Bug reports, extensions, etc. related to ntop development

peer482 | 3 Jan 2011 12:34

ntop segaults

Hello,

since I installed the new stable version 4, i get ntop crashing after a few minutes. (on Debian 2.6.32-5-686 )
Now i installed from svn and have the same problem.

tl025:/usr/local/var/ntop# ntop -u ntop
Thu Dec 30 11:31:23 2010 NOTE: Interface merge enabled by default
Thu Dec 30 11:31:23 2010 Initializing gdbm databases
Thu Dec 30 11:31:23 2010 **WARNING** -s set so will ATTEMPT to open interface w/o promisc mode (this will probably fail below)
Thu Dec 30 11:31:23 2010 ntop v.4.0.3 (32 bit)
Thu Dec 30 11:31:23 2010 Configured on Dec 8 2010 15:56:10, built on Dec 8 2010 16:00:24.
Thu Dec 30 11:31:23 2010 Copyright 1998-2010 by Luca Deri <deri <at> ntop.org>
Thu Dec 30 11:31:23 2010 Get the freshest ntop from http://www.ntop.org/
Thu Dec 30 11:31:23 2010 NOTE: ntop is running from 'ntop'
Thu Dec 30 11:31:23 2010 NOTE: (but see warning on man page for the --instance parameter)
Thu Dec 30 11:31:23 2010 NOTE: ntop libraries are in '/usr/local/lib'
Thu Dec 30 11:31:23 2010 Initializing ntop
Thu Dec 30 11:31:23 2010 Checking eth0 for additional devices
Thu Dec 30 11:31:23 2010 Resetting traffic statistics for device eth0
Thu Dec 30 11:31:23 2010 Initializing device eth0 (0)
Thu Dec 30 11:31:23 2010 DLT: Device 0 [eth0] is 1, mtu 1514, header 14
Thu Dec 30 11:31:23 2010 Initialized events [mask: 0][path: ]
Thu Dec 30 11:31:23 2010 Initializing gdbm databases
Thu Dec 30 11:31:23 2010 VENDOR: Loading MAC address table.
Thu Dec 30 11:31:23 2010 VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010 VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010 VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010 VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010 VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010 VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010 Fingerprint: Loading signature file
Thu Dec 30 11:31:23 2010 Fingerprint: Checking for Fingerprint file... file
Thu Dec 30 11:31:23 2010 Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz'
Thu Dec 30 11:31:23 2010 Fingerprint: ...loaded 1765 records
Thu Dec 30 11:31:23 2010 Database support not compiled into ntop
Thu Dec 30 11:31:23 2010 Initializing external applications
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Started thread for fingerprinting
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Started thread for idle hosts detection
Thu Dec 30 11:31:23 2010 THREADMGMT[t3014699888]: DNSAR(1): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 THREADMGMT[t3006307184]: DNSAR(2): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 THREADMGMT[t2997914480]: DNSAR(3): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010 GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat
Thu Dec 30 11:31:23 2010 GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat
Thu Dec 30 11:31:23 2010 SSL is present but https is disabled: use -W <https port> for enabling it
Thu Dec 30 11:31:23 2010 INITWEB: Initializing web server
Thu Dec 30 11:31:23 2010 INITWEB: Initializing TCP/IP socket connections for web server
Thu Dec 30 11:31:23 2010 INITWEB: Initialized socket, port 3000, address (any)
Thu Dec 30 11:31:23 2010 INITWEB: Waiting for HTTP connections on port 3000
Thu Dec 30 11:31:23 2010 INITWEB: Starting web server
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: INITWEB: Started thread for web server
Thu Dec 30 11:31:23 2010 Listening on [eth0]
Thu Dec 30 11:31:23 2010 Loading Plugins
Thu Dec 30 11:31:23 2010 Searching for plugins in /usr/local/lib/ntop/plugins
Thu Dec 30 11:31:23 2010 NETFLOW: Welcome to NetFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010 THREADMGMT[t3006307184]: DNSAR(2): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t2997914480]: DNSAR(3): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t3014699888]: DNSAR(1): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Idle host scan thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Fingerprint scan thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: WEB: Server connection thread starting [p7083]
Thu Dec 30 11:31:23 2010 Note: SIGPIPE handler set (ignore)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: WEB: Server connection thread running [p7083]
Thu Dec 30 11:31:23 2010 WEB: ntop's web server is now processing requests
Thu Dec 30 11:31:23 2010 CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri
Thu Dec 30 11:31:23 2010 ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri
Thu Dec 30 11:31:23 2010 SFLOW: Welcome to sFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010 RRD: Welcome to Round-Robin Database. (C) 2002-10 by Luca Deri.
Thu Dec 30 11:31:23 2010 Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010 NETFLOW: Welcome to the netFlow plugin
Thu Dec 30 11:31:23 2010 NETFLOW: initializing ',2,3' devices
Thu Dec 30 11:31:23 2010 Creating dummy interface, 'NetFlow-device.2'
Thu Dec 30 11:31:23 2010 NETFLOW: initializing deviceId=1
Thu Dec 30 11:31:23 2010 NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Created a UDP socket (12)
Thu Dec 30 11:31:23 2010 NETFLOW: Collector listening on port 9997
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: Started thread for receiving flows on port 9997
Thu Dec 30 11:31:23 2010 Initializing device NetFlow-device.2 (1)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010 NETFLOW: createNetFlowDevice created device 1
Thu Dec 30 11:31:23 2010 Creating dummy interface, 'NetFlow-device.3'
Thu Dec 30 11:31:23 2010 NETFLOW: initializing deviceId=2
Thu Dec 30 11:31:23 2010 NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Created a UDP socket (13)
Thu Dec 30 11:31:23 2010 NETFLOW: Collector listening on port 9996
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: Started thread for receiving flows on port 9996
Thu Dec 30 11:31:23 2010 Initializing device NetFlow-device.3 (2)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010 NETFLOW: createNetFlowDevice created device 2
Thu Dec 30 11:31:23 2010 RRD: Welcome to the RRD plugin
Thu Dec 30 11:31:23 2010 RRD: Mask for new directories is 0700
Thu Dec 30 11:31:23 2010 RRD: Mask for new files is 0066
Thu Dec 30 11:31:23 2010 THREADMGMT: RRD: Started thread (t2930379632) for data collection
Thu Dec 30 11:31:23 2010 INIT: Created pid file (/var/run/ntop.pid)
Thu Dec 30 11:31:23 2010 THREADMGMT[t3064145600]: ntop RUNSTATE: INITNONROOT(3)
Thu Dec 30 11:31:23 2010 Now running as requested user 'ntop' (102:104)
Thu Dec 30 11:31:23 2010 Note: Reporting device initally set to 1 [Rath]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3064145600]: ntop RUNSTATE: RUN(4)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(1): Started thread for network packet sniffing [eth0]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: (port 9997) thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Idle host scan thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Fingerprint scan thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: (port 9996) thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2930379632]: RRD: Data collection thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread running [p7083]
Thu Dec 30 11:31:28 2010 CHKVER: Checking current ntop version at version.ntop.org/version.xml
handleHTTPSession(324)
HTTP_DEBUG: 172.25.25.19->131.114.21.22 [GET /version.xml HTTP/1.0
Host: version.ntop.org
User-Agent: ntop/4.0.3 host/i686-pc-linux-gnu distro/debian kernrlse/2.6.32-5-686 GCC/4.4.5 config() run(u) libpcap/1.1.1 gdbm/1.8.3. openssl/0.9.8o zlib/1.2.3.4 access/http interfaces(eth0)
Accept: */*

]
Thu Dec 30 11:31:28 2010 CHKVER: Version file is from 'version.ntop.org'
Thu Dec 30 11:31:28 2010 CHKVER: as of date is '2010-10-06T01:12:25'
Thu Dec 30 11:31:28 2010 CHKVER: This version of ntop is the current DEVELOPMENT version - Expect the unexpected!
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Started thread for throughput data collection
Thu Dec 30 11:31:33 2010 THREADMGMT[t2930379632]: RRD: Data collection thread running [p7083]
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread starting [p7083]
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread running [p7083]
Thu Dec 30 11:35:18 2010 WARNING: Max num hash entries (16384) reached (see -x)
Thu Dec 30 12:03:07 2010 NOTE: -L | --use-syslog=facility not specified, child processes will log to the default (24).
Thu Dec 30 12:03:07 2010 errno 10 while sending page to web client
Thu Dec 30 12:05:09 2010 errno 10 while sending page to web client
Thu Dec 30 12:07:11 2010 errno 10 while sending page to web client
Thu Dec 30 12:13:16 2010 errno 10 while sending page to web client
Thu Dec 30 12:15:18 2010 errno 10 while sending page to web client
Thu Dec 30 12:17:20 2010 errno 10 while sending page to web client
Thu Dec 30 12:21:23 2010 errno 10 while sending page to web client
*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b281)[0xb75a7281]
/lib/i686/cmov/libc.so.6(+0x6cad8)[0xb75a8ad8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb75abbbd]
/usr/local/lib/libntop-4.0.3.so(ntop_safefree+0x2c)[0xb76cb8ec]
/usr/local/lib/libntop-4.0.3.so(dequeueAddress+0x5cd)[0xb76bf06d]
/lib/i686/cmov/libpthread.so.0(+0x5955)[0xb7332955]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7607e7e]
======= Memory map: ========
08048000-08057000 r-xp 00000000 68:01 246096     /usr/local/bin/ntop
08057000-08058000 rw-p 0000f000 68:01 246096     /usr/local/bin/ntop
08058000-0818c000 rw-p 00000000 00:00 0
084b1000-10378000 rw-p 00000000 00:00 0          [heap]
a1800000-a1821000 rw-p 00000000 00:00 0
a1821000-a1900000 ---p 00000000 00:00 0
a1900000-a19fc000 rw-p 00000000 00:00 0
a19fc000-a1a00000 ---p 00000000 00:00 0
a1b00000-a1bfe000 rw-p 00000000 00:00 0
a1bfe000-a1c00000 ---p 00000000 00:00 0
a1c00000-a1d00000 rw-p 00000000 00:00 0
a1d00000-a1efe000 rw-p 00000000 00:00 0
a1efe000-a1f00000 ---p 00000000 00:00 0
a1f00000-a1fff000 rw-p 00000000 00:00 0
a1fff000-a2000000 ---p 00000000 00:00 0
a2000000-a2100000 rw-p 00000000 00:00 0
a2100000-a2300000 rw-p 00000000 00:00 0
a2300000-a24fe000 rw-p 00000000 00:00 0
a24fe000-a2500000 ---p 00000000 00:00 0
a2500000-a2700000 rw-p 00000000 00:00 0
a2700000-a27ff000 rw-p 00000000 00:00 0
a27ff000-a2800000 ---p 00000000 00:00 0
a2800000-a28fe000 rw-p 00000000 00:00 0
a28fe000-a2900000 ---p 00000000 00:00 0
a2900000-a29ff000 rw-p 00000000 00:00 0
a29ff000-a2a00000 ---p 00000000 00:00 0
a2a00000-a2b00000 rw-p 00000000 00:00 0
a2b00000-a2cff000 rw-p 00000000 00:00 0
a2cff000-a2d00000 ---p 00000000 00:00 0
a2d00000-a2f00000 rw-p 00000000 00:00 0
a2f00000-a3100000 rw-p 00000000 00:00 0
a3100000-a31ff000 rw-p 00000000 00:00 0
a31ff000-a3200000 ---p 00000000 00:00 0
a3200000-a32fe000 rw-p 00000000 00:00 0
a32fe000-a3300000 ---p 00000000 00:00 0
a3300000-a33ff000 rw-p 00000000 00:00 0
a33ff000-a3400000 ---p 00000000 00:00 0
a3400000-a34ff000 rw-p 00000000 00:00 0
a34ff000-a3500000 ---p 00000000 00:00 0
a3500000-a3700000 rw-p 00000000 00:00 0
a3700000-a37ff000 rw-p 00000000 00:00 0
a37ff000-a3800000 ---p 00000000 00:00 0
a3800000-a38ff000 rw-p 00000000 00:00 0
a38ff000-a3900000 ---p 00000000 00:00 0
a3900000-a39ff000 rw-p 00000000 00:00 0
a39ff000-a3a00000 ---p 00000000 00:00 0
a3a00000-a3afe000 rw-p 00000000 00:00 0
a3afe000-a3b00000 ---p 00000000 00:00 0
a3b00000-a3bff000 rw-p 00000000 00:00 0
a3bff000-a3c00000 ---p 00000000 00:00 0
a3c00000-a3d00000 rw-p 00000000 00:00 0
a3d00000-a3f00000 rw-p 00000000 00:00 0
a3f00000-a40fe000 rw-p 00000000 00:00 0
a40fe000-a4100000 ---p 00000000 00:00 0
a4100000-a4300000 rw-p 00000000 00:00 0
a4300000-a43ff000 rw-p 00000000 00:00 0
a43ff000-a4400000 ---p 00000000 00:00 0
a4400000-a44ff000 rw-p 00000000 00:00 0
a44ff000-a4500000 ---p 00000000 00:00 0
a4500000-a46ff000 rw-p 00000000 00:00 0
a46ff000-a4700000 ---p 00000000 00:00 0
a4700000-a4900000 rw-p 00000000 00:00 0
a4900000-a4b00000 rw-p 00000000 00:00 0
a4b00000-a4d00000 rw-p 00000000 00:00 0
a4d00000-a4eff000 rw-p 00000000 00:00 0
a4eff000-a4f00000 ---p 00000000 00:00 0
a4f00000-a4ffe000 rw-p 00000000 00:00 0
a4ffe000-a5000000 ---p 00000000 00:00 0
a5000000-a5100000 rw-p 00000000 00:00 0
a5100000-a52ff000 rw-p 00000000 00:00 0
a52ff000-a5300000 ---p 00000000 00:00 0
a5300000-a53ff000 rw-p 00000000 00:00 0
a53ff000-a5400000 ---p 00000000 00:00 0
a5400000-a54ff000 rw-p 00000000 00:00 0
a54ff000-a5500000 ---p 00000000 00:00 0
a5500000-a5700000 rw-p 00000000 00:00 0
a5700000-a5900000 rw-p 00000000 00:00 0
a5900000-a59fe000 rw-p 00000000 00:00 0
a59fe000-a5a00000 ---p 00000000 00:00 0
a5a00000-a5b00000 rw-p 00000000 00:00 0
a5b00000-a5bfe000 rw-p 00000000 00:00 0
a5bfe000-a5c00000 ---p 00000000 00:00 0
a5c00000-a5cfe000 rw-p 00000000 00:00 0
a5cfe000-a5d00000 ---p 00000000 00:00 0
a5d00000-a5f00000 rw-p 00000000 00:00 0
a5f00000-a5ffe000 rw-p 00000000 00:00 0
a5ffe000-a6000000 ---p 00000000 00:00 0
a6000000-a60ff000 rw-p 00000000 00:00 0
a60ff000-a6100000 ---p 00000000 00:00 0
a6100000-a6300000 rw-p 00000000 00:00 0
a6300000-a6500000 rw-p 00000000 00:00 0
a6500000-a65ff000 rw-p 00000000 00:00 0
a65ff000-a6600000 ---p 00000000 00:00 0
a6600000-a6700000 rw-p 00000000 00:00 0
a6700000-a67fe000 rw-p 00000000 00:00 0
a67fe000-a6800000 ---p 00000000 00:00 0
a6800000-a68ff000 rw-p 00000000 00:00 0
a68ff000-a6900000 ---p 00000000 00:00 0
a6900000-a69fe000 rw-p 00000000 00:00 0
a69fe000-a6a00000 ---p 00000000 00:00 0
a6a00000-a6afe000 rw-p 00000000 00:00 0
a6afe000-a6b00000 ---p 00000000 00:00 0
a6b00000-a6bfe000 rw-p 00000000 00:00 0
a6bfe000-a6c00000 ---p 00000000 00:00 0
a6c00000-a6cfe000 rw-p 00000000 00:00 0
a6cfe000-a6d00000 ---p 00000000 00:00 0
a6d00000-a6efe000 rw-p 00000000 00:00 0
a6efe000-a6f00000 ---p 00000000 00:00 0
a6f00000-a7100000 rw-p 00000000 00:00 0
a7100000-a71fe000 rw-p 00000000 00:00 0
a71fe000-a7200000 ---p 00000000 00:00 0
a7200000-a7300000 rw-p 00000000 00:00 0
a7300000-a7500000 rw-p 00000000 00:00 0
a7500000-a75ff000 rw-p 00000000 00:00 0
a75ff000-a7600000 ---p 00000000 00:00 0
a7600000-a76ff000 rw-p 00000000 00:00 0
a76ff000-a7700000 ---p 00000000 00:00 0
a7700000-a7900000 rw-p 00000000 00:00 0
a7900000-a7b00000 rw-p 00000000 00:00 0
a7b00000-a7d00000 rw-p 00000000 00:00 0
a7d00000-a7f00000 rw-p 00000000 00:00 0
a7f00000-a8100000 rw-p 00000000 00:00 0
a8100000-a81fe000 rw-p 00000000 00:00 0
a81fe000-a8200000 ---p 00000000 00:00 0
a8200000-a8300000 rw-p 00000000 00:00 0
a8300000-a8500000 rw-p 00000000 00:00 0
a8500000-a85ff000 rw-p 00000000 00:00 0
a85ff000-a8600000 ---p 00000000 00:00 0
a8600000-a8700000 rw-p 00000000 00:00 0
a8700000-a87fe000 rw-p 00000000 00:00 0
a87fe000-a8800000 ---p 00000000 00:00 0
a8800000-a8900000 rw-p 00000000 00:00 0
a8900000-a8b00000 rw-p 00000000 00:00 0
a8b00000-a8bfe000 rw-p 00000000 00:00 0
a8bfe000-a8c00000 ---p 00000000 00:00 0
a8c00000-a8d00000 rw-p 00000000 00:00 0
a8d00000-a8dff000 rw-p 00000000 00:00 0
a8dff000-a8e00000 ---p 00000000 00:00 0
a8e00000-a8f00000 rw-p 00000000 00:00 0
a8f00000-a8fff000 rw-p 00000000 00:00 0
a8fff000-a9000000 ---p 00000000 00:00 0
a9000000-a9100000 rw-p 00000000 00:00 0
a9100000-a92ff000 rw-p 00000000 00:00 0
a92ff000-a9300000 ---p 00000000 00:00 0
a9300000-a94fe000 rw-p 00000000 00:00 0
a94fe000-a9500000 ---p 00000000 00:00 0
a9500000-a9700000 rw-p 00000000 00:00 0
a9700000-a97fe000 rw-p 00000000 00:00 0
a97fe000-a9800000 ---p 00000000 00:00 0
a9800000-a9900000 rw-p 00000000 00:00 0
a9900000-a9aff000 rw-p 00000000 00:00 0
a9aff000-a9b00000 ---p 00000000 00:00 0
a9b00000-a9bfe000 rw-p 00000000 00:00 0
a9bfe000-a9c00000 ---p 00000000 00:00 0
a9c00000-a9d00000 rw-p 00000000 00:00 0
a9d00000-a9eff000 rw-p 00000000 00:00 0
a9eff000-a9f00000 ---p 00000000 00:00 0
a9f00000-aa0fe000 rw-p 00000000 00:00 0
aa0fe000-aa100000 ---p 00000000 00:00 0
aa100000-aa300000 rw-p 00000000 00:00 0
aa300000-aa3ff000 rw-p 00000000 00:00 0
aa3ff000-aa400000 ---p 00000000 00:00 0
aa400000-aa500000 rw-p 00000000 00:00 0
aa500000-aa6ff000 rw-p 00000000 00:00 0
aa6ff000-aa700000 ---p 00000000 00:00 0
aa700000-aa7ff000 rw-p 00000000 00:00 0
aa7ff000-aa800000 ---p 00000000 00:00 0
aa800000-aa8fe000 rw-p 00000000 00:00 0
aa8fe000-aa900000 ---p 00000000 00:00 0
aa900000-aa9fe000 rw-p 00000000 00:00 0
aa9fe000-aaa00000 ---p 00000000 00:00 0 Abgebrochen

Can anyone give me a hint, what could be wrong?

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

Michael J. Ayers | 3 Jan 2011 22:01

Re: ntop segaults

A core file would be beneficial. Do you by chance have this compiled with PF_RING support (I had an issue with this specifically and one of the CFLAGS I compiled with)? One of the things I did notice is that very shortly after start up you are hitting your hash max. It also looks as if you are on a 32 bit build. Could you be overrunning a counter somewhere? Have you tried compiling for 64 bit and seeing if the same issue exists? I could be reading this completely wrong but...

*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***

...sticks out as if you hit some sort of memory (de)allocation or reallocation issue. But I could be way off base with that assumption. Try running your code with something like...

export MALLOC_CHECK_=0; ntop

... and see if that alleviates the issue. I have had similar issues when I run a process as root and the process doesn't have any memory protection code in it. Try running ntop as its own user in its own user/memory space. This could also clear up such an issue.

--Michael

On Mon, Jan 3, 2011 at 3:34 AM, peer482 <peer482 <at> googlemail.com> wrote:

Hello,

since I installed the new stable version 4, i get ntop crashing after a few minutes. (on Debian 2.6.32-5-686 )
Now i installed from svn and have the same problem.

tl025:/usr/local/var/ntop# ntop -u ntop
Thu Dec 30 11:31:23 2010 NOTE: Interface merge enabled by default
Thu Dec 30 11:31:23 2010 Initializing gdbm databases
Thu Dec 30 11:31:23 2010 **WARNING** -s set so will ATTEMPT to open interface w/o promisc mode (this will probably fail below)
Thu Dec 30 11:31:23 2010 ntop v.4.0.3 (32 bit)
Thu Dec 30 11:31:23 2010 Configured on Dec 8 2010 15:56:10, built on Dec 8 2010 16:00:24.
Thu Dec 30 11:31:23 2010 Copyright 1998-2010 by Luca Deri <deri <at> ntop.org>
Thu Dec 30 11:31:23 2010 Get the freshest ntop from http://www.ntop.org/
Thu Dec 30 11:31:23 2010 NOTE: ntop is running from 'ntop'
Thu Dec 30 11:31:23 2010 NOTE: (but see warning on man page for the --instance parameter)
Thu Dec 30 11:31:23 2010 NOTE: ntop libraries are in '/usr/local/lib'
Thu Dec 30 11:31:23 2010 Initializing ntop
Thu Dec 30 11:31:23 2010 Checking eth0 for additional devices
Thu Dec 30 11:31:23 2010 Resetting traffic statistics for device eth0
Thu Dec 30 11:31:23 2010 Initializing device eth0 (0)
Thu Dec 30 11:31:23 2010 DLT: Device 0 [eth0] is 1, mtu 1514, header 14
Thu Dec 30 11:31:23 2010 Initialized events [mask: 0][path: ]
Thu Dec 30 11:31:23 2010 Initializing gdbm databases
Thu Dec 30 11:31:23 2010 VENDOR: Loading MAC address table.
Thu Dec 30 11:31:23 2010 VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010 VENDOR: File '/usr/local/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010 VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010 VENDOR: Checking for MAC address table file
Thu Dec 30 11:31:23 2010 VENDOR: File '/usr/local/etc/ntop/oui.txt.gz' does not need to be reloaded
Thu Dec 30 11:31:23 2010 VENDOR: ntop continues ok
Thu Dec 30 11:31:23 2010 Fingerprint: Loading signature file
Thu Dec 30 11:31:23 2010 Fingerprint: Checking for Fingerprint file... file
Thu Dec 30 11:31:23 2010 Fingerprint: Loading file '/usr/local/etc/ntop/etter.finger.os.gz'
Thu Dec 30 11:31:23 2010 Fingerprint: ...loaded 1765 records
Thu Dec 30 11:31:23 2010 Database support not compiled into ntop
Thu Dec 30 11:31:23 2010 Initializing external applications
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Started thread for fingerprinting
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Started thread for idle hosts detection
Thu Dec 30 11:31:23 2010 THREADMGMT[t3014699888]: DNSAR(1): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 THREADMGMT[t3006307184]: DNSAR(2): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 THREADMGMT[t2997914480]: DNSAR(3): Started thread for DNS address resolution
Thu Dec 30 11:31:23 2010 Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010 GeoIP: loaded config file /usr/local/etc/ntop/GeoLiteCity.dat
Thu Dec 30 11:31:23 2010 GeoIP: loaded ASN config file /usr/local/etc/ntop/GeoIPASNum.dat
Thu Dec 30 11:31:23 2010 SSL is present but https is disabled: use -W <https port> for enabling it
Thu Dec 30 11:31:23 2010 INITWEB: Initializing web server
Thu Dec 30 11:31:23 2010 INITWEB: Initializing TCP/IP socket connections for web server
Thu Dec 30 11:31:23 2010 INITWEB: Initialized socket, port 3000, address (any)
Thu Dec 30 11:31:23 2010 INITWEB: Waiting for HTTP connections on port 3000
Thu Dec 30 11:31:23 2010 INITWEB: Starting web server
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: INITWEB: Started thread for web server
Thu Dec 30 11:31:23 2010 Listening on [eth0]
Thu Dec 30 11:31:23 2010 Loading Plugins
Thu Dec 30 11:31:23 2010 Searching for plugins in /usr/local/lib/ntop/plugins
Thu Dec 30 11:31:23 2010 NETFLOW: Welcome to NetFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010 THREADMGMT[t3006307184]: DNSAR(2): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t2997914480]: DNSAR(3): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t3014699888]: DNSAR(1): Address resolution thread running
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Idle host scan thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Fingerprint scan thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: WEB: Server connection thread starting [p7083]
Thu Dec 30 11:31:23 2010 Note: SIGPIPE handler set (ignore)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2989521776]: WEB: Server connection thread running [p7083]
Thu Dec 30 11:31:23 2010 WEB: ntop's web server is now processing requests
Thu Dec 30 11:31:23 2010 CPACKET: Welcome to cPacket.(C) 2008 by Luca Deri
Thu Dec 30 11:31:23 2010 ICMP: Welcome to ICMPWatch. (C) 1999-2005 by Luca Deri
Thu Dec 30 11:31:23 2010 SFLOW: Welcome to sFlow.(C) 2002-10 by Luca Deri
Thu Dec 30 11:31:23 2010 RRD: Welcome to Round-Robin Database. (C) 2002-10 by Luca Deri.
Thu Dec 30 11:31:23 2010 Calling plugin start functions (if any)
Thu Dec 30 11:31:23 2010 NETFLOW: Welcome to the netFlow plugin
Thu Dec 30 11:31:23 2010 NETFLOW: initializing ',2,3' devices
Thu Dec 30 11:31:23 2010 Creating dummy interface, 'NetFlow-device.2'
Thu Dec 30 11:31:23 2010 NETFLOW: initializing deviceId=1
Thu Dec 30 11:31:23 2010 NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Created a UDP socket (12)
Thu Dec 30 11:31:23 2010 NETFLOW: Collector listening on port 9997
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: Started thread for receiving flows on port 9997
Thu Dec 30 11:31:23 2010 Initializing device NetFlow-device.2 (1)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010 NETFLOW: createNetFlowDevice created device 1
Thu Dec 30 11:31:23 2010 Creating dummy interface, 'NetFlow-device.3'
Thu Dec 30 11:31:23 2010 NETFLOW: initializing deviceId=2
Thu Dec 30 11:31:23 2010 NETFLOW: White list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Black list initialized to ''
Thu Dec 30 11:31:23 2010 NETFLOW: Created a UDP socket (13)
Thu Dec 30 11:31:23 2010 NETFLOW: Collector listening on port 9996
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: Started thread for receiving flows on port 9996
Thu Dec 30 11:31:23 2010 Initializing device NetFlow-device.3 (2)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: thread starting [p7083]
Thu Dec 30 11:31:23 2010 NETFLOW: createNetFlowDevice created device 2
Thu Dec 30 11:31:23 2010 RRD: Welcome to the RRD plugin
Thu Dec 30 11:31:23 2010 RRD: Mask for new directories is 0700
Thu Dec 30 11:31:23 2010 RRD: Mask for new files is 0066
Thu Dec 30 11:31:23 2010 THREADMGMT: RRD: Started thread (t2930379632) for data collection
Thu Dec 30 11:31:23 2010 INIT: Created pid file (/var/run/ntop.pid)
Thu Dec 30 11:31:23 2010 THREADMGMT[t3064145600]: ntop RUNSTATE: INITNONROOT(3)
Thu Dec 30 11:31:23 2010 Now running as requested user 'ntop' (102:104)
Thu Dec 30 11:31:23 2010 Note: Reporting device initally set to 1 [Rath]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3064145600]: ntop RUNSTATE: RUN(4)
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(1): Started thread for network packet sniffing [eth0]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2964077424]: NETFLOW: (port 9997) thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3023092592]: SIH: Idle host scan thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t3031485296]: SFP: Fingerprint scan thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2938772336]: NETFLOW: (port 9996) thread running [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2930379632]: RRD: Data collection thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread starting [p7083]
Thu Dec 30 11:31:23 2010 THREADMGMT[t2921986928]: NPS(eth0): pcapDispatch thread running [p7083]
Thu Dec 30 11:31:28 2010 CHKVER: Checking current ntop version at version.ntop.org/version.xml
handleHTTPSession(324)
HTTP_DEBUG: 172.25.25.19->131.114.21.22 [GET /version.xml HTTP/1.0
Host: version.ntop.org
User-Agent: ntop/4.0.3 host/i686-pc-linux-gnu distro/debian kernrlse/2.6.32-5-686 GCC/4.4.5 config() run(u) libpcap/1.1.1 gdbm/1.8.3. openssl/0.9.8o zlib/1.2.3.4 access/http interfaces(eth0)
Accept: */*

]
Thu Dec 30 11:31:28 2010 CHKVER: Version file is from 'version.ntop.org'
Thu Dec 30 11:31:28 2010 CHKVER: as of date is '2010-10-06T01:12:25'
Thu Dec 30 11:31:28 2010 CHKVER: This version of ntop is the current DEVELOPMENT version - Expect the unexpected!
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Started thread for throughput data collection
Thu Dec 30 11:31:33 2010 THREADMGMT[t2930379632]: RRD: Data collection thread running [p7083]
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread starting [p7083]
Thu Dec 30 11:31:33 2010 THREADMGMT[t2903505776]: RRD: Throughput data collection: Thread running [p7083]
Thu Dec 30 11:35:18 2010 WARNING: Max num hash entries (16384) reached (see -x)
Thu Dec 30 12:03:07 2010 NOTE: -L | --use-syslog=facility not specified, child processes will log to the default (24).
Thu Dec 30 12:03:07 2010 errno 10 while sending page to web client
Thu Dec 30 12:05:09 2010 errno 10 while sending page to web client
Thu Dec 30 12:07:11 2010 errno 10 while sending page to web client
Thu Dec 30 12:13:16 2010 errno 10 while sending page to web client
Thu Dec 30 12:15:18 2010 errno 10 while sending page to web client
Thu Dec 30 12:17:20 2010 errno 10 while sending page to web client
Thu Dec 30 12:21:23 2010 errno 10 while sending page to web client
*** glibc detected *** ntop: double free or corruption (fasttop): 0xa20716f0 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6(+0x6b281)[0xb75a7281]
/lib/i686/cmov/libc.so.6(+0x6cad8)[0xb75a8ad8]
/lib/i686/cmov/libc.so.6(cfree+0x6d)[0xb75abbbd]
/usr/local/lib/libntop-4.0.3.so(ntop_safefree+0x2c)[0xb76cb8ec]
/usr/local/lib/libntop-4.0.3.so(dequeueAddress+0x5cd)[0xb76bf06d]
/lib/i686/cmov/libpthread.so.0(+0x5955)[0xb7332955]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7607e7e]
======= Memory map: ========
08048000-08057000 r-xp 00000000 68:01 246096     /usr/local/bin/ntop
08057000-08058000 rw-p 0000f000 68:01 246096     /usr/local/bin/ntop
08058000-0818c000 rw-p 00000000 00:00 0
084b1000-10378000 rw-p 00000000 00:00 0          [heap]
a1800000-a1821000 rw-p 00000000 00:00 0
a1821000-a1900000 ---p 00000000 00:00 0
a1900000-a19fc000 rw-p 00000000 00:00 0
a19fc000-a1a00000 ---p 00000000 00:00 0
a1b00000-a1bfe000 rw-p 00000000 00:00 0
a1bfe000-a1c00000 ---p 00000000 00:00 0
a1c00000-a1d00000 rw-p 00000000 00:00 0
a1d00000-a1efe000 rw-p 00000000 00:00 0
a1efe000-a1f00000 ---p 00000000 00:00 0
a1f00000-a1fff000 rw-p 00000000 00:00 0
a1fff000-a2000000 ---p 00000000 00:00 0
a2000000-a2100000 rw-p 00000000 00:00 0
a2100000-a2300000 rw-p 00000000 00:00 0
a2300000-a24fe000 rw-p 00000000 00:00 0
a24fe000-a2500000 ---p 00000000 00:00 0
a2500000-a2700000 rw-p 00000000 00:00 0
a2700000-a27ff000 rw-p 00000000 00:00 0
a27ff000-a2800000 ---p 00000000 00:00 0
a2800000-a28fe000 rw-p 00000000 00:00 0
a28fe000-a2900000 ---p 00000000 00:00 0
a2900000-a29ff000 rw-p 00000000 00:00 0
a29ff000-a2a00000 ---p 00000000 00:00 0
a2a00000-a2b00000 rw-p 00000000 00:00 0
a2b00000-a2cff000 rw-p 00000000 00:00 0
a2cff000-a2d00000 ---p 00000000 00:00 0
a2d00000-a2f00000 rw-p 00000000 00:00 0
a2f00000-a3100000 rw-p 00000000 00:00 0
a3100000-a31ff000 rw-p 00000000 00:00 0
a31ff000-a3200000 ---p 00000000 00:00 0
a3200000-a32fe000 rw-p 00000000 00:00 0
a32fe000-a3300000 ---p 00000000 00:00 0
a3300000-a33ff000 rw-p 00000000 00:00 0
a33ff000-a3400000 ---p 00000000 00:00 0
a3400000-a34ff000 rw-p 00000000 00:00 0
a34ff000-a3500000 ---p 00000000 00:00 0
a3500000-a3700000 rw-p 00000000 00:00 0
a3700000-a37ff000 rw-p 00000000 00:00 0
a37ff000-a3800000 ---p 00000000 00:00 0
a3800000-a38ff000 rw-p 00000000 00:00 0
a38ff000-a3900000 ---p 00000000 00:00 0
a3900000-a39ff000 rw-p 00000000 00:00 0
a39ff000-a3a00000 ---p 00000000 00:00 0
a3a00000-a3afe000 rw-p 00000000 00:00 0
a3afe000-a3b00000 ---p 00000000 00:00 0
a3b00000-a3bff000 rw-p 00000000 00:00 0
a3bff000-a3c00000 ---p 00000000 00:00 0
a3c00000-a3d00000 rw-p 00000000 00:00 0
a3d00000-a3f00000 rw-p 00000000 00:00 0
a3f00000-a40fe000 rw-p 00000000 00:00 0
a40fe000-a4100000 ---p 00000000 00:00 0
a4100000-a4300000 rw-p 00000000 00:00 0
a4300000-a43ff000 rw-p 00000000 00:00 0
a43ff000-a4400000 ---p 00000000 00:00 0
a4400000-a44ff000 rw-p 00000000 00:00 0
a44ff000-a4500000 ---p 00000000 00:00 0
a4500000-a46ff000 rw-p 00000000 00:00 0
a46ff000-a4700000 ---p 00000000 00:00 0
a4700000-a4900000 rw-p 00000000 00:00 0
a4900000-a4b00000 rw-p 00000000 00:00 0
a4b00000-a4d00000 rw-p 00000000 00:00 0
a4d00000-a4eff000 rw-p 00000000 00:00 0
a4eff000-a4f00000 ---p 00000000 00:00 0
a4f00000-a4ffe000 rw-p 00000000 00:00 0
a4ffe000-a5000000 ---p 00000000 00:00 0
a5000000-a5100000 rw-p 00000000 00:00 0
a5100000-a52ff000 rw-p 00000000 00:00 0
a52ff000-a5300000 ---p 00000000 00:00 0
a5300000-a53ff000 rw-p 00000000 00:00 0
a53ff000-a5400000 ---p 00000000 00:00 0
a5400000-a54ff000 rw-p 00000000 00:00 0
a54ff000-a5500000 ---p 00000000 00:00 0
a5500000-a5700000 rw-p 00000000 00:00 0
a5700000-a5900000 rw-p 00000000 00:00 0
a5900000-a59fe000 rw-p 00000000 00:00 0
a59fe000-a5a00000 ---p 00000000 00:00 0
a5a00000-a5b00000 rw-p 00000000 00:00 0
a5b00000-a5bfe000 rw-p 00000000 00:00 0
a5bfe000-a5c00000 ---p 00000000 00:00 0
a5c00000-a5cfe000 rw-p 00000000 00:00 0
a5cfe000-a5d00000 ---p 00000000 00:00 0
a5d00000-a5f00000 rw-p 00000000 00:00 0
a5f00000-a5ffe000 rw-p 00000000 00:00 0
a5ffe000-a6000000 ---p 00000000 00:00 0
a6000000-a60ff000 rw-p 00000000 00:00 0
a60ff000-a6100000 ---p 00000000 00:00 0
a6100000-a6300000 rw-p 00000000 00:00 0
a6300000-a6500000 rw-p 00000000 00:00 0
a6500000-a65ff000 rw-p 00000000 00:00 0
a65ff000-a6600000 ---p 00000000 00:00 0
a6600000-a6700000 rw-p 00000000 00:00 0
a6700000-a67fe000 rw-p 00000000 00:00 0
a67fe000-a6800000 ---p 00000000 00:00 0
a6800000-a68ff000 rw-p 00000000 00:00 0
a68ff000-a6900000 ---p 00000000 00:00 0
a6900000-a69fe000 rw-p 00000000 00:00 0
a69fe000-a6a00000 ---p 00000000 00:00 0
a6a00000-a6afe000 rw-p 00000000 00:00 0
a6afe000-a6b00000 ---p 00000000 00:00 0
a6b00000-a6bfe000 rw-p 00000000 00:00 0
a6bfe000-a6c00000 ---p 00000000 00:00 0
a6c00000-a6cfe000 rw-p 00000000 00:00 0
a6cfe000-a6d00000 ---p 00000000 00:00 0
a6d00000-a6efe000 rw-p 00000000 00:00 0
a6efe000-a6f00000 ---p 00000000 00:00 0
a6f00000-a7100000 rw-p 00000000 00:00 0
a7100000-a71fe000 rw-p 00000000 00:00 0
a71fe000-a7200000 ---p 00000000 00:00 0
a7200000-a7300000 rw-p 00000000 00:00 0
a7300000-a7500000 rw-p 00000000 00:00 0
a7500000-a75ff000 rw-p 00000000 00:00 0
a75ff000-a7600000 ---p 00000000 00:00 0
a7600000-a76ff000 rw-p 00000000 00:00 0
a76ff000-a7700000 ---p 00000000 00:00 0
a7700000-a7900000 rw-p 00000000 00:00 0
a7900000-a7b00000 rw-p 00000000 00:00 0
a7b00000-a7d00000 rw-p 00000000 00:00 0
a7d00000-a7f00000 rw-p 00000000 00:00 0
a7f00000-a8100000 rw-p 00000000 00:00 0
a8100000-a81fe000 rw-p 00000000 00:00 0
a81fe000-a8200000 ---p 00000000 00:00 0
a8200000-a8300000 rw-p 00000000 00:00 0
a8300000-a8500000 rw-p 00000000 00:00 0
a8500000-a85ff000 rw-p 00000000 00:00 0
a85ff000-a8600000 ---p 00000000 00:00 0
a8600000-a8700000 rw-p 00000000 00:00 0
a8700000-a87fe000 rw-p 00000000 00:00 0
a87fe000-a8800000 ---p 00000000 00:00 0
a8800000-a8900000 rw-p 00000000 00:00 0
a8900000-a8b00000 rw-p 00000000 00:00 0
a8b00000-a8bfe000 rw-p 00000000 00:00 0
a8bfe000-a8c00000 ---p 00000000 00:00 0
a8c00000-a8d00000 rw-p 00000000 00:00 0
a8d00000-a8dff000 rw-p 00000000 00:00 0
a8dff000-a8e00000 ---p 00000000 00:00 0
a8e00000-a8f00000 rw-p 00000000 00:00 0
a8f00000-a8fff000 rw-p 00000000 00:00 0
a8fff000-a9000000 ---p 00000000 00:00 0
a9000000-a9100000 rw-p 00000000 00:00 0
a9100000-a92ff000 rw-p 00000000 00:00 0
a92ff000-a9300000 ---p 00000000 00:00 0
a9300000-a94fe000 rw-p 00000000 00:00 0
a94fe000-a9500000 ---p 00000000 00:00 0
a9500000-a9700000 rw-p 00000000 00:00 0
a9700000-a97fe000 rw-p 00000000 00:00 0
a97fe000-a9800000 ---p 00000000 00:00 0
a9800000-a9900000 rw-p 00000000 00:00 0
a9900000-a9aff000 rw-p 00000000 00:00 0
a9aff000-a9b00000 ---p 00000000 00:00 0
a9b00000-a9bfe000 rw-p 00000000 00:00 0
a9bfe000-a9c00000 ---p 00000000 00:00 0
a9c00000-a9d00000 rw-p 00000000 00:00 0
a9d00000-a9eff000 rw-p 00000000 00:00 0
a9eff000-a9f00000 ---p 00000000 00:00 0
a9f00000-aa0fe000 rw-p 00000000 00:00 0
aa0fe000-aa100000 ---p 00000000 00:00 0
aa100000-aa300000 rw-p 00000000 00:00 0
aa300000-aa3ff000 rw-p 00000000 00:00 0
aa3ff000-aa400000 ---p 00000000 00:00 0
aa400000-aa500000 rw-p 00000000 00:00 0
aa500000-aa6ff000 rw-p 00000000 00:00 0
aa6ff000-aa700000 ---p 00000000 00:00 0
aa700000-aa7ff000 rw-p 00000000 00:00 0
aa7ff000-aa800000 ---p 00000000 00:00 0
aa800000-aa8fe000 rw-p 00000000 00:00 0
aa8fe000-aa900000 ---p 00000000 00:00 0
aa900000-aa9fe000 rw-p 00000000 00:00 0
aa9fe000-aaa00000 ---p 00000000 00:00 0 Abgebrochen

Can anyone give me a hint, what could be wrong?

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

--
Michael J. Ayers
Senior Systems Engineer

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

svn-commit | 4 Jan 2011 10:53

r4432 - trunk/ntop/plugins

Author: deri
Date: 2011-01-04 10:53:02 +0100 (Tue, 04 Jan 2011)
New Revision: 4432

Modified:
   trunk/ntop/plugins/rrdPlugin.c
Log:
Fix courtesy of Alexandre Barros <abarros <at> abitecnologia.com.br>

headers

peer482 | 7 Jan 2011 12:18

Re: ntop segaults

Thank you, but I still couldnt find the problem yet.

Although ulimit -a shows core file size unlimited, I dont't get any corefile. Do I need to complie with any special parameters?

I am not using use PF_RING. It is just a standard configuration:

Host System Type        : i686-pc-linux-gnu
Preprocessor (cppflags) : -DLINUX -I/usr/local/include -I/opt/local/include
Compiler (cflags)       : gcc -g -O2 -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DPIC -I/usr/include/python2.6 -I/usr/include/python2.6 -fno-strict-aliasing -g -O2 -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
Defines                 : -DHAVE_CONFIG_H
Loader (ldflags)        : -L/usr/local/lib -L/opt/local/lib
Include path            : -I/usr/include/python2.6 -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
System Libs             : -lcrypt -lc -lssl -lcrypto -lrrd_th -lgdbm -lz -lpthread -ldl -lutil -lm -lpython2.6 -lGeoIP
Locale                  : /usr/lib/locale

External packages:

LBL pcap .h             : standard system headers
LBL pcap library        : standard system libraries
GNU gdbm .h             : standard system headers
GNU gdbm library        : standard system libraries
zlib     .h             : standard system headers
zlib     library        : standard system libraries
openSSL .h             : standard system headers
openSSL library        : standard system libraries

I am not using a 64bit OS here, so I cant compile for 64bit.

Running with export MALLOC_CHECK_=0; ntop didnt change anything. It crashed quickly again.
Another standard start of ntop ended after 20 hours. I don't understand why it was running longer time since I didnt change anything.

When starting ntop as user ntop I get a **FATAL_ERROR** Unable to become root. By deafult it starts as a daemon with /etc/init.d/ntop start. But this also results in crash after a while.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

Bryan Kolodziej | 7 Jan 2011 20:02

Re: ntop segaults

On Fri, 7 Jan 2011, peer482 wrote:

> Although ulimit -a shows core file size unlimited, I dont't get any 
> corefile. Do I need to complie with any special parameters?

It's possible that ntop is running in a directory to which it cannot write 
as the current user when the process dies.  I was having issues generating 
core files with ntop for this exact reason (it seemed ntop was changing to 
a different directory by itself after starting).  You can check the 
current working directory while it is running by looking in /proc, or by 
using something like lsof, and then change the permissions as necessary. 
Alternately, if the version of Linux you're using supports it you can 
alter the value in /proc/sys/kernel/core_pattern to have the core file be 
generated someplace else (like /tmp).  The core(5) man page has full 
details on that.

> Running with export MALLOC_CHECK_=0; ntop didnt change anything. It 
> crashed quickly again. Another standard start of ntop ended after 20 
> hours.  I don't understand why it was running longer time since I didnt 
> change anything.

I was having a similar issue at one point.  The backtrace seemed to 
indicate the problem was related to DNS resolving issues, and the 
workaround for it was to start ntop with the -n 0 option to turn off DNS 
lookups.  Probably not the best solution, but it did work.  I haven't had 
time to go through the code in greater depth to see if I can patch the 
actual problem.

headers

svn-commit | 7 Jan 2011 23:12

r4433 - trunk/PF_RING/drivers/neterion/vxge

Author: deri
Date: 2011-01-07 23:12:15 +0100 (Fri, 07 Jan 2011)
New Revision: 4433

Added:
   trunk/PF_RING/drivers/neterion/vxge/X3fw-pxe.ncf
Removed:
   trunk/PF_RING/drivers/neterion/vxge/X3fw-pxe.txt
Log:
Added missing file

headers

Michael J. Ayers | 8 Jan 2011 01:43

Re: ntop segaults

This thread here will show you how to enable core dumps:

http://fixunix.com/solaris-rss/583578-how-enable-core-dumps-rhel5-4-a.html

See if you can get anything from those once you have them.

--M

On Fri, Jan 7, 2011 at 3:18 AM, peer482 <peer482 <at> googlemail.com> wrote:

Thank you, but I still couldnt find the problem yet.

Although ulimit -a shows core file size unlimited, I dont't get any corefile. Do I need to complie with any special parameters?

I am not using use PF_RING. It is just a standard configuration:

Host System Type        : i686-pc-linux-gnu
Preprocessor (cppflags) : -DLINUX -I/usr/local/include -I/opt/local/include
Compiler (cflags)       : gcc -g -O2 -I/usr/local/include -I/opt/local/include -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DPIC -I/usr/include/python2.6 -I/usr/include/python2.6 -fno-strict-aliasing -g -O2 -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
Defines                 : -DHAVE_CONFIG_H
Loader (ldflags)        : -L/usr/local/lib -L/opt/local/lib
Include path            : -I/usr/include/python2.6 -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes
System Libs             : -lcrypt -lc -lssl -lcrypto -lrrd_th -lgdbm -lz -lpthread -ldl -lutil -lm -lpython2.6 -lGeoIP
Locale                  : /usr/lib/locale

External packages:

LBL pcap .h             : standard system headers
LBL pcap library        : standard system libraries
GNU gdbm .h             : standard system headers
GNU gdbm library        : standard system libraries
zlib     .h             : standard system headers
zlib     library        : standard system libraries
openSSL .h             : standard system headers
openSSL library        : standard system libraries

I am not using a 64bit OS here, so I cant compile for 64bit.

Running with export MALLOC_CHECK_=0; ntop didnt change anything. It crashed quickly again.
Another standard start of ntop ended after 20 hours. I don't understand why it was running longer time since I didnt change anything.

When starting ntop as user ntop I get a **FATAL_ERROR** Unable to become root. By deafult it starts as a daemon with /etc/init.d/ntop start. But this also results in crash after a while.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

--
Michael J. Ayers
Senior Systems Engineer

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

Tim McIntire | 11 Jan 2011 20:30

SegFault when running Ntop 4.0.1 on Linux

Hi,

Having a problem with ntop segfaulting shortly after starting. I am running ntop on a CentOS linux machine. I have plugins enabled for both NetFlow and sFlow.

Initially it worked, but then I started configuring it to understand what a local vs remote subnet was and since then, it has not worked since. I have tried to remove/reinstall it, but I cannot seem to remove all the configurations files as it still knows what the sFlow and NetFlow IPs are.

Here is the output from gdb.

Do you suggest anything?

Tim

Program received signal SIGSEGV, Segmentation fault.

[Switching to Thread 0x46409940 (LWP 13885)]

0x00002aaaaad5ff4c in handleHTTPSession (h=0x46409050, fragmentedData=0, tcpWin=40982, srcHost=0x2aaab8005bc0,

sport=80, dstHost=0x811fa0, dport=58223, sent_length=492, rcvd_length=0, tp=0x46406a50, packetDataLength=440,

packetData=0x46406ff2 "HTTP/1.1 302 Found\r\nDate: Tue, 11 Jan 2011 14:16:53 GMT\r\nServer: Apache/2.0.39 (Unix) mod_ssl/2.0.39 OpenSSL/0.9.7c\r\nLocation: https://x.x.x.x/\r\nContent-Length: 204\r\nConnection: close\r\nContent-Typ"..., actualDeviceId=0, newSession=0x46406b2a) at sessions.c:1095

1095 allocHostTrafficCounterMemory(srcHost, protocolInfo->httpStats, sizeof(ServiceStats));

(gdb)

Information transmitted by this e-mail is proprietary to Infinite and / or its Customers and is intended for use only by the individual or the entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If you are not the intended recipient or it appears that this mail has been forwarded to you without proper authority, you are notified that any use or dissemination of this information in any manner is strictly prohibited. In such cases, please notify us immediately at sanchar-sadhan <at> infinite.com and delete this email from your records.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

peer482 | 12 Jan 2011 07:55

Re: ntop segaults

After I started it with "tmp# ntop -u ntop -n 0" it didnt't crash anymore. Maybe my segfaults were also related to DNS.
Anyways the configuration in the webinterface (configNtop.html?&showD=3) was set already to NO DNS = yes. So I wonder, why it was crashing as system deamon too.
I am still testing.

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

headers

peer482 | 12 Jan 2011 14:33

Re: ntop segaults

It seems, that I had to enable dumping in /etc/security/limits.conf .
Running with "ntop - u ntop" I could get a corefile in about 1 h again.

# gdb ntop core.14541

GNU gdb (GDB) 7.0.1-debian
Copyright (C) 2009 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later <http://gnu.org/licenses/gpl.html>
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "i486-linux-gnu".
For bug reporting instructions, please see:
<http://www.gnu.org/software/gdb/bugs/>...
Reading symbols from /usr/local/bin/ntop...done.
[New Thread 14546]
[New Thread 14547]
[New Thread 14548]
[New Thread 14551]
[New Thread 14552]
[New Thread 14553]
[New Thread 14541]
[New Thread 14543]
[New Thread 14544]
[New Thread 14549]
[New Thread 14550]

warning: Can't read pathname for load map: Eingabe-/Ausgabefehler.
Reading symbols from /usr/local/lib/libntopreport-4.0.3.so...done.
Loaded symbols for /usr/local/lib/libntopreport-4.0.3.so

[cut]

Reading symbols from /usr/local/lib/ntop/plugins/netflowPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/netflowPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/cpacketPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/cpacketPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/icmpPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/icmpPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/sflowPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/sflowPlugin.so
Reading symbols from /usr/local/lib/ntop/plugins/rrdPlugin.so...done.
Loaded symbols for /usr/local/lib/ntop/plugins/rrdPlugin.so
Reading symbols from /lib/i686/cmov/libnss_dns.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libnss_dns.so.2
Reading symbols from /lib/i686/cmov/libresolv.so.2...(no debugging symbols found)...done.
Loaded symbols for /lib/i686/cmov/libresolv.so.2
Reading symbols from /lib/libgcc_s.so.1...(no debugging symbols found)...done.
Loaded symbols for /lib/libgcc_s.so.1
Core was generated by `ntop -u ntop'.
Program terminated with signal 6, Aborted.
#0 0xb76ef424 in __kernel_vsyscall ()

I am not familiar with debugging. Does this help?

_______________________________________________
Ntop-dev mailing list
Ntop-dev <at> listgateway.unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

107	May 2013
106	April 2013
97	March 2013
75	February 2013
92	January 2013
48	December 2012
82	November 2012
95	October 2012
75	September 2012
95	August 2012
108	July 2012
93	June 2012
106	May 2012
71	April 2012
86	March 2012
84	February 2012
88	January 2012
40	December 2011
109	November 2011
57	October 2011
83	September 2011
75	August 2011
44	July 2011
114	June 2011
49	May 2011
44	April 2011
63	March 2011
55	February 2011
26	January 2011
13	December 2010
38	November 2010
25	October 2010
23	September 2010
31	August 2010
31	July 2010
23	June 2010
37	May 2010
32	April 2010
67	March 2010
46	February 2010
68	January 2010
65	December 2009
32	November 2009
47	October 2009
82	September 2009
43	August 2009
59	July 2009
56	June 2009
95	May 2009
24	April 2009
31	March 2009
52	February 2009
41	January 2009
32	December 2008
40	November 2008
16	October 2008
8	September 2008
25	August 2008
39	July 2008
60	June 2008
94	May 2008
51	April 2008
30	March 2008
16	February 2008
32	January 2008
14	December 2007
36	November 2007
37	October 2007
33	September 2007
27	August 2007
51	July 2007
87	June 2007
57	May 2007
44	April 2007
54	March 2007
42	February 2007
14	January 2007
12	December 2006
34	November 2006
8	October 2006
32	September 2006
18	August 2006
28	July 2006
28	June 2006
47	May 2006
32	April 2006
32	March 2006
14	February 2006
46	January 2006
31	December 2005
37	November 2005
63	October 2005
46	September 2005
89	August 2005
38	July 2005
49	June 2005
139	May 2005
97	April 2005
68	March 2005
49	February 2005
52	January 2005
95	December 2004
59	November 2004
24	October 2004
61	September 2004
70	August 2004
85	July 2004
70	June 2004
75	May 2004
67	April 2004
160	March 2004
242	February 2004
182	January 2004
103	December 2003
32	November 2003
138	October 2003
248	September 2003
264	August 2003
126	July 2003
143	June 2003
154	May 2003
265	April 2003
226	March 2003
187	February 2003
109	January 2003
188	December 2002
177	November 2002
177	October 2002
147	September 2002
140	August 2002
223	July 2002
219	June 2002
52	May 2002
109	April 2002
53	March 2002
91	February 2002
77	January 2002
39	December 2001
60	November 2001
52	October 2001
28	September 2001
8	August 2001
39	July 2001
44	June 2001
35	May 2001

Mon	Tue	Wed	Thu	Fri	Sat	Sun

					1	2
3	4	5	6	7	8	9
10	11	12	13	14	15	16
17	18	19	20	21	22	23
24	25	26	27	28	29	30
31