peer482 | 3 Jan 12:34 2011

ntop segaults

Hello,


since I installed the new stable version 4, i get ntop crashing after a few minutes. (on Debian 2.6.32-5-686 )
Now i installed from svn and have the same problem.


tl025:/usr/local/var/ntop# ntop -u ntop
Thu Dec 30 11:31:23 2010  NOTE: Interface merge enabled by default
Thu Dec 30 11:31:23 2010  Initializing gdbm databases
Thu Dec 30 11:31:23 2010  **WARNING** -s set so will ATTEMPT to open interface w/o promisc mode (this will probably fail below)
Thu Dec 30 11:31:23 2010  ntop v.4.0.3 (32 bit)
Thu Dec 30 11:31:23 2010  Configured on Dec  8 2010 15:56:10, built on Dec  8 2010 16:00:24.
Thu Dec 30 11:31:23 2010  Copyright 1998-2010 by Luca Deri <deri <at> ntop.org>
Thu Dec 30 11:31:23 2010  Get the freshest ntop from http://www.ntop.org/
Thu Dec 30 11:31:23 2010  NOTE: ntop is running from 'ntop'
Thu Dec 30 11:31:23 2010  NOTE: (but see warning on man page for the --instance parameter)
Thu Dec 30 11:31:23 2010  NOTE: ntop libraries are in '/usr/local/lib'
Thu Dec 30 11:31:23 2010  Initializing ntop
Thu Dec 30 11:31:23 2010  Checking eth0 for additional devices
Thu Dec 30 11:31:23 2010  Resetting traffic statistics for device eth0
Thu Dec 30 11:31:23 2010  Initializing device eth0 (0)
Thu Dec 30 11:31:23 2010  DLT: Device 0 [eth0] is 1, mtu 1514, header 14
Thu Dec 30 11:31:23 2010  Initialized events [mask: 0][path: ]
Thu Dec 30 11:31:23 2010  Initializing gdbm databases
Thu Dec 30 11:31:23 2010  VENDOR: Loading MAC address table.
Thu Dec 30 11:31:23 2010  VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010  VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010  VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010  VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010  VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010  VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010  Fingerprint: Loading signature file
Thu Dec 30 11:31:23 2010  Fingerprint: Checking for Fingerprint file... file
Thu Dec 30 11:31:23 2010  Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz'
Thu Dec 30 11:31:23 2010  Fingerprint: ...loaded 1765 records
Thu Dec 30 11:31:23 2010  Database support not compiled into ntop
Thu Dec 30 11:31:23 2010  Initializing external applications
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Started thread for fingerprinting
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Started thread for idle hosts detection
Thu Dec 30 11:31:23 2010  THREADMGMT[t3014699888]: DNSAR(1): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  THREADMGMT[t3006307184]: DNSAR(2): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  THREADMGMT[t2997914480]: DNSAR(3): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010  GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat
Thu Dec 30 11:31:23 2010  GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat
Thu Dec 30 11:31:23 2010  SSL is present but https is disabled: use -W <https port> for enabling it
Thu Dec 30 11:31:23 2010  INITWEB: Initializing web server
Thu Dec 30 11:31:23 2010  INITWEB: Initializing TCP/IP socket connections for web server
Thu Dec 30 11:31:23 2010  INITWEB: Initialized socket, port 3000, address (any)
Thu Dec 30 11:31:23 2010  INITWEB: Waiting for HTTP connections on port 3000
Thu Dec 30 11:31:23 2010  INITWEB: Starting web server
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: INITWEB: Started thread for web server
Thu Dec 30 11:31:23 2010  Listening on [eth0]
Thu Dec 30 11:31:23 2010  Loading Plugins
Thu Dec 30 11:31:23 2010  Searching for plugins in /usr/local/lib/ntop/plugins
Thu Dec 30 11:31:23 2010  NETFLOW: Welcome to NetFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010  THREADMGMT[t3006307184]: DNSAR(2): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t2997914480]: DNSAR(3): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t3014699888]: DNSAR(1): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Idle host scan thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Fingerprint scan thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: WEB: Server connection thread starting [p7083]
Thu Dec 30 11:31:23 2010  Note: SIGPIPE handler set (ignore)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: WEB: Server connection thread running [p7083]
Thu Dec 30 11:31:23 2010  WEB: ntop's web server is now processing requests
Thu Dec 30 11:31:23 2010  CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri
Thu Dec 30 11:31:23 2010  ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri
Thu Dec 30 11:31:23 2010  SFLOW: Welcome to sFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010  RRD: Welcome to Round-Robin Database. (C) 2002-10 by Luca Deri.
Thu Dec 30 11:31:23 2010  Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010  NETFLOW: Welcome to the netFlow plugin
Thu Dec 30 11:31:23 2010  NETFLOW: initializing ',2,3' devices
Thu Dec 30 11:31:23 2010  Creating dummy interface, 'NetFlow-device.2'
Thu Dec 30 11:31:23 2010  NETFLOW: initializing deviceId=1
Thu Dec 30 11:31:23 2010  NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Created a UDP socket (12)
Thu Dec 30 11:31:23 2010  NETFLOW: Collector listening on port 9997
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: Started thread for receiving flows on port 9997
Thu Dec 30 11:31:23 2010  Initializing device NetFlow-device.2 (1)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010  NETFLOW: createNetFlowDevice created device 1
Thu Dec 30 11:31:23 2010  Creating dummy interface, 'NetFlow-device.3'
Thu Dec 30 11:31:23 2010  NETFLOW: initializing deviceId=2
Thu Dec 30 11:31:23 2010  NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Created a UDP socket (13)
Thu Dec 30 11:31:23 2010  NETFLOW: Collector listening on port 9996
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: Started thread for receiving flows on port 9996
Thu Dec 30 11:31:23 2010  Initializing device NetFlow-device.3 (2)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010  NETFLOW: createNetFlowDevice created device 2
Thu Dec 30 11:31:23 2010  RRD: Welcome to the RRD plugin
Thu Dec 30 11:31:23 2010  RRD: Mask for new directories is 0700
Thu Dec 30 11:31:23 2010  RRD: Mask for new files is 0066
Thu Dec 30 11:31:23 2010  THREADMGMT: RRD: Started thread (t2930379632) for data collection
Thu Dec 30 11:31:23 2010  INIT: Created pid file (/var/run/ntop.pid)
Thu Dec 30 11:31:23 2010  THREADMGMT[t3064145600]: ntop RUNSTATE: INITNONROOT(3)
Thu Dec 30 11:31:23 2010  Now running as requested user 'ntop' (102:104)
Thu Dec 30 11:31:23 2010  Note: Reporting device initally set to 1 [Rath]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3064145600]: ntop RUNSTATE: RUN(4)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(1): Started thread for network packet sniffing [eth0]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: (port 9997) thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Idle host scan thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Fingerprint scan thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: (port 9996) thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2930379632]: RRD: Data collection thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread running [p7083]
Thu Dec 30 11:31:28 2010  CHKVER: Checking current ntop version at version.ntop.org/version.xml
handleHTTPSession(324)
HTTP_DEBUG: 172.25.25.19->131.114.21.22 [GET /version.xml HTTP/1.0
Host: version.ntop.org
User-Agent: ntop/4.0.3 host/i686-pc-linux-gnu distro/debian kernrlse/2.6.32-5-686 GCC/4.4.5 config() run(u) libpcap/1.1.1 gdbm/1.8.3. openssl/0.9.8o zlib/1.2.3.4 access/http interfaces(eth0)
Accept: */*

]
Thu Dec 30 11:31:28 2010  CHKVER: Version file is from 'version.ntop.org'
Thu Dec 30 11:31:28 2010  CHKVER: as of date is '2010-10-06T01:12:25'
Thu Dec 30 11:31:28 2010  CHKVER: This version of ntop is the current DEVELOPMENT version - Expect the unexpected!
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Started thread for throughput data collection
Thu Dec 30 11:31:33 2010  THREADMGMT[t2930379632]: RRD: Data collection thread running [p7083]
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread starting [p7083]
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread running [p7083]
Thu Dec 30 11:35:18 2010  WARNING: Max num hash entries (16384) reached (see -x)
Thu Dec 30 12:03:07 2010  NOTE: -L | --use-syslog=facility not specified, child processes will log to the default (24).
Thu Dec 30 12:03:07 2010  errno 10 while sending page to web client
Thu Dec 30 12:05:09 2010  errno 10 while sending page to web client
Thu Dec 30 12:07:11 2010  errno 10 while sending page to web client
Thu Dec 30 12:13:16 2010  errno 10 while sending page to web client
Thu Dec 30 12:15:18 2010  errno 10 while sending page to web client
Thu Dec 30 12:17:20 2010  errno 10 while sending page to web client
Thu Dec 30 12:21:23 2010  errno 10 while sending page to web client
*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b281)[0xb75a7281]
/lib/i686/cmov/libc.so.6(+0x6cad8)[0xb75a8ad8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb75abbbd]
/usr/local/lib/libntop-4.0.3.so(ntop_safefree+0x2c)[0xb76cb8ec]
/usr/local/lib/libntop-4.0.3.so(dequeueAddress+0x5cd)[0xb76bf06d]
/lib/i686/cmov/libpthread.so.0(+0x5955)[0xb7332955]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7607e7e]
======= Memory map: ========
08048000-08057000 r-xp 00000000 68:01 246096     /usr/local/bin/ntop
08057000-08058000 rw-p 0000f000 68:01 246096     /usr/local/bin/ntop
08058000-0818c000 rw-p 00000000 00:00 0
084b1000-10378000 rw-p 00000000 00:00 0          [heap]
a1800000-a1821000 rw-p 00000000 00:00 0
a1821000-a1900000 ---p 00000000 00:00 0
a1900000-a19fc000 rw-p 00000000 00:00 0
a19fc000-a1a00000 ---p 00000000 00:00 0
a1b00000-a1bfe000 rw-p 00000000 00:00 0
a1bfe000-a1c00000 ---p 00000000 00:00 0
a1c00000-a1d00000 rw-p 00000000 00:00 0
a1d00000-a1efe000 rw-p 00000000 00:00 0
a1efe000-a1f00000 ---p 00000000 00:00 0
a1f00000-a1fff000 rw-p 00000000 00:00 0
a1fff000-a2000000 ---p 00000000 00:00 0
a2000000-a2100000 rw-p 00000000 00:00 0
a2100000-a2300000 rw-p 00000000 00:00 0
a2300000-a24fe000 rw-p 00000000 00:00 0
a24fe000-a2500000 ---p 00000000 00:00 0
a2500000-a2700000 rw-p 00000000 00:00 0
a2700000-a27ff000 rw-p 00000000 00:00 0
a27ff000-a2800000 ---p 00000000 00:00 0
a2800000-a28fe000 rw-p 00000000 00:00 0
a28fe000-a2900000 ---p 00000000 00:00 0
a2900000-a29ff000 rw-p 00000000 00:00 0
a29ff000-a2a00000 ---p 00000000 00:00 0
a2a00000-a2b00000 rw-p 00000000 00:00 0
a2b00000-a2cff000 rw-p 00000000 00:00 0
a2cff000-a2d00000 ---p 00000000 00:00 0
a2d00000-a2f00000 rw-p 00000000 00:00 0
a2f00000-a3100000 rw-p 00000000 00:00 0
a3100000-a31ff000 rw-p 00000000 00:00 0
a31ff000-a3200000 ---p 00000000 00:00 0
a3200000-a32fe000 rw-p 00000000 00:00 0
a32fe000-a3300000 ---p 00000000 00:00 0
a3300000-a33ff000 rw-p 00000000 00:00 0
a33ff000-a3400000 ---p 00000000 00:00 0
a3400000-a34ff000 rw-p 00000000 00:00 0
a34ff000-a3500000 ---p 00000000 00:00 0
a3500000-a3700000 rw-p 00000000 00:00 0
a3700000-a37ff000 rw-p 00000000 00:00 0
a37ff000-a3800000 ---p 00000000 00:00 0
a3800000-a38ff000 rw-p 00000000 00:00 0
a38ff000-a3900000 ---p 00000000 00:00 0
a3900000-a39ff000 rw-p 00000000 00:00 0
a39ff000-a3a00000 ---p 00000000 00:00 0
a3a00000-a3afe000 rw-p 00000000 00:00 0
a3afe000-a3b00000 ---p 00000000 00:00 0
a3b00000-a3bff000 rw-p 00000000 00:00 0
a3bff000-a3c00000 ---p 00000000 00:00 0
a3c00000-a3d00000 rw-p 00000000 00:00 0
a3d00000-a3f00000 rw-p 00000000 00:00 0
a3f00000-a40fe000 rw-p 00000000 00:00 0
a40fe000-a4100000 ---p 00000000 00:00 0
a4100000-a4300000 rw-p 00000000 00:00 0
a4300000-a43ff000 rw-p 00000000 00:00 0
a43ff000-a4400000 ---p 00000000 00:00 0
a4400000-a44ff000 rw-p 00000000 00:00 0
a44ff000-a4500000 ---p 00000000 00:00 0
a4500000-a46ff000 rw-p 00000000 00:00 0
a46ff000-a4700000 ---p 00000000 00:00 0
a4700000-a4900000 rw-p 00000000 00:00 0
a4900000-a4b00000 rw-p 00000000 00:00 0
a4b00000-a4d00000 rw-p 00000000 00:00 0
a4d00000-a4eff000 rw-p 00000000 00:00 0
a4eff000-a4f00000 ---p 00000000 00:00 0
a4f00000-a4ffe000 rw-p 00000000 00:00 0
a4ffe000-a5000000 ---p 00000000 00:00 0
a5000000-a5100000 rw-p 00000000 00:00 0
a5100000-a52ff000 rw-p 00000000 00:00 0
a52ff000-a5300000 ---p 00000000 00:00 0
a5300000-a53ff000 rw-p 00000000 00:00 0
a53ff000-a5400000 ---p 00000000 00:00 0
a5400000-a54ff000 rw-p 00000000 00:00 0
a54ff000-a5500000 ---p 00000000 00:00 0
a5500000-a5700000 rw-p 00000000 00:00 0
a5700000-a5900000 rw-p 00000000 00:00 0
a5900000-a59fe000 rw-p 00000000 00:00 0
a59fe000-a5a00000 ---p 00000000 00:00 0
a5a00000-a5b00000 rw-p 00000000 00:00 0
a5b00000-a5bfe000 rw-p 00000000 00:00 0
a5bfe000-a5c00000 ---p 00000000 00:00 0
a5c00000-a5cfe000 rw-p 00000000 00:00 0
a5cfe000-a5d00000 ---p 00000000 00:00 0
a5d00000-a5f00000 rw-p 00000000 00:00 0
a5f00000-a5ffe000 rw-p 00000000 00:00 0
a5ffe000-a6000000 ---p 00000000 00:00 0
a6000000-a60ff000 rw-p 00000000 00:00 0
a60ff000-a6100000 ---p 00000000 00:00 0
a6100000-a6300000 rw-p 00000000 00:00 0
a6300000-a6500000 rw-p 00000000 00:00 0
a6500000-a65ff000 rw-p 00000000 00:00 0
a65ff000-a6600000 ---p 00000000 00:00 0
a6600000-a6700000 rw-p 00000000 00:00 0
a6700000-a67fe000 rw-p 00000000 00:00 0
a67fe000-a6800000 ---p 00000000 00:00 0
a6800000-a68ff000 rw-p 00000000 00:00 0
a68ff000-a6900000 ---p 00000000 00:00 0
a6900000-a69fe000 rw-p 00000000 00:00 0
a69fe000-a6a00000 ---p 00000000 00:00 0
a6a00000-a6afe000 rw-p 00000000 00:00 0
a6afe000-a6b00000 ---p 00000000 00:00 0
a6b00000-a6bfe000 rw-p 00000000 00:00 0
a6bfe000-a6c00000 ---p 00000000 00:00 0
a6c00000-a6cfe000 rw-p 00000000 00:00 0
a6cfe000-a6d00000 ---p 00000000 00:00 0
a6d00000-a6efe000 rw-p 00000000 00:00 0
a6efe000-a6f00000 ---p 00000000 00:00 0
a6f00000-a7100000 rw-p 00000000 00:00 0
a7100000-a71fe000 rw-p 00000000 00:00 0
a71fe000-a7200000 ---p 00000000 00:00 0
a7200000-a7300000 rw-p 00000000 00:00 0
a7300000-a7500000 rw-p 00000000 00:00 0
a7500000-a75ff000 rw-p 00000000 00:00 0
a75ff000-a7600000 ---p 00000000 00:00 0
a7600000-a76ff000 rw-p 00000000 00:00 0
a76ff000-a7700000 ---p 00000000 00:00 0
a7700000-a7900000 rw-p 00000000 00:00 0
a7900000-a7b00000 rw-p 00000000 00:00 0
a7b00000-a7d00000 rw-p 00000000 00:00 0
a7d00000-a7f00000 rw-p 00000000 00:00 0
a7f00000-a8100000 rw-p 00000000 00:00 0
a8100000-a81fe000 rw-p 00000000 00:00 0
a81fe000-a8200000 ---p 00000000 00:00 0
a8200000-a8300000 rw-p 00000000 00:00 0
a8300000-a8500000 rw-p 00000000 00:00 0
a8500000-a85ff000 rw-p 00000000 00:00 0
a85ff000-a8600000 ---p 00000000 00:00 0
a8600000-a8700000 rw-p 00000000 00:00 0
a8700000-a87fe000 rw-p 00000000 00:00 0
a87fe000-a8800000 ---p 00000000 00:00 0
a8800000-a8900000 rw-p 00000000 00:00 0
a8900000-a8b00000 rw-p 00000000 00:00 0
a8b00000-a8bfe000 rw-p 00000000 00:00 0
a8bfe000-a8c00000 ---p 00000000 00:00 0
a8c00000-a8d00000 rw-p 00000000 00:00 0
a8d00000-a8dff000 rw-p 00000000 00:00 0
a8dff000-a8e00000 ---p 00000000 00:00 0
a8e00000-a8f00000 rw-p 00000000 00:00 0
a8f00000-a8fff000 rw-p 00000000 00:00 0
a8fff000-a9000000 ---p 00000000 00:00 0
a9000000-a9100000 rw-p 00000000 00:00 0
a9100000-a92ff000 rw-p 00000000 00:00 0
a92ff000-a9300000 ---p 00000000 00:00 0
a9300000-a94fe000 rw-p 00000000 00:00 0
a94fe000-a9500000 ---p 00000000 00:00 0
a9500000-a9700000 rw-p 00000000 00:00 0
a9700000-a97fe000 rw-p 00000000 00:00 0
a97fe000-a9800000 ---p 00000000 00:00 0
a9800000-a9900000 rw-p 00000000 00:00 0
a9900000-a9aff000 rw-p 00000000 00:00 0
a9aff000-a9b00000 ---p 00000000 00:00 0
a9b00000-a9bfe000 rw-p 00000000 00:00 0
a9bfe000-a9c00000 ---p 00000000 00:00 0
a9c00000-a9d00000 rw-p 00000000 00:00 0
a9d00000-a9eff000 rw-p 00000000 00:00 0
a9eff000-a9f00000 ---p 00000000 00:00 0
a9f00000-aa0fe000 rw-p 00000000 00:00 0
aa0fe000-aa100000 ---p 00000000 00:00 0
aa100000-aa300000 rw-p 00000000 00:00 0
aa300000-aa3ff000 rw-p 00000000 00:00 0
aa3ff000-aa400000 ---p 00000000 00:00 0
aa400000-aa500000 rw-p 00000000 00:00 0
aa500000-aa6ff000 rw-p 00000000 00:00 0
aa6ff000-aa700000 ---p 00000000 00:00 0
aa700000-aa7ff000 rw-p 00000000 00:00 0
aa7ff000-aa800000 ---p 00000000 00:00 0
aa800000-aa8fe000 rw-p 00000000 00:00 0
aa8fe000-aa900000 ---p 00000000 00:00 0
aa900000-aa9fe000 rw-p 00000000 00:00 0
aa9fe000-aaa00000 ---p 00000000 00:00 0 Abgebrochen


Can anyone give me a hint, what could be wrong?



_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
Michael J. Ayers | 3 Jan 22:01 2011
Picon

Re: ntop segaults

A core file would be beneficial.  Do you by chance have this compiled with PF_RING support (I had an issue with this specifically and one of the CFLAGS I compiled with)?  One of the things I did notice is that very shortly after start up you are hitting your hash max.  It also looks as if you are on a 32 bit build.  Could you be overrunning a counter somewhere?  Have you tried compiling for 64 bit and seeing if the same issue exists?  I could be reading this completely wrong but...


*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***

...sticks out as if you hit some sort of memory (de)allocation or reallocation issue.  But I could be way off base with that assumption.  Try running your code with something like...

export MALLOC_CHECK_=0; ntop

... and see if that alleviates the issue.  I have had similar issues when I run a process as root and the process doesn't have any memory protection code in it.  Try running ntop as its own user in its own user/memory space.  This could also clear up such an issue.

--Michael

On Mon, Jan 3, 2011 at 3:34 AM, peer482 <peer482 <at> googlemail.com> wrote:
Hello,

since I installed the new stable version 4, i get ntop crashing after a few minutes. (on Debian 2.6.32-5-686 )
Now i installed from svn and have the same problem.


tl025:/usr/local/var/ntop# ntop -u ntop
Thu Dec 30 11:31:23 2010  NOTE: Interface merge enabled by default
Thu Dec 30 11:31:23 2010  Initializing gdbm databases
Thu Dec 30 11:31:23 2010  **WARNING** -s set so will ATTEMPT to open interface w/o promisc mode (this will probably fail below)
Thu Dec 30 11:31:23 2010  ntop v.4.0.3 (32 bit)
Thu Dec 30 11:31:23 2010  Configured on Dec  8 2010 15:56:10, built on Dec  8 2010 16:00:24.
Thu Dec 30 11:31:23 2010  Copyright 1998-2010 by Luca Deri <deri <at> ntop.org>
Thu Dec 30 11:31:23 2010  Get the freshest ntop from http://www.ntop.org/
Thu Dec 30 11:31:23 2010  NOTE: ntop is running from 'ntop'
Thu Dec 30 11:31:23 2010  NOTE: (but see warning on man page for the --instance parameter)
Thu Dec 30 11:31:23 2010  NOTE: ntop libraries are in '/usr/local/lib'
Thu Dec 30 11:31:23 2010  Initializing ntop
Thu Dec 30 11:31:23 2010  Checking eth0 for additional devices
Thu Dec 30 11:31:23 2010  Resetting traffic statistics for device eth0
Thu Dec 30 11:31:23 2010  Initializing device eth0 (0)
Thu Dec 30 11:31:23 2010  DLT: Device 0 [eth0] is 1, mtu 1514, header 14
Thu Dec 30 11:31:23 2010  Initialized events [mask: 0][path: ]
Thu Dec 30 11:31:23 2010  Initializing gdbm databases
Thu Dec 30 11:31:23 2010  VENDOR: Loading MAC address table.
Thu Dec 30 11:31:23 2010  VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010  VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010  VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010  VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010  VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010  VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010  Fingerprint: Loading signature file
Thu Dec 30 11:31:23 2010  Fingerprint: Checking for Fingerprint file... file
Thu Dec 30 11:31:23 2010  Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz'
Thu Dec 30 11:31:23 2010  Fingerprint: ...loaded 1765 records
Thu Dec 30 11:31:23 2010  Database support not compiled into ntop
Thu Dec 30 11:31:23 2010  Initializing external applications
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Started thread for fingerprinting
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Started thread for idle hosts detection
Thu Dec 30 11:31:23 2010  THREADMGMT[t3014699888]: DNSAR(1): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  THREADMGMT[t3006307184]: DNSAR(2): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  THREADMGMT[t2997914480]: DNSAR(3): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010  Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010  GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat
Thu Dec 30 11:31:23 2010  GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat
Thu Dec 30 11:31:23 2010  SSL is present but https is disabled: use -W <https port> for enabling it
Thu Dec 30 11:31:23 2010  INITWEB: Initializing web server
Thu Dec 30 11:31:23 2010  INITWEB: Initializing TCP/IP socket connections for web server
Thu Dec 30 11:31:23 2010  INITWEB: Initialized socket, port 3000, address (any)
Thu Dec 30 11:31:23 2010  INITWEB: Waiting for HTTP connections on port 3000
Thu Dec 30 11:31:23 2010  INITWEB: Starting web server
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: INITWEB: Started thread for web server
Thu Dec 30 11:31:23 2010  Listening on [eth0]
Thu Dec 30 11:31:23 2010  Loading Plugins
Thu Dec 30 11:31:23 2010  Searching for plugins in /usr/local/lib/ntop/plugins
Thu Dec 30 11:31:23 2010  NETFLOW: Welcome to NetFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010  THREADMGMT[t3006307184]: DNSAR(2): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t2997914480]: DNSAR(3): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t3014699888]: DNSAR(1): Address resolution thread running
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Idle host scan thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Fingerprint scan thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: WEB: Server connection thread starting [p7083]
Thu Dec 30 11:31:23 2010  Note: SIGPIPE handler set (ignore)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2989521776]: WEB: Server connection thread running [p7083]
Thu Dec 30 11:31:23 2010  WEB: ntop's web server is now processing requests
Thu Dec 30 11:31:23 2010  CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri
Thu Dec 30 11:31:23 2010  ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri
Thu Dec 30 11:31:23 2010  SFLOW: Welcome to sFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010  RRD: Welcome to Round-Robin Database. (C) 2002-10 by Luca Deri.
Thu Dec 30 11:31:23 2010  Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010  NETFLOW: Welcome to the netFlow plugin
Thu Dec 30 11:31:23 2010  NETFLOW: initializing ',2,3' devices
Thu Dec 30 11:31:23 2010  Creating dummy interface, 'NetFlow-device.2'
Thu Dec 30 11:31:23 2010  NETFLOW: initializing deviceId=1
Thu Dec 30 11:31:23 2010  NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Created a UDP socket (12)
Thu Dec 30 11:31:23 2010  NETFLOW: Collector listening on port 9997
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: Started thread for receiving flows on port 9997
Thu Dec 30 11:31:23 2010  Initializing device NetFlow-device.2 (1)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010  NETFLOW: createNetFlowDevice created device 1
Thu Dec 30 11:31:23 2010  Creating dummy interface, 'NetFlow-device.3'
Thu Dec 30 11:31:23 2010  NETFLOW: initializing deviceId=2
Thu Dec 30 11:31:23 2010  NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010  NETFLOW: Created a UDP socket (13)
Thu Dec 30 11:31:23 2010  NETFLOW: Collector listening on port 9996
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: Started thread for receiving flows on port 9996
Thu Dec 30 11:31:23 2010  Initializing device NetFlow-device.3 (2)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010  NETFLOW: createNetFlowDevice created device 2
Thu Dec 30 11:31:23 2010  RRD: Welcome to the RRD plugin
Thu Dec 30 11:31:23 2010  RRD: Mask for new directories is 0700
Thu Dec 30 11:31:23 2010  RRD: Mask for new files is 0066
Thu Dec 30 11:31:23 2010  THREADMGMT: RRD: Started thread (t2930379632) for data collection
Thu Dec 30 11:31:23 2010  INIT: Created pid file (/var/run/ntop.pid)
Thu Dec 30 11:31:23 2010  THREADMGMT[t3064145600]: ntop RUNSTATE: INITNONROOT(3)
Thu Dec 30 11:31:23 2010  Now running as requested user 'ntop' (102:104)
Thu Dec 30 11:31:23 2010  Note: Reporting device initally set to 1 [Rath]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3064145600]: ntop RUNSTATE: RUN(4)
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(1): Started thread for network packet sniffing [eth0]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2964077424]: NETFLOW: (port 9997) thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3023092592]: SIH: Idle host scan thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t3031485296]: SFP: Fingerprint scan thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2938772336]: NETFLOW: (port 9996) thread running [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2930379632]: RRD: Data collection thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread starting [p7083]
Thu Dec 30 11:31:23 2010  THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread running [p7083]
Thu Dec 30 11:31:28 2010  CHKVER: Checking current ntop version at version.ntop.org/version.xml
handleHTTPSession(324)
HTTP_DEBUG: 172.25.25.19->131.114.21.22 [GET /version.xml HTTP/1.0
Host: version.ntop.org
User-Agent: ntop/4.0.3 host/i686-pc-linux-gnu distro/debian kernrlse/2.6.32-5-686 GCC/4.4.5 config() run(u) libpcap/1.1.1 gdbm/1.8.3. openssl/0.9.8o zlib/1.2.3.4 access/http interfaces(eth0)
Accept: */*

]
Thu Dec 30 11:31:28 2010  CHKVER: Version file is from 'version.ntop.org'
Thu Dec 30 11:31:28 2010  CHKVER: as of date is '2010-10-06T01:12:25'
Thu Dec 30 11:31:28 2010  CHKVER: This version of ntop is the current DEVELOPMENT version - Expect the unexpected!
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Started thread for throughput data collection
Thu Dec 30 11:31:33 2010  THREADMGMT[t2930379632]: RRD: Data collection thread running [p7083]
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread starting [p7083]
Thu Dec 30 11:31:33 2010  THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread running [p7083]
Thu Dec 30 11:35:18 2010  WARNING: Max num hash entries (16384) reached (see -x)
Thu Dec 30 12:03:07 2010  NOTE: -L | --use-syslog=facility not specified, child processes will log to the default (24).
Thu Dec 30 12:03:07 2010  errno 10 while sending page to web client
Thu Dec 30 12:05:09 2010  errno 10 while sending page to web client
Thu Dec 30 12:07:11 2010  errno 10 while sending page to web client
Thu Dec 30 12:13:16 2010  errno 10 while sending page to web client
Thu Dec 30 12:15:18 2010  errno 10 while sending page to web client
Thu Dec 30 12:17:20 2010  errno 10 while sending page to web client
Thu Dec 30 12:21:23 2010  errno 10 while sending page to web client
*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b281)[0xb75a7281]
/lib/i686/cmov/libc.so.6(+0x6cad8)[0xb75a8ad8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb75abbbd]
/usr/local/lib/libntop-4.0.3.so(ntop_safefree+0x2c)[0xb76cb8ec]
/usr/local/lib/libntop-4.0.3.so(dequeueAddress+0x5cd)[0xb76bf06d]
/lib/i686/cmov/libpthread.so.0(+0x5955)[0xb7332955]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7607e7e]
======= Memory map: ========
08048000-08057000 r-xp 00000000 68:01 246096     /usr/local/bin/ntop
08057000-08058000 rw-p 0000f000 68:01 246096     /usr/local/bin/ntop
08058000-0818c000 rw-p 00000000 00:00 0
084b1000-10378000 rw-p 00000000 00:00 0          [heap]
a1800000-a1821000 rw-p 00000000 00:00 0
a1821000-a1900000 ---p 00000000 00:00 0
a1900000-a19fc000 rw-p 00000000 00:00 0
a19fc000-a1a00000 ---p 00000000 00:00 0
a1b00000-a1bfe000 rw-p 00000000 00:00 0
a1bfe000-a1c00000 ---p 00000000 00:00 0
a1c00000-a1d00000 rw-p 00000000 00:00 0
a1d00000-a1efe000 rw-p 00000000 00:00 0
a1efe000-a1f00000 ---p 00000000 00:00 0
a1f00000-a1fff000 rw-p 00000000 00:00 0
a1fff000-a2000000 ---p 00000000 00:00 0
a2000000-a2100000 rw-p 00000000 00:00 0
a2100000-a2300000 rw-p 00000000 00:00 0
a2300000-a24fe000 rw-p 00000000 00:00 0
a24fe000-a2500000 ---p 00000000 00:00 0
a2500000-a2700000 rw-p 00000000 00:00 0
a2700000-a27ff000 rw-p 00000000 00:00 0
a27ff000-a2800000 ---p 00000000 00:00 0
a2800000-a28fe000 rw-p 00000000 00:00 0
a28fe000-a2900000 ---p 00000000 00:00 0
a2900000-a29ff000 rw-p 00000000 00:00 0
a29ff000-a2a00000 ---p 00000000 00:00 0
a2a00000-a2b00000 rw-p 00000000 00:00 0
a2b00000-a2cff000 rw-p 00000000 00:00 0
a2cff000-a2d00000 ---p 00000000 00:00 0
a2d00000-a2f00000 rw-p 00000000 00:00 0
a2f00000-a3100000 rw-p 00000000 00:00 0
a3100000-a31ff000 rw-p 00000000 00:00 0
a31ff000-a3200000 ---p 00000000 00:00 0
a3200000-a32fe000 rw-p 00000000 00:00 0
a32fe000-a3300000 ---p 00000000 00:00 0
a3300000-a33ff000 rw-p 00000000 00:00 0
a33ff000-a3400000 ---p 00000000 00:00 0
a3400000-a34ff000 rw-p 00000000 00:00 0
a34ff000-a3500000 ---p 00000000 00:00 0
a3500000-a3700000 rw-p 00000000 00:00 0
a3700000-a37ff000 rw-p 00000000 00:00 0
a37ff000-a3800000 ---p 00000000 00:00 0
a3800000-a38ff000 rw-p 00000000 00:00 0
a38ff000-a3900000 ---p 00000000 00:00 0
a3900000-a39ff000 rw-p 00000000 00:00 0
a39ff000-a3a00000 ---p 00000000 00:00 0
a3a00000-a3afe000 rw-p 00000000 00:00 0
a3afe000-a3b00000 ---p 00000000 00:00 0
a3b00000-a3bff000 rw-p 00000000 00:00 0
a3bff000-a3c00000 ---p 00000000 00:00 0
a3c00000-a3d00000 rw-p 00000000 00:00 0
a3d00000-a3f00000 rw-p 00000000 00:00 0
a3f00000-a40fe000 rw-p 00000000 00:00 0
a40fe000-a4100000 ---p 00000000 00:00 0
a4100000-a4300000 rw-p 00000000 00:00 0
a4300000-a43ff000 rw-p 00000000 00:00 0
a43ff000-a4400000 ---p 00000000 00:00 0
a4400000-a44ff000 rw-p 00000000 00:00 0
a44ff000-a4500000 ---p 00000000 00:00 0
a4500000-a46ff000 rw-p 00000000 00:00 0
a46ff000-a4700000 ---p 00000000 00:00 0
a4700000-a4900000 rw-p 00000000 00:00 0
a4900000-a4b00000 rw-p 00000000 00:00 0
a4b00000-a4d00000 rw-p 00000000 00:00 0
a4d00000-a4eff000 rw-p 00000000 00:00 0
a4eff000-a4f00000 ---p 00000000 00:00 0
a4f00000-a4ffe000 rw-p 00000000 00:00 0
a4ffe000-a5000000 ---p 00000000 00:00 0
a5000000-a5100000 rw-p 00000000 00:00 0
a5100000-a52ff000 rw-p 00000000 00:00 0
a52ff000-a5300000 ---p 00000000 00:00 0
a5300000-a53ff000 rw-p 00000000 00:00 0
a53ff000-a5400000 ---p 00000000 00:00 0
a5400000-a54ff000 rw-p 00000000 00:00 0
a54ff000-a5500000 ---p 00000000 00:00 0
a5500000-a5700000 rw-p 00000000 00:00 0
a5700000-a5900000 rw-p 00000000 00:00 0
a5900000-a59fe000 rw-p 00000000 00:00 0
a59fe000-a5a00000 ---p 00000000 00:00 0
a5a00000-a5b00000 rw-p 00000000 00:00 0
a5b00000-a5bfe000 rw-p 00000000 00:00 0
a5bfe000-a5c00000 ---p 00000000 00:00 0
a5c00000-a5cfe000 rw-p 00000000 00:00 0
a5cfe000-a5d00000 ---p 00000000 00:00 0
a5d00000-a5f00000 rw-p 00000000 00:00 0
a5f00000-a5ffe000 rw-p 00000000 00:00 0
a5ffe000-a6000000 ---p 00000000 00:00 0
a6000000-a60ff000 rw-p 00000000 00:00 0
a60ff000-a6100000 ---p 00000000 00:00 0
a6100000-a6300000 rw-p 00000000 00:00 0
a6300000-a6500000 rw-p 00000000 00:00 0
a6500000-a65ff000 rw-p 00000000 00:00 0
a65ff000-a6600000 ---p 00000000 00:00 0
a6600000-a6700000 rw-p 00000000 00:00 0
a6700000-a67fe000 rw-p 00000000 00:00 0
a67fe000-a6800000 ---p 00000000 00:00 0
a6800000-a68ff000 rw-p 00000000 00:00 0
a68ff000-a6900000 ---p 00000000 00:00 0
a6900000-a69fe000 rw-p 00000000 00:00 0
a69fe000-a6a00000 ---p 00000000 00:00 0
a6a00000-a6afe000 rw-p 00000000 00:00 0
a6afe000-a6b00000 ---p 00000000 00:00 0
a6b00000-a6bfe000 rw-p 00000000 00:00 0
a6bfe000-a6c00000 ---p 00000000 00:00 0
a6c00000-a6cfe000 rw-p 00000000 00:00 0
a6cfe000-a6d00000 ---p 00000000 00:00 0
a6d00000-a6efe000 rw-p 00000000 00:00 0
a6efe000-a6f00000 ---p 00000000 00:00 0
a6f00000-a7100000 rw-p 00000000 00:00 0
a7100000-a71fe000 rw-p 00000000 00:00 0
a71fe000-a7200000 ---p 00000000 00:00 0
a7200000-a7300000 rw-p 00000000 00:00 0
a7300000-a7500000 rw-p 00000000 00:00 0
a7500000-a75ff000 rw-p 00000000 00:00 0
a75ff000-a7600000 ---p 00000000 00:00 0
a7600000-a76ff000 rw-p 00000000 00:00 0
a76ff000-a7700000 ---p 00000000 00:00 0
a7700000-a7900000 rw-p 00000000 00:00 0
a7900000-a7b00000 rw-p 00000000 00:00 0
a7b00000-a7d00000 rw-p 00000000 00:00 0
a7d00000-a7f00000 rw-p 00000000 00:00 0
a7f00000-a8100000 rw-p 00000000 00:00 0
a8100000-a81fe000 rw-p 00000000 00:00 0
a81fe000-a8200000 ---p 00000000 00:00 0
a8200000-a8300000 rw-p 00000000 00:00 0
a8300000-a8500000 rw-p 00000000 00:00 0
a8500000-a85ff000 rw-p 00000000 00:00 0
a85ff000-a8600000 ---p 00000000 00:00 0
a8600000-a8700000 rw-p 00000000 00:00 0
a8700000-a87fe000 rw-p 00000000 00:00 0
a87fe000-a8800000 ---p 00000000 00:00 0
a8800000-a8900000 rw-p 00000000 00:00 0
a8900000-a8b00000 rw-p 00000000 00:00 0
a8b00000-a8bfe000 rw-p 00000000 00:00 0
a8bfe000-a8c00000 ---p 00000000 00:00 0
a8c00000-a8d00000 rw-p 00000000 00:00 0
a8d00000-a8dff000 rw-p 00000000 00:00 0
a8dff000-a8e00000 ---p 00000000 00:00 0
a8e00000-a8f00000 rw-p 00000000 00:00 0
a8f00000-a8fff000 rw-p 00000000 00:00 0
a8fff000-a9000000 ---p 00000000 00:00 0
a9000000-a9100000 rw-p 00000000 00:00 0
a9100000-a92ff000 rw-p 00000000 00:00 0
a92ff000-a9300000 ---p 00000000 00:00 0
a9300000-a94fe000 rw-p 00000000 00:00 0
a94fe000-a9500000 ---p 00000000 00:00 0
a9500000-a9700000 rw-p 00000000 00:00 0
a9700000-a97fe000 rw-p 00000000 00:00 0
a97fe000-a9800000 ---p 00000000 00:00 0
a9800000-a9900000 rw-p 00000000 00:00 0
a9900000-a9aff000 rw-p 00000000 00:00 0
a9aff000-a9b00000 ---p 00000000 00:00 0
a9b00000-a9bfe000 rw-p 00000000 00:00 0
a9bfe000-a9c00000 ---p 00000000 00:00 0
a9c00000-a9d00000 rw-p 00000000 00:00 0
a9d00000-a9eff000 rw-p 00000000 00:00 0
a9eff000-a9f00000 ---p 00000000 00:00 0
a9f00000-aa0fe000 rw-p 00000000 00:00 0
aa0fe000-aa100000 ---p 00000000 00:00 0
aa100000-aa300000 rw-p 00000000 00:00 0
aa300000-aa3ff000 rw-p 00000000 00:00 0
aa3ff000-aa400000 ---p 00000000 00:00 0
aa400000-aa500000 rw-p 00000000 00:00 0
aa500000-aa6ff000 rw-p 00000000 00:00 0
aa6ff000-aa700000 ---p 00000000 00:00 0
aa700000-aa7ff000 rw-p 00000000 00:00 0
aa7ff000-aa800000 ---p 00000000 00:00 0
aa800000-aa8fe000 rw-p 00000000 00:00 0
aa8fe000-aa900000 ---p 00000000 00:00 0
aa900000-aa9fe000 rw-p 00000000 00:00 0
aa9fe000-aaa00000 ---p 00000000 00:00 0 Abgebrochen


Can anyone give me a hint, what could be wrong?




_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev




--
Michael J. Ayers
Senior Systems Engineer
_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
svn-commit | 4 Jan 10:53 2011

r4432 - trunk/ntop/plugins

Author: deri
Date: 2011-01-04 10:53:02 +0100 (Tue, 04 Jan 2011)
New Revision: 4432

Modified:
   trunk/ntop/plugins/rrdPlugin.c
Log:
Fix courtesy of Alexandre Barros <abarros <at> abitecnologia.com.br>
peer482 | 7 Jan 12:18 2011

Re: ntop segaults

Thank you, but I still couldnt find the problem yet.

Although ulimit -a shows core file size unlimited, I dont't get any corefile. Do I need to complie with any special parameters?

I am not using use PF_RING. It is just a standard configuration:

Host System Type        : i686-pc-linux-gnu
Preprocessor (cppflags) :  -DLINUX -I/usr/local/include -I/opt/local/include
Compiler (cflags)       : gcc -g -O2 -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs  -fPIC -DPIC  -I/usr/include/python2.6 -I/usr/include/python2.6 -fno-strict-aliasing -g -O2 -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
Defines                 : -DHAVE_CONFIG_H
Loader (ldflags)        :  -L/usr/local/lib -L/opt/local/lib
Include path            : -I/usr/include/python2.6 -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
System Libs             : -lcrypt -lc -lssl -lcrypto -lrrd_th -lgdbm -lz -lpthread -ldl -lutil -lm -lpython2.6  -lGeoIP
Locale                  : /usr/lib/locale

External packages:

LBL pcap .h             : standard system headers
LBL pcap library        : standard system libraries
GNU gdbm .h             : standard system headers
GNU gdbm library        : standard system libraries
zlib     .h             : standard system headers
zlib     library        : standard system libraries
openSSL  .h             : standard system headers
openSSL  library        : standard system libraries


I am not using a 64bit OS here, so I cant compile for 64bit.

Running with export MALLOC_CHECK_=0; ntop didnt change anything. It crashed quickly again.
Another  standard start of ntop ended after 20 hours.  I don't understand why it was running longer time since I didnt change anything.

When starting ntop as user ntop I get a **FATAL_ERROR** Unable to become root.  By deafult it starts as a daemon with /etc/init.d/ntop start. But this also results in crash after a while.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
Bryan Kolodziej | 7 Jan 20:02 2011

Re: ntop segaults

On Fri, 7 Jan 2011, peer482 wrote:

> Although ulimit -a shows core file size unlimited, I dont't get any 
> corefile. Do I need to complie with any special parameters?

It's possible that ntop is running in a directory to which it cannot write 
as the current user when the process dies.  I was having issues generating 
core files with ntop for this exact reason (it seemed ntop was changing to 
a different directory by itself after starting).  You can check the 
current working directory while it is running by looking in /proc, or by 
using something like lsof, and then change the permissions as necessary. 
Alternately, if the version of Linux you're using supports it you can 
alter the value in /proc/sys/kernel/core_pattern to have the core file be 
generated someplace else (like /tmp).  The core(5) man page has full 
details on that.

> Running with export MALLOC_CHECK_=0; ntop didnt change anything. It 
> crashed quickly again. Another standard start of ntop ended after 20 
> hours.  I don't understand why it was running longer time since I didnt 
> change anything.

I was having a similar issue at one point.  The backtrace seemed to 
indicate the problem was related to DNS resolving issues, and the 
workaround for it was to start ntop with the -n 0 option to turn off DNS 
lookups.  Probably not the best solution, but it did work.  I haven't had 
time to go through the code in greater depth to see if I can patch the 
actual problem.
svn-commit | 7 Jan 23:12 2011

r4433 - trunk/PF_RING/drivers/neterion/vxge

Author: deri
Date: 2011-01-07 23:12:15 +0100 (Fri, 07 Jan 2011)
New Revision: 4433

Added:
   trunk/PF_RING/drivers/neterion/vxge/X3fw-pxe.ncf
Removed:
   trunk/PF_RING/drivers/neterion/vxge/X3fw-pxe.txt
Log:
Added missing file
Michael J. Ayers | 8 Jan 01:43 2011
Picon

Re: ntop segaults

This thread here will show you how to enable core dumps:



See if you can get anything from those once you have them.

--M

On Fri, Jan 7, 2011 at 3:18 AM, peer482 <peer482 <at> googlemail.com> wrote:
Thank you, but I still couldnt find the problem yet.

Although ulimit -a shows core file size unlimited, I dont't get any corefile. Do I need to complie with any special parameters?

I am not using use PF_RING. It is just a standard configuration:

Host System Type        : i686-pc-linux-gnu
Preprocessor (cppflags) :  -DLINUX -I/usr/local/include -I/opt/local/include
Compiler (cflags)       : gcc -g -O2 -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs  -fPIC -DPIC  -I/usr/include/python2.6 -I/usr/include/python2.6 -fno-strict-aliasing -g -O2 -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
Defines                 : -DHAVE_CONFIG_H
Loader (ldflags)        :  -L/usr/local/lib -L/opt/local/lib
Include path            : -I/usr/include/python2.6 -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
System Libs             : -lcrypt -lc -lssl -lcrypto -lrrd_th -lgdbm -lz -lpthread -ldl -lutil -lm -lpython2.6  -lGeoIP
Locale                  : /usr/lib/locale

External packages:

LBL pcap .h             : standard system headers
LBL pcap library        : standard system libraries
GNU gdbm .h             : standard system headers
GNU gdbm library        : standard system libraries
zlib     .h             : standard system headers
zlib     library        : standard system libraries
openSSL  .h             : standard system headers
openSSL  library        : standard system libraries


I am not using a 64bit OS here, so I cant compile for 64bit.

Running with export MALLOC_CHECK_=0; ntop didnt change anything. It crashed quickly again.
Another  standard start of ntop ended after 20 hours.  I don't understand why it was running longer time since I didnt change anything.

When starting ntop as user ntop I get a **FATAL_ERROR** Unable to become root.  By deafult it starts as a daemon with /etc/init.d/ntop start. But this also results in crash after a while.


_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev




--
Michael J. Ayers
Senior Systems Engineer
_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
Tim McIntire | 11 Jan 20:30 2011

SegFault when running Ntop 4.0.1 on Linux

Hi,

 

Having a problem with ntop segfaulting shortly after starting.    I am running ntop on a CentOS linux machine.   I have plugins enabled for both NetFlow and sFlow.

 

Initially it worked, but then I started configuring it to understand what a local vs remote subnet was and since then, it has not worked since.  I have tried to remove/reinstall it, but I cannot seem to remove all the configurations files as it still knows what the sFlow and NetFlow IPs are.

 

Here is the output from gdb.  

 

Do you suggest anything?

 

Tim

 

Program received signal SIGSEGV, Segmentation fault.

[Switching to Thread 0x46409940 (LWP 13885)]

0x00002aaaaad5ff4c in handleHTTPSession (h=0x46409050, fragmentedData=0, tcpWin=40982, srcHost=0x2aaab8005bc0,

    sport=80, dstHost=0x811fa0, dport=58223, sent_length=492, rcvd_length=0, tp=0x46406a50, packetDataLength=440,

    packetData=0x46406ff2 "HTTP/1.1 302 Found\r\nDate: Tue, 11 Jan 2011 14:16:53 GMT\r\nServer: Apache/2.0.39 (Unix) mod_ssl/2.0.39 OpenSSL/0.9.7c\r\nLocation: https://x.x.x.x/\r\nContent-Length: 204\r\nConnection: close\r\nContent-Typ"..., actualDeviceId=0, newSession=0x46406b2a) at sessions.c:1095

1095          allocHostTrafficCounterMemory(srcHost, protocolInfo->httpStats, sizeof(ServiceStats));

(gdb)


Information transmitted by this e-mail is proprietary to Infinite and / or its Customers and is intended for use only by the individual or the entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient or it appears that this mail has been forwarded to you without proper authority, you are notified that any use or dissemination of this information in any manner is strictly prohibited. In such cases, please notify us immediately at sanchar-sadhan <at> infinite.com and delete this email from your records.
_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
peer482 | 12 Jan 07:55 2011

Re: ntop segaults

After I started it with "tmp# ntop -u ntop -n 0" it didnt't crash anymore. Maybe my segfaults were also related to DNS.
Anyways the configuration in the webinterface (configNtop.html?&showD=3)  was set already to  NO DNS = yes. So I wonder, why it was crashing as system deamon too.
I am still testing.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
peer482 | 12 Jan 14:33 2011

Re: ntop segaults

It seems, that I had to enable dumping in /etc/security/limits.conf .
Running  with "ntop - u ntop" I could get a corefile in about 1 h again.

# gdb ntop core.14541

GNU gdb (GDB) 7.0.1-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law.  Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/bin/ntop...done.
[New Thread 14546]
[New Thread 14547]
[New Thread 14548]
[New Thread 14551]
[New Thread 14552]
[New Thread 14553]
[New Thread 14541]
[New Thread 14543]
[New Thread 14544]
[New Thread 14549]
[New Thread 14550]

warning: Can't read pathname for load map: Eingabe-/Ausgabefehler.
Reading symbols from /usr/local/lib/libntopreport-4.0.3.so...done.
Loaded symbols for /usr/local/lib/libntopreport-4.0.3.so

[cut]

Reading symbols from /usr/local/lib/ntop/plugins/netflowPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/netflowPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/cpacketPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/cpacketPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/icmpPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/icmpPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/sflowPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/sflowPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/rrdPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/rrdPlugin.so
Reading symbols from /lib/i686/cmov/libnss_dns.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libnss_dns.so.2
Reading symbols from /lib/i686/cmov/libresolv.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libresolv.so.2
Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libgcc_s.so.1
Core was generated by `ntop -u ntop'.
Program terminated with signal 6, Aborted.
#0  0xb76ef424 in __kernel_vsyscall ()

I am not familiar with debugging. Does this help?

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Gmane