I am very sorry to post again so soon, but I have solved my previous issue and ended up back at the question I was really looking to get answered. There are a few buffers that appear to get full and then ntop stops accepting NetFlows, but when I increase these buffers either in the global header or with -x and -X it will then run, but horribly eats memory. I literally ran through 16gb of ram and 6gb of swap space yesterday and had to kill the process. Here is the output given:
Fri 30 Nov 2007 08:47:43 AM CST **WARNING** Address resolution queue is full [4096 slots] Fri 30 Nov 2007 08:47:43 AM CST Addresses in excess won't be resolved - ntop continues Fri 30 Nov 2007 08:48:07 AM CST WARNING: Max num hash entries (8192) reached (see -x) Fri 30 Nov 2007 08:48:23 AM CST WARNING: Max num TCP sessions (32768) reached (see -X) Thank you again for your help, and very sorry for my last post. -Adam _______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
