Try not to run the dev releases unless you must, who knows what condition 
they're in at any given time.

Do you think it's actually dropping packets, just the decimal is off by 3 (or 
more) places?  Or, is this bug just in the way the stats are collected and 
displayed and there is no significant packet loss?

----- Original Message -----
From: [email protected] <[email protected]>
To: [email protected] <[email protected]>
Sent: Wed Aug 12 08:48:59 2009
Subject: [Ntop] Libpcap counter issue?


I have small issue with Ntop 3.3.11-dev that I wonder if anyone else 
sees. Basically at some point the Libpcap Dropped Packet counter starts 
to go crazy increamenting way to fast, basically the more you refresh 
the page the higher the stats go. I noticed it a few weeks ago when I 
was troubleshooting the stability issues on Centos 5.3 but it didn't 
come back until now. This instance of Ntop has been up for 17-18days now 
when suddenly the dropped back went from 2% up and up....

Here is a little example with the time I hit refresh

6:54
Dropped (libpcap)       35.2%   2,104,631,637

6:57
Dropped (libpcap)       40.4%   2,413,942,059

8:40
Dropped (libpcap)       45.4%   2,735,237,999

8:42
Dropped (libpcap)       50.7%   3,057,525,920

I let it be until the next morning  this time I refreshed the page asx 
fast as I could and look what happens.

6:38
Dropped (libpcap)       71.3%   4,666,158,554

6:38
Dropped (libpcap)       74.2%   4,854,085,280

6:38
Dropped (libpcap)       77.0%   5,042,015,632

6:38
Dropped (libpcap)       79.9%   5,229,949,802

6:39
Dropped (libpcap)       82.8%   5,417,891,784


So within 1 min it thinks it has seen 1 Billion packets. :) The network 
is a DS3 but it doesn't do anywhere near 10million packets/sec!

My full config and problem report page can be grabbed from my early 
post  [7/24/09 7:00AM Subject: Centos 5.3 Unstable?]

-Mike
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop





<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 
1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to