Hi to all, i'm new in this newsletter and i began to use ntop in a few days to monitor my net with this amazing tool. Now, suddenly, after 2-days use i found a great problem, i mean ntop terminate with a SIGSEGV.
After i installed it, it ran for almost 10 minutes before crashing with above error. Now instead it doesn't even start, it terminates as soon as i give ntop with the above error. here there's the error log: Starting ntop... Wait please: ntop is coming up... 07/Nov/2003 14:14:53 Initializing gdbm databases 07/Nov/2003 14:14:54 NOTE: atfork() handler registered for mutexes, rc 0 07/Nov/2003 14:14:54 THREADMGMT: Started thread (1026) for network packet analyser 07/Nov/2003 14:14:54 THREADMGMT: Packet processor thread (1026) started... 07/Nov/2003 14:14:54 THREADMGMT: Started thread (2051) for idle hosts detection 07/Nov/2003 14:14:54 THREADMGMT: Idle Scan thread (2051) started 07/Nov/2003 14:14:54 THREADMGMT: Address resolution thread started... 07/Nov/2003 14:14:54 THREADMGMT: Started thread (3076) for DNS address resolution 07/Nov/2003 14:14:54 Admin user password has been set Wait please: ntop is coming up... 07/Nov/2003 14:14:54 ntop v.2.2c MT [i686-pc-linux-gnu] (10/27/03 05:21:04 PM build) 07/Nov/2003 14:14:54 Copyright 1998-2003 by Luca Deri <[EMAIL PROTECTED]> 07/Nov/2003 14:14:54 Get the freshest ntop from http://www.ntop.org/ 07/Nov/2003 14:14:54 Initializing ntop 07/Nov/2003 14:14:54 Initializing gdbm databases 07/Nov/2003 14:14:54 Listening on [eth0] 07/Nov/2003 14:14:54 **FATAL_ERROR** pcap_dump_open() for suspicious packets: '' 07/Nov/2003 14:14:54 Loading Plugins 07/Nov/2003 14:14:54 Searching for plugins in /usr/local/lib/ntop/plugins 07/Nov/2003 14:14:54 ICMP: Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri 07/Nov/2003 14:14:54 LASTSEEN: Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea Marangoni 07/Nov/2003 14:14:54 NETFLOW: Welcome to NetFlow.(C) 2002 by Luca Deri 07/Nov/2003 14:14:54 NFS: Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri 07/Nov/2003 14:14:54 PDA: Welcome to PDAPlugin. (C) 2001-2002 by L.Deri and W.Brock 07/Nov/2003 14:14:54 SFLOW: Welcome to sFlowPlugin. (C) 2002 by Luca Deri 07/Nov/2003 14:14:54 RRD: Welcome to rrdPlugin. (C) 2002 by Luca Deri. 07/Nov/2003 14:14:54 Plugins loaded... continuing with initialization 07/Nov/2003 14:14:54 ntop started as user nobody 07/Nov/2003 14:14:54 Resetting traffic statistics... 07/Nov/2003 14:14:54 VENDOR: Loading MAC address table. 07/Nov/2003 14:14:54 VENDOR: Checking './specialMAC.txt' 07/Nov/2003 14:14:54 VENDOR: Checking '/usr/local/etc/ntop/specialMAC.txt' 07/Nov/2003 14:14:54 VENDOR: ...found, 61 lines, loaded 59 records! 07/Nov/2003 14:14:54 VENDOR: Checking './oui.txt' 07/Nov/2003 14:14:54 VENDOR: Checking '/usr/local/etc/ntop/oui.txt' 07/Nov/2003 14:14:54 VENDOR: ...found, 70 lines, loaded 62 records! 07/Nov/2003 14:14:54 I18N: This instance of ntop does not support multiple languages 07/Nov/2003 14:14:54 IP2CC: Looking for IP address <-> Country code mapping file 07/Nov/2003 14:14:54 IP2CC: 47455 records read 07/Nov/2003 14:14:54 NOTE: atfork() handler registered for mutexes, rc 0 07/Nov/2003 14:14:54 THREADMGMT: Packet processor thread (0) started... 07/Nov/2003 14:14:54 THREADMGMT: Started thread (1026) for network packet analyser 07/Nov/2003 14:14:54 THREADMGMT: Idle Scan thread (0) started 07/Nov/2003 14:14:54 THREADMGMT: Started thread (2051) for idle hosts detection 07/Nov/2003 14:14:54 THREADMGMT: Started thread (3076) for DNS address resolution 07/Nov/2003 14:14:54 Calling plugin start functions (if any) 07/Nov/2003 14:14:54 WEB: Initializing 07/Nov/2003 14:14:54 Note: Reporting device set to 0[eth0] 07/Nov/2003 14:14:54 WEB: Waiting for HTTP connections on port 6969 07/Nov/2003 14:14:54 THREADMGMT: Address resolution thread started... 07/Nov/2003 14:14:54 THREADMGMT: web connections thread (1826) started... 07/Nov/2003 14:14:54 THREADMGMT: Started thread (4101) for web server 07/Nov/2003 14:14:54 Sniffying... 07/Nov/2003 14:14:54 THREADMGMT: pcap dispatch thread started... 07/Nov/2003 14:14:54 THREADMGMT: Started thread (5126) for network packet sniffing on eth0 07/Nov/2003 14:14:56 Extending hash size [32->512][deviceId=0] 07/Nov/2003 14:15:10 **WARNING** Host [] sent UDP data to a closed port of host [:4672] (scan attempt?) 07/Nov/2003 14:15:15 **WARNING** Host [] sent TCP data to a closed port of host [:55582] (scan attempt?) 07/Nov/2003 14:15:35 **WARNING** Host [] sent UDP data to a closed port of host [:4672] (scan attempt?) 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: caught signal 11 SIGSEGV 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: backtrace is: 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 1. /lib/libpthread.so.0 [0x40329f54] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 2. /lib/libc.so.6 [0x403f56b8] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 3. /usr/local/lib/libntop-2.2c.so(processPacket+0x1d36) [0x4010c762] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 4. /usr/lib/libpcap.so.0 [0x4037cd63] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 5. /usr/lib/libpcap.so.0(pcap_read+0x24) [0x4037cb80] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 6. /usr/lib/libpcap.so.0(pcap_dispatch+0x2f) [0x4037dc5f] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 7. /usr/local/lib/libntop-2.2c.so(pcapDispatch+0x18b) [0x40103ef3] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 8. /lib/libpthread.so.0 [0x403270ba] 07/Nov/2003 14:15:43 **FATAL_ERROR** webserver: BACKTRACE: 9. /lib/libc.so.6(__clone+0x3a) [0x4049bd6a] program where called by ntop -P /var/run/ntop -w 6969 -q, but i making some tests i saw it crashes with every flag i give (before or after). I would like to report more information which i saw are avaibles in one of webserver's page, but unfourtunately i can't .... Ntop is compiled as reportend in INSTALL and no plugins are installed. i'm sorry if some information lacks, just ask and if i can i'll answer Last, i apologize for my bad english, but that's what italian school do! thanks to all for attention Yari _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
