'RE: [Ntop] seg fault?'

[prev in list] [next in list] [prev in thread] [next in thread] 

List:       ntop
Subject:    RE: [Ntop] seg fault?
From:       "Burton M. Strauss III" <BStrauss3 () attbi ! com>
Date:       2002-01-29 14:42:24
Message-ID: HBEBKGPKAEJLGMLAANAOAEHDDJAA.BStrauss3 () attbi ! com
[Download RAW message or body]

I don't think that is related - with my, my hashes never get even close to
that size.  I suggest you run under gdb for a while and post the stack trace
+ where in the code it's dying...

-----Burton

-----Original Message-----
From: ntop-admin@unipi.it [mailto:ntop-admin@unipi.it]On Behalf Of Joel
Brooks
Sent: Tuesday, January 29, 2002 8:09 AM
To: 'ntop@unipi.it'
Subject: RE: [Ntop] seg fault?

whats interesting is that its always at the same hash size (I don't think I
made that very clear ;).  It always happens when the hash size increases
from 1826 to 2738...  This is very reproducible...

J

-----Original Message-----
From: Burton M. Strauss III [mailto:BStrauss3@attbi.com]
Sent: Monday, January 28, 2002 4:27 PM
To: ntop@unipi.it
Subject: RE: [Ntop] seg fault?

I'm pretty sure I posted about this problem a couple of days back, haven't
had time to dig into it.  It's bombing at address.c ~ 850, usually on long
(multiple ips) DNS (like www.yahoo.com, etc.)  I think the buffer is too
small.  But I don't have a resolution.

You can try running under gdb and just continuing after the fault...

-----Burton

-----Original Message-----
From: ntop-admin@unipi.it [mailto:ntop-admin@unipi.it]On Behalf Of Joel
Brooks
Sent: Monday, January 28, 2002 3:13 PM
To: 'ntop@unipi.it'
Subject: [Ntop] seg fault?

Hi,

I just downloaded the latest CVS version of ntop (v2.0.1).  I'm running on
RHL 7.2 (kernel 2.4.3-12).  I'm having a problem with ntop seg. faulting on
me after running for a rather short period of time (anywhere from about 1
minute to about 15 minutes).  The only consistent thing I can see is that
the fault always happens after the following appears in the log:

28/Jan/2002 14:05:49 Extending hash: [old=1826, new=2738][devId=0]

The "Extending hash" entry is displayed several times - always increasing
the has size.  When this line occurs, ntop seg faults immediately...

The box is pretty simple... Its an intel PC @ 400 Mhz with 128 Mb RAM.  It
has three NICs: one for management, one for inside and one for outside.  the
inside and outside nics don't have IP addresses, and they monitor traffic on
either side of my firewall...  This only seems to happen on one nic - the
outside nic... the traffic would be unbalanced (I've seen some postings
about unbalanced configs being unstable), but I'm not merging stats or
anything - I'm logging them both separately so I can see the differences on
either side of the fw...

Can anyone offer any insight or suggestions?

(....oh, and intop just doesn't work at all... seg fault as soon as I launch
it... but I'll worry about that later... ;)

Full Log:

[root@inet01 /root]# ntop -i eth1 -P /opt/ntop/ext -w 3001 -S 1
Wait please: ntop is coming up...
28/Jan/2002 15:46:11 SSL is present but https is disabled: use -W <https
port> for enabling it
28/Jan/2002 15:46:11 Initializing IP services...
28/Jan/2002 15:46:11 Initializing SSL...
28/Jan/2002 15:46:11 Initializing GDBM...
28/Jan/2002 15:46:11 Initializing network devices...
28/Jan/2002 15:46:11 ntop v.2.0.1 MT (SSL) [i686-pc-linux-gnu] (01/28/02
12:18:14 PM build)
28/Jan/2002 15:46:11 Listening on [eth1]
28/Jan/2002 15:46:11 Copyright 1998-2002 by Luca Deri <deri@ntop.org>
28/Jan/2002 15:46:11 Get the freshest ntop from http://www.ntop.org/
28/Jan/2002 15:46:11 Initializing...
28/Jan/2002 15:46:11 Loading plugins (if any)...
28/Jan/2002 15:46:11 Searching plugins in /usr/local/lib/ntop/plugins
28/Jan/2002 15:46:11 WARNING: unable to load plugin
'/usr/local/lib/ntop/plugins/arpPlugin.so'
[/usr/local/lib/ntop/plugins/arpPlugin.so: undefined symbol: gdbmMutex]
28/Jan/2002 15:46:11 Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri.
28/Jan/2002 15:46:11 Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea
Marangoni.
28/Jan/2002 15:46:11 Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri.
28/Jan/2002 15:46:11 Welcome to ntopRmon. (C) 2000 by Luca Deri.
28/Jan/2002 15:46:11 WARNING: plugin disabled [missing NET-SNMP]
28/Jan/2002 15:46:11 WARNING: unable to load plugin
'/usr/local/lib/ntop/plugins/wapPlugin.so'
[/usr/local/lib/ntop/plugins/wapPlugin.so: undefined symbol: actualDeviceId]
28/Jan/2002 15:46:11 WARNING: unable to load plugin
'/usr/local/lib/ntop/plugins/libpep.so'
[/usr/local/lib/ntop/plugins/libpep.so: undefined symbol: device]
28/Jan/2002 15:46:11 WARNING: For security reasons it is STRONGLY
recommended to
28/Jan/2002 15:46:11 WARNING: run ntop as unprivileged user by using the -u
option!
28/Jan/2002 15:46:11 Resetting traffic statistics...
28/Jan/2002 15:46:11 Started thread (1026) for network packet analyser.
28/Jan/2002 15:46:11 Started thread (2051) for host traffic statistics.
28/Jan/2002 15:46:11 Started thread (3076) for throughput update.
28/Jan/2002 15:46:11 Started thread (4101) for DNS address resolution.
28/Jan/2002 15:46:11 Started thread (5126) for address purge.
28/Jan/2002 15:46:11 Initializing plugins (if any)...
28/Jan/2002 15:46:11 Waiting for HTTP connections on port 3001...
28/Jan/2002 15:46:11 Sniffying...
28/Jan/2002 15:46:11 Started thread (7176) for network packet sniffing on
eth1.
28/Jan/2002 15:46:12 Extending hash: [old=32, new=48][devId=0]
28/Jan/2002 15:46:12 Extending hash: [old=48, new=72][devId=0]
28/Jan/2002 15:46:15 Extending hash: [old=72, new=108][devId=0]
28/Jan/2002 15:46:18 Extending hash: [old=108, new=162][devId=0]
28/Jan/2002 15:46:23 Extending hash: [old=162, new=242][devId=0]
28/Jan/2002 15:46:36 Extending hash: [old=242, new=362][devId=0]
28/Jan/2002 15:47:03 Extending hash: [old=362, new=542][devId=0]
28/Jan/2002 15:47:50 Extending hash: [old=542, new=812][devId=0]
28/Jan/2002 15:49:13 Extending hash: [old=812, new=1218][devId=0]
28/Jan/2002 15:51:39 Extending hash: [old=1218, new=1826][devId=0]
Segmentation fault
[root@inet01 /root]#

Thanks,

J
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listmanager.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listmanager.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listmanager.unipi.it/mailman/listinfo/ntop

[prev in list] [next in list] [prev in thread] [next in thread] 