Ggatten at waddell
Apr 16, 2009, 4:35 PM
Post #20 of 20
(1494 views)
Permalink
|
|
Re: NTOP is crashing - dnscache.db corruption
[In reply to]
|
|
Ok - next time it faults ill restart in gdb. I've run it in gdb before and the darn thing wouldn't crash! Hopefully I can catch it this time!
----- Original Message -----
From: ntop-bounces [at] unipi <ntop-bounces [at] unipi>
To: ntop [at] unipi <ntop [at] unipi>
Sent: Thu Apr 16 18:31:58 2009
Subject: Re: [Ntop] NTOP is crashing - dnscache.db corruption
On Apr 17, 2009, at 1:24 AM, Gary Gatten wrote:
> I just left for the day but will let you know tomorrow. Had another
> sig 11 this morning during/after an IDLE_PURGE process. Could this
> be related to the dnsCache.db or something completely different?
>
I can't tell you. You need at least to send me the gdb trace in order
to investigate what's happening
Thanks Luca
>
> ----- Original Message -----
> From: ntop-bounces [at] unipi <ntop-bounces [at] unipi>
> To: ntop [at] unipi <ntop [at] unipi>
> Sent: Thu Apr 16 18:09:40 2009
> Subject: Re: [Ntop] NTOP is crashing - dnscache.db corruption
>
> Hi all,
> while trying to address this problem, I wondered if this problem
> happens with every GDBM version or with a specific version. What GDBM
> version are you using?
>
> Thanks Luca
>
> On Apr 15, 2009, at 12:31 AM, Gary Gatten wrote:
>
> > I don't know how to reproduce it. Sometimes it runs fine for weeks
> > before corruption, other times only days. If the dnsCache.db is
> only
> > temporary - containing IP's to be resolved and NOT caching lookups
> > that
> > have already been resolved - then my suggestion to turn this off
> > with a
> > flag would obviously not work. Eventually most people would want
> the
> > IP's resolved.
> >
> > I'm not 100% convinced the file is bad. 99%, but not 100%. Is
> > there a
> > tool I / we can use to determine for certain if the file is
> corrupted?
> > I'm assuming there is but haven't looked into it. Maybe there's a
> > tool
> > for checking/fixing/packing this file occasionally? Or maybe add
> some
> > trap logic in nTop to handle a broken file better - such as: if
> > reading/writing the dnsCache.db (any file) returns a non zero return
> > code, disable further name resolution and write error to log file.
> > This
> > would at least stop the crashing. Next step would be to disable
> > resolution, try to fix the file, if successful continue resolution -
> > if
> > not, disable resolution and write error to log.
> >
> > I'll help resolve this issue however I can. Not being much of a
> > programmer / developer I'm not sure how much benefit I can be. If
> you
> > could at least point me to the source where this I/O is done I could
> > try
> > - or ask one of our C developers to take a look.
> >
> > -----Original Message-----
> > From: ntop-bounces [at] unipi [mailto:ntop-bounces [at] unipi] On Behalf
> > Of
> > Luca Deri
> > Sent: Tuesday, April 14, 2009 4:59 PM
> > To: ntop [at] unipi
> > Subject: Re: [Ntop] NTOP is crashing - dnscache.db corruption
> >
> > Hi all
> > I see that this issue is heavily discussed. I admit that i have not
> > followed too much this issue. Basically the problem is that the
> > temporary DB that holds the list of hosts to be resolved gets
> > corrupted, correct? Do you have a simple way to reproduce this
> > problem?
> >
> > thanks Luca
> >
> > On Apr 14, 2009, at 11:41 PM, Terry Martin wrote:
> >
> >> Gary
> >>
> >> Yes I do understand that it is open source and I don't expect it to
> >> be perfect.
> >>
> >> I am going to have one of my programmers see what they can do.
> >>
> >>
> >>
> >> Terry Martin
> >> TimeData Corporation
> >> VP of Network Operation
> >> West Coast Number 503-678-2224
> >> Cell: 503-318-8909
> >>
> >>
> >> -----Original Message-----
> >> From: ntop-bounces [at] unipi [mailto:ntop-bounces [at] unipi] On
> Behalf
> >> Of Gary Gatten
> >> Sent: Tuesday, April 14, 2009 1:52 PM
> >> To: ntop [at] unipi
> >> Subject: Re: [Ntop] NTOP is crashing - dnscache.db corruption
> >>
> >> It is opensource after all, so I'm sure someone could dig into it
> and
> >> find out why it's breaking. If I knew C better I'd give it a shot,
> >> but
> >> it would take me 100 times longer than someone C literate, so I'm
> >> passing on this one!
> >>
> >> Some months ago someone was having the problem often and was
> >> supposed to
> >> provide a copy of a bad db file to Luca and/or Burton. I don't
> know
> >> the
> >> status of that.
> >>
> >> -----Original Message-----
> >> From: ntop-bounces [at] unipi [mailto:ntop-bounces [at] unipi] On
> Behalf
> >> Of
> >> Ian McDonald
> >> Sent: Tuesday, April 14, 2009 2:54 PM
> >> To: ntop [at] unipi
> >> Subject: Re: [Ntop] NTOP is crashing
> >>
> >> Terry Martin wrote:
> >>> Gary
> >>>
> >>>
> >>>
> >>> It was 170 MB. If I disable lookups then I can't resolve IP
> >> addresses.
> >>>
> >>>
> >>>
> >>> Boy I would like to find fix for this.
> >>>
> >>>
> >>>
> >>
> >> You and the rest of us.
> >>
> >> --
> >> ian
> >> _______________________________________________
> >> Ntop mailing list
> >> Ntop [at] unipi
> >> http://listgateway.unipi.it/mailman/listinfo/ntop
> >>
> >>
> >>
> >>
> >>
> >> <font size="1">
> >> <div style='border:none;border-bottom:double windowtext
> >> 2.25pt;padding:0in 0in 1.0pt 0in'>
> >> </div>
> >> "This email is intended to be reviewed by only the intended
> recipient
> >> and may contain information that is privileged and/or confidential.
> >> If you are not the intended recipient, you are hereby notified that
> >> any review, use, dissemination, disclosure or copying of this email
> >> and its attachments, if any, is strictly prohibited. If you have
> >> received this email in error, please immediately notify the
> sender by
> >> return email and delete this email from your system."
> >> </font>
> >>
> >> _______________________________________________
> >> Ntop mailing list
> >> Ntop [at] unipi
> >> http://listgateway.unipi.it/mailman/listinfo/ntop
> >> _______________________________________________
> >> Ntop mailing list
> >> Ntop [at] unipi
> >> http://listgateway.unipi.it/mailman/listinfo/ntop
> >
> > _______________________________________________
> > Ntop mailing list
> > Ntop [at] unipi
> > http://listgateway.unipi.it/mailman/listinfo/ntop
> >
> >
> >
> >
> >
> > <font size="1">
> > <div style='border:none;border-bottom:double windowtext
> > 2.25pt;padding:0in 0in 1.0pt 0in'>
> > </div>
> > "This email is intended to be reviewed by only the intended
> recipient
> > and may contain information that is privileged and/or confidential.
> > If you are not the intended recipient, you are hereby notified that
> > any review, use, dissemination, disclosure or copying of this email
> > and its attachments, if any, is strictly prohibited. If you have
> > received this email in error, please immediately notify the sender
> by
> > return email and delete this email from your system."
> > </font>
> >
> > _______________________________________________
> > Ntop mailing list
> > Ntop [at] unipi
> > http://listgateway.unipi.it/mailman/listinfo/ntop
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] unipi
> http://listgateway.unipi.it/mailman/listinfo/ntop
> "This email is intended to be reviewed by only the intended
> recipient and may contain information that is privileged and/or
> confidential. If you are not the intended recipient, you are hereby
> notified that any review, use, dissemination, disclosure or copying
> of this email and its attachments, if any, is strictly prohibited.
> If you have received this email in error, please immediately notify
> the sender by return email and delete this email from your system."
> _______________________________________________
> Ntop mailing list
> Ntop [at] unipi
> http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
Ntop [at] unipi
http://listgateway.unipi.it/mailman/listinfo/ntop
<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
|
