It's always when you want a precise bug, you have the others ...
so some others segfault and at the end the one we last discussed with comments

********* 2.1.57pre: (rrd is 1.0.35-2 from debian)
(gdb) run -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
[New Thread 1024 (LWP 29517)]
Wait please: ntop is coming up...
SSL is present but https is disabled: use -W <https port> for enabling it
[New Thread 2049 (LWP 13749)]
[New Thread 1026 (LWP 28075)]
[New Thread 2051 (LWP 26983)]
[New Thread 3076 (LWP 14261)]
[New Thread 4101 (LWP 26494)]
[New Thread 5126 (LWP 6908)]
[New Thread 6151 (LWP 29287)]
[New Thread 7176 (LWP 8816)]
[New Thread 8201 (LWP 19590)]
[New Thread 9226 (LWP 13662)]
[New Thread 10251 (LWP 15373)]
[New Thread 11276 (LWP 4257)]
Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 4101 (LWP 26494)]
0x00a10836 in rrd_diff () from /usr/lib/librrd.so.0
(gdb)
(gdb) where
#0 0x00a10836 in rrd_diff () from /usr/lib/librrd.so.0
#1 0x00a1cb28 in rrd_update () from /usr/lib/librrd.so.0
#2 0x009ff69e in updateRRD (hostPath=0xb87ff564 "/var/lib/ntop/rrd/interfaces/eth1/", key=0xa04130 "ethernetBytes",
value=3267760, isCounter=1) at rrdPlugin.c:627
#3 0x009ff777 in updateCounter (hostPath=0xb87ff564 "/var/lib/ntop/rrd/interfaces/eth1/", key=0xa04130 "ethernetBytes",
value=3267760) at rrdPlugin.c:651
#4 0x00a01b0e in rrdMainLoop (notUsed=0x0) at rrdPlugin.c:1269
#5 0x00551fa5 in pthread_start_thread () from /lib/libpthread.so.0
#6 0x00551fed in pthread_start_thread_event () from /lib/libpthread.so.0


********* 2.1.56
(gdb) run -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
Starting program: /usr/local/bin/ntop -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
[New Thread 1024 (LWP 13278)]
Wait please: ntop is coming up...
SSL is present but https is disabled: use -W <https port> for enabling it
[New Thread 2049 (LWP 7190)]
[New Thread 1026 (LWP 13558)]
[New Thread 2051 (LWP 27478)]
[New Thread 3076 (LWP 9160)]
[New Thread 4101 (LWP 18482)]
[New Thread 5126 (LWP 15337)]
[New Thread 6151 (LWP 7030)]
[New Thread 7176 (LWP 13192)]
[New Thread 8201 (LWP 3815)]
[New Thread 9226 (LWP 23781)]
[New Thread 10251 (LWP 16439)]
[New Thread 11276 (LWP 4782)]
Cannot find user-level thread for LWP 15337: no LWP to satisfy query
(gdb) where
#0 0x006fe61a in sigsuspend () from /lib/libc.so.6
#1 0x00523699 in __pthread_wait_for_restart_signal () from /lib/libpthread.so.0
#2 0x005249cc in sem_wait@@GLIBC_2.1 () from /lib/libpthread.so.0
#3 0x00240b3e in waitSem (semId=0x27ad30) at util.c:1258
#4 0x00221dff in dequeueAddress (notUsed=0x0) at address.c:445
#5 0x00520fa5 in pthread_start_thread () from /lib/libpthread.so.0
#6 0x00520fed in pthread_start_thread_event () from /lib/libpthread.so.0

ps:
18482 0.0 ntop pts/1 ntop <de
4782 0.0 ntop pts/1 ntop <de
27478 2.8 ntop pts/1 ntop
23781 0.9 ntop pts/1 ntop
16439 0.0 ntop pts/1 ntop
15337 0.8 ntop pts/1 ntop
13558 0.0 ntop pts/1 ntop
13278 0.0 ntop pts/1 ntop
13192 0.0 ntop pts/1 ntop
9160 0.1 ntop pts/1 ntop
7190 0.0 ntop pts/1 ntop
7030 2.5 ntop pts/1 ntop
3815 0.0 ntop pts/1 ntop

********* 2.1.57pre
(gdb) run -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
Starting program: /opt/bin/ntop -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
[New Thread 1024 (LWP 7806)]
Wait please: ntop is coming up...
SSL is present but https is disabled: use -W <https port> for enabling it
[New Thread 2049 (LWP 25339)]
[New Thread 1026 (LWP 25714)]
[New Thread 2051 (LWP 14379)]
[New Thread 3076 (LWP 7464)]
[New Thread 4101 (LWP 1072)]
[New Thread 5126 (LWP 25542)]
[New Thread 6151 (LWP 21670)]
[New Thread 7176 (LWP 5370)]
[New Thread 8201 (LWP 10351)]
[New Thread 9226 (LWP 9964)]
[New Thread 10251 (LWP 364)]
[New Thread 11276 (LWP 24557)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 4101 (LWP 1072)]
0x007ef84b in free () from /lib/libc.so.6
(gdb) where
#0 0x007ef84b in free () from /lib/libc.so.6
#1 0x007ef6d3 in free () from /lib/libc.so.6
#2 0x00a9764e in rrd_update () from /usr/lib/librrd.so.0
#3 0x00a7969e in updateRRD (hostPath=0xb77ff564 "/var/lib/ntop/rrd/interfaces/eth1/", key=0xa7e187 "tcpBytes", value=6040274,
isCounter=1) at rrdPlugin.c:627
#4 0x00a79777 in updateCounter (hostPath=0xb77ff564 "/var/lib/ntop/rrd/interfaces/eth1/", key=0xa7e187 "tcpBytes", value=6040274)
at rrdPlugin.c:651
#5 0x00a7bc10 in rrdMainLoop (notUsed=0x0) at rrdPlugin.c:1277
#6 0x005cbfa5 in pthread_start_thread () from /lib/libpthread.so.0
#7 0x005cbfed in pthread_start_thread_event () from /lib/libpthread.so.0

code rrdPlugin.c: rc = rrd_update(argc, argv);
(gdb) up
#1 0x007ef6d3 in free () from /lib/libc.so.6
(gdb) up
#2 0x00a9764e in rrd_update () from /usr/lib/librrd.so.0
(gdb) up
#3 0x00a7969e in updateRRD (hostPath=0xb77ff564 "/var/lib/ntop/rrd/interfaces/eth1/", key=0xa7e187 "tcpBytes", value=6040274,
isCounter=1) at rrdPlugin.c:627
627 rc = rrd_update(argc, argv);
(gdb) print argc
$1 = 2
(gdb) print argv
$2 = {0xa7d23f "rrd_update", 0xb77fef44 "/var/lib/ntop/rrd/interfaces/eth1/tcpBytes.rrd", 0xb77fee84 "1044804858:6040274", 0x0,
0xb77fefc8 "\001", 0x5ceb45 "[\201�{�", 0x896dd0 "�\\\021", 0xb77ff0d4 "c�\177�", 0x2f3820 "\201L\005\b",
0x0 <repeats 15 times>, 0x7261762f <Address 0x7261762f out of bounds>, 0x62696c2f <Address 0x62696c2f out of bounds>,
0x6f746e2f <Address 0x6f746e2f out of bounds>, 0x72722f70 <Address 0x72722f70 out of bounds>,
0x6e692f64 <Address 0x6e692f64 out of bounds>, 0x66726574 <Address 0x66726574 out of bounds>,
0x73656361 <Address 0x73656361 out of bounds>, 0x6874652f <Address 0x6874652f out of bounds>}

********* 2.1.57pre
(gdb) run -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
Starting program: /opt/bin/ntop -L -u ntop -w 192.168.2.1:3000 -p /etc/ntop/protocol.list -P /var/lib/ntop -a /var/lib/ntop -i eth1,ipsec0,ipsec1,ppp0,tun4,tun32 -t 0 -O /var/log/ntop/ -E -M -m 192.168.2.0/24
[New Thread 1024 (LWP 4140)]
Wait please: ntop is coming up...
SSL is present but https is disabled: use -W <https port> for enabling it
[New Thread 2049 (LWP 4075)]
[New Thread 1026 (LWP 26174)]
[New Thread 2051 (LWP 1400)]
[New Thread 3076 (LWP 26632)]
[New Thread 4101 (LWP 18163)]
[New Thread 5126 (LWP 17051)]
[New Thread 6151 (LWP 2931)]
[New Thread 7176 (LWP 4864)]
[New Thread 8201 (LWP 24253)]
[New Thread 9226 (LWP 17090)]
[New Thread 10251 (LWP 14349)]
[New Thread 11276 (LWP 27625)]

Program received signal SIGSEGV, Segmentation fault.
[Switching to Thread 9226 (LWP 17090)]
0x0020cad0 in processIpPkt (bp=0x8069688 "E", h=0xb7dff990, length=47, ether_src=0x0, ether_dst=0x0, actualDeviceId=3, vlanId=-1)
at pbuf.c:682
682 if((!myGlobals.dontTrustMACaddr)
(gdb) where
#0 0x0020cad0 in processIpPkt (bp=0x8069688 "E", h=0xb7dff990, length=47, ether_src=0x0, ether_dst=0x0, actualDeviceId=3,
vlanId=-1) at pbuf.c:682
#1 0x00210151 in processPacket (_deviceId=0x3 <Address 0x3 out of bounds>, h=0xb7dff990, p=0x8069688 "E") at pbuf.c:1972
#2 0x00830d63 in pcap_read () from /usr/lib/libpcap.so.0
#3 0x00830b80 in pcap_read () from /usr/lib/libpcap.so.0
#4 0x00831c5f in pcap_dispatch () from /usr/lib/libpcap.so.0
#5 0x00209216 in pcapDispatch (_i=0x3) at ntop.c:111
#6 0x00530fa5 in pthread_start_thread () from /lib/libpthread.so.0
#7 0x00530fed in pthread_start_thread_event () from /lib/libpthread.so.0
(gdb) print ip
$1 = {ip_hl = 5, ip_v = 4, ip_tos = 0 '\0', ip_len = 12032, ip_id = 32093, ip_off = 0, ip_ttl = 127 '\177', ip_p = 17 '\021',
ip_sum = 37457, ip_src = {s_addr = 3649090094}, ip_dst = {s_addr = 16777216}}
(gdb) print ethBroadcast
$6 = 0x24a65c "������"
(gdb) print myGlobals.dontTrustMACaddr
$7 = 0
(gdb) info locals
sport = 4662
dport = 4169
ip = {ip_hl = 5, ip_v = 4, ip_tos = 0 '\0', ip_len = 12032, ip_id = 32093, ip_off = 0, ip_ttl = 127 '\177', ip_p = 17 '\021',
ip_sum = 37457, ip_src = {s_addr = 3649090094}, ip_dst = {s_addr = 16777216}}
tp = {th_sport = 35956, th_dport = 37, th_seq = 2250082, th_ack = 3084908944, th_x2 = 10 '\n', th_off = 14 '\016',
th_flags = 220 '�', th_win = 33, th_sum = 29260, th_urp = 37}
up = {uh_sport = 27296, uh_dport = 67, uh_ulen = 38570, uh_sum = 2054}
icmpPkt = {icmp_type = 116 't', icmp_code = 139 '\213', icmp_cksum = 37, icmp_hun = {ih_pptr = 194 '�', ih_gwaddr = {
s_addr = 17090}, ih_idseq = {icd_id = 17090, icd_seq = 0}, ih_void = 17090, ih_pmtu = {ipm_void = 17090, ipm_nextmtu = 0},
ih_rtradv = {irt_num_addrs = 194 '�', irt_wpa = 66 'B', irt_lifetime = 0}}, icmp_dun = {id_ts = {its_otime = 2219494,
its_rtime = 0, its_ttime = 2460532}, id_ip = {idi_ip = {ip_hl = 6, ip_v = 14, ip_tos = 221 '�', ip_len = 33, ip_id = 0,
ip_off = 0, ip_ttl = 116 't', ip_p = 139 '\213', ip_sum = 37, ip_src = {s_addr = 3084908116}, ip_dst = {
s_addr = 2219577}}}, id_radv = {ira_addr = 2219494, ira_preference = 0}, id_mask = 2219494, id_data = "�"}}
hlen = 20
tcpDataLength = 67
udpDataLength = 3084908060
off = 2216942
tcpUdpLen = 3084907940
srcHostIdx = 2909772240
dstHostIdx = 2459680
srcHost = (HostTraffic *) 0x8277778
dstHost = (HostTraffic *) 0x4c9b3798
forceUsingIPaddress = 1 '\001'
tvstrct = {tv_sec = 2216848, tv_usec = 2454092}
theData = (u_char *) 0x0
ctr = {value = 23398113035154980, modified = 76 'L'}

*********
so

ip.ip_p = 17 '\021'
ip.ip_dst.s_addr = 16777216
ip.ip_src.s_addr = 3649090094



i don't understand what 'set -o' (shell cmd ?!), you suggest, can do with that.

Note: as the debian box is a gateway with VPN, there are ipsec/freeswan and openvpn tunnels
Note2: even with -E, ntop doesn't use lsof (/usr/sbin/lsof) and nmap (/usr/bin/nmap) cf web config page, so where ntop supposes them to be ?



Regards

Julien

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to