Well, I made some changes and now get a slightly different output. Please forgive me, I am not a C programmer.
23/Jan/2004 16:04:18 Address resolution queue is full [-3 slots]. Addresses in excess won't be resolved. 23/Jan/2004 16:04:18 Addresses in excess won't be resolved. My changes were: /* Maximum number of queued addresses waiting to be resolved */ #define MAX_NUM_QUEUED_ADDRESSES 8192 [from 4096] /* * Number of (optional) "AR - Address Resolution" threads, * i.e. dequeueAddressThreadId[] and numDequeueThreads in myGlobals. * * You might increase this if you have really slow dns resolution and are running * asyncronously. */ #define MAX_NUM_DEQUEUE_THREADS 4 [from 1] Any thoughts anybody? -- J. Eric Josephson Director of Network and System Operations 978-720-2159 mailto:[EMAIL PROTECTED] "Burton M. Strauss III" To: <[EMAIL PROTECTED]> <[EMAIL PROTECTED] cc: rt.com> Subject: RE: [Ntop] Address resolution queue is full... Sent by: [EMAIL PROTECTED] it 01/23/2004 02:47 PM Please respond to ntop Sounds like the thread died... /* The address queue is far too long. This is usefult for avoiding problems due to DOS applications */ if(myGlobals.addressQueuedCurrent > MAX_NUM_QUEUED_ADDRESSES) { static char shownMsg = 0; if(!shownMsg) { shownMsg = 1; traceEvent(CONST_TRACE_INFO, "Address resolution queue is full [%d slots]. Addresses in excess won't be resolved.", myGlobals.addressQueuedCurrent); traceEvent(CONST_TRACE_INFO, "Addresses in excess won't be resolved."); } return; } Check the value of the constant in globals-defines.h (Obviously the split message can be cleaned up, but it should allow you up to some # of slots). Also, check the info.html report for the stats. -----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > [EMAIL PROTECTED] > Sent: Friday, January 23, 2004 12:43 PM > To: [EMAIL PROTECTED] > Cc: [EMAIL PROTECTED] > Subject: [Ntop] Address resolution queue is full... > > > > > I'm running NTOP from todays CVS. I keep getting a warning in the console > that my Address Resolution queue is full. I looked in the mailing list > history and in the FAQ and did not find anything on this. Is this > something I can adjust and what is the ultimate impact of this situation? > Thanks! > > 23/Jan/2004 13:43:46 Address resolution queue is full [-1 slots]. > Addresses in excess won't be resolved. > 23/Jan/2004 13:43:46 Addresses in excess won't be resolved. > > > > ntop Configuration > > > ntop version.....2.2.99 > Configured on.....Jan 23 2004 13:09:02 > Built on.....Jan 23 2004 13:11:04 > OS.....i686-pc-linux-gnu > This version of ntop is.....the current DEVELOPMENT version - Expect the > unexpected! > Next version recheck is.....Sat Feb 7 14:50:26 2004 > Process Id.....17351 > > > Command line > > Started as....ntop -u ntop -i eth0,eth1 -M -e 10000 -m 10.0.0.0/8 -p > /etc/protocols.ntop -P /tmp > > > > > > > -- > > J. Eric Josephson > Director of Network and System Operations > 978-720-2159 > mailto:[EMAIL PROTECTED] > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
