svn-commit | 1 Nov 17:38 2008

r3617 - trunk/ntop

Author: deri
Date: 2008-11-01 17:38:14 +0100 (Sat, 01 Nov 2008)
New Revision: 3617

Modified:
   trunk/ntop/protocols.c
Log:
DHCP memory allocation fix courtesy of Massimo Torquati
svn-commit | 4 Nov 01:43 2008

r3618 - trunk/PF_RING/userland/examples

Author: deri
Date: 2008-11-04 01:43:22 +0100 (Tue, 04 Nov 2008)
New Revision: 3618

Added:
   trunk/PF_RING/userland/examples/pfmap.c
Modified:
   trunk/PF_RING/userland/examples/Makefile
   trunk/PF_RING/userland/examples/pfcount.c
Log:
Minor changes
Added demo program (work in progress)
svn-commit | 4 Nov 01:43 2008

r3619 - trunk/PF_RING/userland/libpcap-0.9.7-ring

Author: deri
Date: 2008-11-04 01:43:54 +0100 (Tue, 04 Nov 2008)
New Revision: 3619

Modified:
   trunk/PF_RING/userland/libpcap-0.9.7-ring/pcap-linux.c
Log:
Fixed compilation issue
svn-commit | 4 Nov 01:47 2008

r3620 - in trunk/PF_RING/kernel: include/linux net/core net/ring

Author: deri
Date: 2008-11-04 01:47:02 +0100 (Tue, 04 Nov 2008)
New Revision: 3620

Modified:
   trunk/PF_RING/kernel/include/linux/ring.h
   trunk/PF_RING/kernel/net/core/PATCH-1-to-dev.c
   trunk/PF_RING/kernel/net/ring/ring_packet.c
Log:
Changes for supporting direct nic access (pre v4)
Gary Gatten | 4 Nov 21:11 2008

Crash with gdb output herein

Ntop 3.2.1 on FreeBSD 6.0.  I have another instance running on the same box, same code that will run “forever”.  This instance processes WAY more data (netflow) than the other, so must have something to do with the number of sessions, hosts, etc.  Running in gdb again so let me know if there’s something else I need to do.

 

Here’s the args

-K -t 5 -u ntop -i none --disable-instantsessionpurge --instance Home.Office -P

/usr/local/var/ntop -o -d -L -x 32768 -X 65536 -m 10.0.0.0/8,192.168.0.0/16,12.1

54.38.0/24,12.154.39.0/24

 

Program received signal SIGSEGV, Segmentation fault.

[Switching to Thread 0x8060a00 (LWP 100214)]

0x28171d30 in scanTimedoutTCPSessions (actualDeviceId=3) at sessions.c:493

493     sessions.c: No such file or directory.

        in sessions.c

 

bt full

#0  0x28171d30 in scanTimedoutTCPSessions (actualDeviceId=3) at sessions.c:493

        nextSession = (IPSession *) 0x0

        prevSession = (IPSession *) 0x1cb74400

        theSession = (IPSession *) 0x1cb74400

        _idx = 29392

        freeSessionCount = 5857

        purgeLimit = 16616

        idx = 25928

#1  0x28155b53 in purgeIdleHosts (actDevice=3) at hash.c:702

        idx = 847

        numFreedBuckets = 847

        numHosts = 847

        startTime = 672859328

        noSessionPurgeTime = 1225821825

        withSessionPurgeTime = 1225820625

        lastPurgeTime = {1225822424, 1225822424, 1225822425, 1225822425,

  1225822297, 0 <repeats 27 times>}

        firstRun = 0 '\0'

        theFlaggedHosts = (HostTraffic **) 0x0

        maxHosts = 7513

        scannedHosts = 7514

        hiresDeltaTime = -0.100000001

        hiresTimeStart = {tv_sec = 1225822425, tv_usec = 359019}

---Type <return> to continue, or q <return> to quit---

        hiresTimeEnd = {tv_sec = 1225822425, tv_usec = 357034}

        el = (HostTraffic *) 0x281b04c0

        prev = (HostTraffic *) 0x0

        next = (HostTraffic *) 0x8060a00

#2  0x2815e702 in scanIdleLoop (notUsed=0x0) at ntop.c:666

        i = 3

#3  0x288daab1 in pthread_create () from /usr/lib/libpthread.so.2

No symbol table info available.

#4  0x28b3d45f in _ctx_start () from /lib/libc.so.6

No symbol table info available.

 

(gdb) list

666     ntop.c: No such file or directory.

        in ntop.c

 

(gdb) info threads

[New Thread 0x9679400 (sleeping)]

[New Thread 0x8ac9800 (sleeping)]

[New Thread 0x8ac9600 (runnable)]

[New Thread 0x8ac9400 (sleeping)]

[New Thread 0x8ac9200 (runnable)]

[New Thread 0x8ac9000 (runnable)]

[New Thread 0x8060e00 (runnable)]

[New Thread 0x8060c00 (runnable)]

[New Thread 0x8060800 (sleeping)]

[New Thread 0x8060600 (sleeping)]

  14 Thread 0x8060600 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  13 Thread 0x8060800 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  12 Thread 0x8060c00 (runnable)  0x28ae0e73 in kevent () from /lib/libc.so.6

  11 Thread 0x8060e00 (runnable)  0x28ae20b3 in select () from /lib/libc.so.6

  10 Thread 0x8ac9000 (runnable)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  9 Thread 0x8ac9200 (runnable)  0x28ae20b3 in select () from /lib/libc.so.6

  8 Thread 0x8ac9400 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  7 Thread 0x8ac9600 (runnable)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  6 Thread 0x8ac9800 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

  5 Thread 0x9679400 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

* 4 Thread 0x8060a00 (LWP 100214)  0x28171d30 in scanTimedoutTCPSessions (

    actualDeviceId=3) at sessions.c:493

  3 Thread 0x8060200 (LWP 100206)  0x288ef277 in pthread_testcancel ()

   from /usr/lib/libpthread.so.2

  2 Thread 0x8060000 (sleeping)  0x288e7e7f in pthread_mutexattr_init ()

   from /usr/lib/libpthread.so.2

(gdb) info stack

#0  0x28171d30 in scanTimedoutTCPSessions (actualDeviceId=3) at sessions.c:493

#1  0x28155b53 in purgeIdleHosts (actDevice=3) at hash.c:702

#2  0x2815e702 in scanIdleLoop (notUsed=0x0) at ntop.c:666

#3  0x288daab1 in pthread_create () from /usr/lib/libpthread.so.2

#4  0x28b3d45f in _ctx_start () from /lib/libc.so.6

(gdb)

#0  0x28171d30 in scanTimedoutTCPSessions (actualDeviceId=3) at sessions.c:493

#1  0x28155b53 in purgeIdleHosts (actDevice=3) at hash.c:702

#2  0x2815e702 in scanIdleLoop (notUsed=0x0) at ntop.c:666

#3  0x288daab1 in pthread_create () from /usr/lib/libpthread.so.2

#4  0x28b3d45f in _ctx_start () from /lib/libc.so.6

(gdb)

"This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system."
_______________________________________________
Ntop mailing list
Ntop <at> unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
svn-commit | 5 Nov 13:14 2008

r3621 - in trunk/ntop: . plugins

Author: deri
Date: 2008-11-05 13:14:49 +0100 (Wed, 05 Nov 2008)
New Revision: 3621

Removed:
   trunk/ntop/p2c.opt.table.gz
Modified:
   trunk/ntop/configure.in
   trunk/ntop/globals-defines.h
   trunk/ntop/globals-structtypes.h
   trunk/ntop/hash.c
   trunk/ntop/initialize.c
   trunk/ntop/ntop.c
   trunk/ntop/ntop.h
   trunk/ntop/pbuf.c
   trunk/ntop/plugins/rrdPlugin.c
   trunk/ntop/protocols.c
   trunk/ntop/report.c
   trunk/ntop/reportUtils.c
   trunk/ntop/util.c
   trunk/ntop/webInterface.c
Log:
Moved geolocation services to MaxMind GeoIP
Christoph Tilley | 5 Nov 13:10 2008
Picon

ntop Pango-Warning

Hi!

I've managed to install ntop fine via macports, only problem is that  
the rrdtool graphs do not render fine (see attachment)

It seems like the font rendering needs fixing. The logs throw this  
hundreds of times:

(process:11387): Pango-WARNING **: `script_engine_init': symbol not  
found

Please help!

TIA,
criuz
_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
svn-commit | 5 Nov 15:52 2008

r3622 - trunk/ntop

Author: deri
Date: 2008-11-05 15:52:33 +0100 (Wed, 05 Nov 2008)
New Revision: 3622

Modified:
   trunk/ntop/COPYING
   trunk/ntop/INSTALL
   trunk/ntop/acinclude.m4
   trunk/ntop/aclocal.m4
   trunk/ntop/config.sub
   trunk/ntop/configure.in
   trunk/ntop/depcomp
   trunk/ntop/iface.c
   trunk/ntop/install-sh
   trunk/ntop/reportUtils.c
   trunk/ntop/util.c
   trunk/ntop/webInterface.c
Log:
GeoIP fixes
Luca Deri | 5 Nov 16:50 2008

Re: ntop Pango-Warning

Christoph
I have experienced the same problem on my Mac. It seems that the  
problem is on the RRD side and not on ntop

Please keep me posted.

Luca

On Nov 5, 2008, at 1:10 PM, Christoph Tilley wrote:

> Hi!
>
> I've managed to install ntop fine via macports, only problem is that  
> the rrdtool graphs do not render fine (see attachment)
> <rrdPlugin.png>
>
> It seems like the font rendering needs fixing. The logs throw this  
> hundreds of times:
>
> (process:11387): Pango-WARNING **: `script_engine_init': symbol not  
> found
>
>
>
> Please help!
>
> TIA,
> criuz
> _______________________________________________
> Ntop-dev mailing list
> Ntop-dev <at> unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
Christoph Tilley | 5 Nov 21:04 2008
Picon

Re: ntop Pango-Warning

I've posted in the macports mailing list and in the rrdtool mailing  
list.

We'll see what we get.

One more question: I've installed ntop primarily for one reason: I'm  
using an OS X Server as DHCP/NAT and the Apple-provided tools don't  
give network analysis.
So when the network slows down I'd like to know what's going on or  
who is using the bandwidth (eg. local to remote traffic or vice  
versa). What is the best way to view exactly this?

I've been doing it like this for now:
All Protocols -> Throughput -> in the table view the process with the  
most current data-throughput -> click on the process  -> scroll down  
to "Active TCP/UDP Sessions" and look for the client.

Is this the right way or is there an easier one?

Thanks in advance,
Chris

On 05.11.2008, at 16:50, Luca Deri wrote:

> Christoph
> I have experienced the same problem on my Mac. It seems that the
> problem is on the RRD side and not on ntop
>
> Please keep me posted.
>
> Luca
>
> On Nov 5, 2008, at 1:10 PM, Christoph Tilley wrote:
>
>> Hi!
>>
>> I've managed to install ntop fine via macports, only problem is that
>> the rrdtool graphs do not render fine (see attachment)
>> <rrdPlugin.png>
>>
>> It seems like the font rendering needs fixing. The logs throw this
>> hundreds of times:
>>
>> (process:11387): Pango-WARNING **: `script_engine_init': symbol not
>> found
>>
>>
>>
>> Please help!
>>
>> TIA,
>> criuz
>> _______________________________________________
>> Ntop-dev mailing list
>> Ntop-dev <at> unipi.it
>> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
>
> _______________________________________________
> Ntop-dev mailing list
> Ntop-dev <at> unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop-dev
>

Gmane