headers
Jose Leitao | 2 Nov 2005 14:15
Picon

[Fwd: Ntop 3.2 Buffer too short?]

Hello,

Well I downloaded the tgz for ntop 3.2, did the regular ./configure 
(--with-localedir=/usr/share/locale/ --enable-i18n) , make and make 
install, no problems so far. My system is Debian Testing (gcc 4.0.2). I 
started ntop with the following command: /usr/local/bin/ntop -i eth1 -n 
-u ntop and everything seemed to be fine, except that after 1 day (23 
hours to be precise), each time I enter the web interface and request 
information (mostly the Network Throughput section), the syslogd starts 
showing this:

Oct 25 10:15:39 monitor ntop[2833]:   **ERROR** EPIPE during sending of 
page to web client
Oct 25 10:15:39 monitor ntop[2833]:   **WARNING** gzflush error 
-2(stream error)
Oct 25 10:17:52 monitor ntop[3029]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 138)
Oct 25 10:17:58 monitor ntop[3083]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Oct 25 10:18:00 monitor ntop[3091]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 148)
Oct 25 10:18:01 monitor ntop[3098]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Oct 25 10:18:02 monitor ntop[3106]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Oct 25 10:18:02 monitor ntop[3112]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Oct 25 10:19:57 monitor ntop[3184]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 138)
Oct 25 10:20:03 monitor ntop[3230]:   **ERROR** Buffer too short  <at>
(Continue reading)

Permalink | Reply | 1 comment |
headers
Jose Leitao | 2 Nov 2005 14:28
Picon

Re: Ntop 3.2 Buffer Underrun?

Hello,

Sorry for the other mails, I didn't saw the reply :P, I'm testing your 
package from unstable, as soon as I have some conclusive results, I'll 
let you know.

Thanks for the help

--
Jose Leitao

Ola Lundqvist wrote:

>Hi
>
>Do the same thing happen with the 3.2 package from unstable?
>
>If so I have to file a bugreport against my package.
>
>Regards,
>
>// Ola
>
>  
>
Permalink | Reply | 0 comments |
headers
Jose Leitao | 2 Nov 2005 14:51
Picon

Re: Ntop 3.2 Buffer Underrun?

Hello,

Pretty much the same thing (uptime of about 50 minutes / errors while 
looking at the Network Throughput), let me know what other debugging 
information I can send:

Nov  2 09:44:03 monitor ntop[22728]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Nov  2 09:44:04 monitor ntop[22735]:   **ERROR** EPIPE during sending of 
page to web client
Nov  2 09:44:04 monitor ntop[22735]:   **WARNING** gzflush error 
-2(stream error)
Nov  2 09:44:11 monitor ntop[22777]:   **ERROR** EPIPE during sending of 
page to web client
Nov  2 09:44:11 monitor ntop[22777]:   **WARNING** gzflush error 
-2(stream error)
Nov  2 09:44:22 monitor ntop[22817]:   **ERROR** EPIPE during sending of 
page to web client
Nov  2 09:44:44 monitor ntop[22951]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 138)
Nov  2 09:44:46 monitor ntop[22970]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 138)
Nov  2 09:46:36 monitor ntop[23047]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 139)
Nov  2 09:46:42 monitor ntop[23094]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 136)
Nov  2 09:46:49 monitor ntop[23156]:   **ERROR** Buffer too short  <at>  
reportUtils.c:3717 (increase to at least 138)
Nov  2 09:47:59 monitor ntop[23179]:   **ERROR** EPIPE during sending of 
page to web client
(Continue reading)

Permalink | Reply | 0 comments |
headers
Kenneth Porter | 2 Nov 2005 22:05

Draft RPM Guide available online (fwd)


------------ Forwarded Message ------------
Date: Wednesday, November 02, 2005 2:35 PM -0600
From: Paul Nasrat <pnasrat <at> redhat.com>
To: rpm-list <at> redhat.com, RPM internals development and distro coordination 
<rpm-devel <at> lists.dulug.duke.edu>, list to discuss the python bindings to 
rpm <rpm-python-list <at> lists.linux.duke.edu>
Cc: fedora-devel-list <at> redhat.com, fedora-docs-list <at> redhat.com
Subject: Draft RPM Guide available online

I'm very pleased to announce that the Red Hat RPM Guide has been made
available under the Open Publication Licence, Version 1.0.

http://fedora.redhat.com/docs/drafts/rpm-guide-en/

This is much more recent than Maximum RPM and gives a good starting
point to work towards living documentation for RPM.  Although some
sections - notably Chapter 7 requires a complete rewrite.  However I
wanted to get it out in it's current form (basically as published plus
errata).

I'd like to thank Eric Foster-Johnson, all those involved in the
original formation of the Guide (particularly Jeff Johnson) and Tammy
Fox and those at the publishers for helping to make this happen.  Also
thanks to the Fedora Docs team in particular Stuart Ellis and Karsten
Wade for their conversion and push efforts

Participation through normal Fedora Documentation process:

http://fedora.redhat.com/projects/docs/
(Continue reading)

Permalink | Reply | 0 comments |
headers
cesar.gallego | 3 Nov 2005 10:59

Ntop-win32 collector -> output file


Hi (Luca?),

Just subscribed to the ntop-dev list, but this is "private question".

By the way, Jean-Philippe Martin-Flatin told me that he knows you very
well. I was working towards my PhD with him in Lausanne, some years ago...

I recently purchased ntop-win32 (3.2) and nprobe-win32 (4.0). Running a
project for a customer. I'm planning to install nprobe on several servers
and use ntop as a collector. I have a problem with the format of the .flow
files generated by ntop. After spending one day in tracing through the perl
script that you provide, I opened the .flow files generated by ntop with an
hex editor. I have the impression that the format is not the one that the
perl scripts expect and the one mentioned in the doc. By the way, the
script works fine on the files generated by nprobe (raw binary dump, no
formatting).

I take the liberty of attaching a 12-flows file generated by ntop. Thow the
data are unusable by anyone, this is the reason why I submit it to the
"private" list. Here is what I can see with an hex editor:

Bytes       Hex               Decimal/Ascii     Comment
1-4         30 36 30 30       0600              OK: 600 bytes in file
5-6         00 05             5                 OK: nprobe is exporting in
netflow V5
7-8         00 0C             12                OK: Number of flows in
file/PDU
9-28                                            OK: Rest of flow header
(sysuptime, unixs, unixns, seq, engT, engID)
(Continue reading)

Permalink | Reply | 0 comments |
headers
Burton Strauss | 7 Nov 2005 19:36

Test - please ignore

(I seem to have stopped getting ntop messages while I was away, so I'm
checking things out)
-----Burton
Permalink | Reply | 0 comments |
headers
Luca Deri | 10 Nov 2005 17:15

Re: [Fwd: Ntop 3.2 Buffer too short?]

Jose,
I've enlarged the buffer, but I believe the problem is somewhere else.
Please give it a try.

Cheers, Luca

Jose Leitao wrote:

> Hello,
>
> Well I downloaded the tgz for ntop 3.2, did the regular ./configure
> (--with-localedir=/usr/share/locale/ --enable-i18n) , make and make
> install, no problems so far. My system is Debian Testing (gcc 4.0.2).
> I started ntop with the following command: /usr/local/bin/ntop -i eth1
> -n -u ntop and everything seemed to be fine, except that after 1 day
> (23 hours to be precise), each time I enter the web interface and
> request information (mostly the Network Throughput section), the
> syslogd starts showing this:
>
> Oct 25 10:15:39 monitor ntop[2833]:   **ERROR** EPIPE during sending
> of page to web client
> Oct 25 10:15:39 monitor ntop[2833]:   **WARNING** gzflush error
> -2(stream error)
> Oct 25 10:17:52 monitor ntop[3029]:   **ERROR** Buffer too short  <at> 
> reportUtils.c:3717 (increase to at least 138)
> Oct 25 10:17:58 monitor ntop[3083]:   **ERROR** Buffer too short  <at> 
> reportUtils.c:3717 (increase to at least 139)
> Oct 25 10:18:00 monitor ntop[3091]:   **ERROR** Buffer too short  <at> 
> reportUtils.c:3717 (increase to at least 148)
> Oct 25 10:18:01 monitor ntop[3098]:   **ERROR** Buffer too short  <at>
(Continue reading)

Permalink | Reply | 0 comments |
headers
Georger Araujo | 10 Nov 2005 21:18
Picon
Favicon

Re: ntop 3.2 released

MinGW-ready sources updated with the small changes
that followed the official release of ntop 3.2. As
always, check http://savefile.com/projects/420840
Both ntop-3.2.zip and ntoponmingw-libs.zip have been
successfully tested with MingW Current (the docs
recommend Previous). No visible difference other than
larger object files, but it's always good to stay up
to date with gcc.
I also recommend re-compiling with the latest OpenSSL
available at
http://www.slproweb.com/products/Win32OpenSSL.html -
0.9.8a was just released.
Burton, Luca, there are still a few differences
between our trees. Would you like me to make patches?
They are MinGW-specific and touch NOTHING in the *nix
and .NET worlds.
Thanks for the VERY solid release. Regards,

Georger

--- Georger Araujo <georger_br <at> yahoo.com.br> escreveu:

> MingW-ready sources and instructions available at
> http://savefile.com/projects/420840
> Regards,
> 
> Georger
(Continue reading)

Permalink | Reply | 1 comment |
headers
jacengel | 12 Nov 2005 20:04
Picon
Favicon

RE: ntop 3.2 released

Georger,
This version compiled  with no problem.
I compiled with Mingw version 5 and Msys version 1.0.10

Same little problem I still have  the web client errors.
And when I package Ntop  I need to copy packet.dll to packet,
same as Kevin Greiner reported.
Thanks Georger

Regards
Jac

-----Original Message-----
From: ntop-dev-bounces <at> unipi.it [mailto:ntop-dev-bounces <at> unipi.it] On Behalf
Of Georger Araujo
Sent: donderdag 10 november 2005 21:19
To: ntop-dev <at> Unipi.IT
Subject: Re: [Ntop-dev] ntop 3.2 released

MinGW-ready sources updated with the small changes
that followed the official release of ntop 3.2. As
always, check http://savefile.com/projects/420840
Both ntop-3.2.zip and ntoponmingw-libs.zip have been successfully tested
with MingW Current (the docs recommend Previous). No visible difference
other than larger object files, but it's always good to stay up to date with
gcc. I also recommend re-compiling with the latest OpenSSL available at
http://www.slproweb.com/products/Win32OpenSSL.html - 0.9.8a was just
released. Burton, Luca, there are still a few differences between our trees.
Would you like me to make patches? They are MinGW-specific and touch NOTHING
in the *nix and .NET worlds. Thanks for the VERY solid release. Regards,
(Continue reading)

Permalink | Reply | 0 comments |
headers
cvs-commit | 14 Nov 2005 12:09

New ntop commit (author deri)

Update of /export/home/ntop/PF_RING/kernel/include/linux
In directory unknown:/tmp/cvs-serv21901/kernel/include/linux

Modified Files:
	ring.h 
Log Message:
Changes:
-Change bucket_len to be consistent. That is, if it is set to 128 bytes return 128 bytes of packet captured
buffer. Earlier this would be 128 bytes -pcap header -1.
-large index size, Without this num_slots can be only upto 65535 due to insert_idx, etc being u_int16_t.
Made it a u_int32_t
-Remove unused code for virt_to_kseg. This creates the most compile failed issues on 2.6 (LARGEMEM, etc)
and is not used.

Tested with 128 bytes capture on a GigE link.

Amit
Permalink | Reply | 0 comments |

Gmane