transmission of this e-mail.
PRIVILEGED / CONFIDENTIAL INFORMATION may be contained in this message. If
you are not the addressee indicated in this message or the employee or agent
responsible for delivering it to the addressee, you are hereby on notice
that you are in possession of confidential and privileged information. Any
dissemination, distribution, or copying of this e-mail is strictly
prohibited. In such case, you should destroy this message and kindly notify
the sender by reply e-mail. Please advise immediately if you or your
employer do not consent to Internet email for messages of this kind.
Opinions, conclusions, and other information in this message that do not
relate to the official business of the sender's firm shall be understood as
neither given nor endorsed by it. E-mail cannot be guaranteed to be secure,
error free or free from viruses. Royal does not accept any liability
whatsoever for any loss or damage which may be caused as a result of the
transmission of this e-mail.
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop
