Hi all, My apologies.
Some of the instability may have been due to an update of some libs in /usr/local during a mysql install. I did a relink, but the make may perhaps have not picked up all the altered libs?? I have since done a reconfigure & make clean. All netflow seems OK and it has not stopped on me since. Still get dead ntops lying around, one per session by the look. I can kill -9 them (thought Zombies remained till reboot?) I will see if I can reproduce the GDBM problem, might be a while, it's the prod machine. Regards -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Burton Strauss Sent: 26 August 2006 12:44 AM To: [email protected] Subject: RE: [Ntop] Solaris 9 & Ntop 3.2 stability We go through this periodically with Solaris. First off, starting a new process is expected behavior - it's not EVERY web page, only those which can safely use a copy of the Host Traffic structure. We use fork() and the copy-on-write behavior for performance. Sometimes Solaris doesn't properly kill the children and they become the zombies you see. But they aren't running, so there's no way for the shutdown process to kill 'em. Secondly, the error mVLAN is expected behavior if you in fact are monitoring the same VLAN on multiple interfaces - ntop will see the traffic twice. It's identical (same MAC / IP) so you get a reports, then we assume you have a clue as to what you are doing. But the messages mean exactly what they say. Don't know about the last two netflow stopping collection (although there have been a few reports over time, nobody has been able to reproduce it and catch what is going on). Corrupting prefsDB is new - I'd be interested in whether this is repeatable, and what is actually in the 'corrupted' file. -----Burton (Please note that I am speaking only as an individual and not as a representative of my employer) -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, August 22, 2006 12:26 AM To: [email protected] Subject: Re: [Ntop] Solaris 9 & Ntop 3.2 stability The netflow collection issue appears to be related to this message: Aug 22 14:55:46 cse101u ntop[27123]: [ID 702911 daemon.error] WARNING: Max num TCP sessions (32768) reached (see -X) Which apperas only 5 minutes after ntop start.... Aug 22 14:51:57 cse101u ntop[27123]: [ID 702911 daemon.error] THREADMGMT[t31]: RRD: Data collection thread running [p27123 ] Aug 22 14:51:57 cse101u ntop[27123]: [ID 702911 daemon.error] THREADMGMT[t33]: RRD: Throughput data collection: Thread sta rting [p27123] Aug 22 14:51:57 cse101u ntop[27123]: [ID 702911 daemon.error] THREADMGMT[t33]: RRD: Throughput data collection: Thread run ning [p27123] Aug 22 14:52:13 cse101u ntop[27123]: [ID 702911 daemon.error] **ERROR** mVLAN: Host (identical IP/MAC) found on multiple V LANs Aug 22 14:52:13 cse101u ntop[27123]: [ID 702911 daemon.error] mVLAN: ntop continues but will consolidate and thus probably overcount this traffic .. . . Aug 22 14:55:46 cse101u ntop[27123]: [ID 702911 daemon.error] WARNING: Max num TCP sessions (32768) reached (see -X) ********************************************************************** Any personal or sensitive information contained in this email and attachments must be handled in accordance with the Victorian Information Privacy Act 2000, the Health Records Act 2001 or the Privacy Act 1988 (Commonwealth), as applicable. This email, including all attachments, is confidential. If you are not the intended recipient, you must not disclose, distribute, copy or use the information contained in this email or attachments. Any confidentiality or privilege is not waived or lost because this email has been sent to you in error. If you have received it in error, please let us know by reply email, delete it from your system and destroy any copies. ********************************************************************** _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
