Hello list and Luca,
I posted this message a few days ago on the ntop-dev list, but i haven't
received any replies yet... is anyone still using that list?
Anyway.... here it is copy&pasted again (and all times i mention there
are relative to november 6th).
In the meantime i have disabled the rrd plugin, it was getting annoying
to clean its mess daily.
-----
Starting since the svn releases of a week or two ago (can't determine
exactly since what svn revision update), ntop is ignoring my hosts
filter for rrd and has started to create rrd files for all hosts that it
sees.
I have defined the rrd hosts filter to only create rrd files for
192.168.0.0/255.255.0.0 but i see that ntop is creating rrd files for
any host, ignoring this setting.
Is there a recent change that i've missed? How can i tell it not to
create any rrd files at all except for the hosts mentioned?
Yesterday i was alerted by logwatch which found that i had an almost
full /var partition, and i tracked it down to ntop, its rrd files alone
were eating up about 30 gigabytes. I trimmed them manually to only have
192.168.x.x in that list, and i also kept the ones for the local
ethernet mac addresses. This way it got down to ~80 megabytes, for only
the hosts i need. Down from 30GBytes that's quite a change.
This morning i found the rrd files have gained weight again, the rrd
databases had already swollen up to 1,8 GBytes, and since this morning
they shot up to3.2GBytes, that's almost another 1,5 gigabyte in less
than three hours!
Ntop is otherwise working fine, no lockups or anything, except for the
rrd thing. What is going on with the rrd storage?
# ./ntop --version
Tue Nov 6 09:24:33 2007 NOTE: Interface merge enabled by default
Tue Nov 6 09:24:33 2007 Initializing gdbm databases
Welcome to ntop v.3.3.4
[Configured on Nov 5 2007 13:57:31, built on Nov 5 2007 15:52:24]
This is the latest one from SVN, revision 3346.
O.S. is fedora 7 with latest updates applied, kernel is 2.6.23.1-21.fc7
i configured ntop as (and yes i know some options are obsolete or
redundant, but if autogen/configure don't complain about them i keep
them around. )
./autogen.sh --prefix=/var/ntop --enable-dependency-tracking --with-pic
--without-ssl --disable-ssl --disable-sslv3 --enable-largerrdpop
--enable-jumbo-frames --with-rrd-home=/usr
and ntop is started as:
#!/bin/sh
/var/ntop/bin/ntop -n -e 512 -d -4 -M -m 192.168.0.0/24 -i eth1 -u ntop
-w 192.168.0.15:1083 -Q /var/ntop/ntop_data -P /var/ntop/ntop_data -O
/var/ntop/ntop_data/logs -a /var/ntop/ntop_data/logs/access.log >>
/var/ntop/ntop_data/logs/logfile.log
Adi
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
