Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

ntop problem

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


umpajosh at yahoo

Jan 26, 2010, 12:34 PM

Post #1 of 13 (1317 views)
Permalink
ntop problem

on a relatively clean installation of CentOS 5.4, with all related dependencies, i have installed ntop-3.3.8 via 'yum'.

the install goes through fine with no problems reported. its running and listening on port 3000, but browsing to the site only displays an error page with a couple of broken links. it says:



Please enable make sure that the ntop html/ directory is properly installed
Error 400
The specified request is invalid.
Received request:
"GET / HTTP/1.1"


ive tried starting ntop under both --user ntop and --user root, ive tried it both with and without --daemon, but regardless, it always displays that error.

the db path is /var/ntop

and the html path is

/usr/share/ntop/html

all of these paths are default, ive set no options during any stage of the installation manually.

ive seen a few posts online with this same problem, and ive tried various suggestions there but to no avail. any ideas would be very appreciated

-josh



_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


mcabezadebaca at clinitech

Jan 26, 2010, 2:08 PM

Post #2 of 13 (1270 views)
Permalink
Re: ntop problem [In reply to]

Though I am not sure of what you have tried, but I have found:

# limit ntop to listening on a specific interface and port
#--http-server 127.0.0.1:3000

This setting in the ntop.conf to be enabled. I have mine modified to be:

--http-server 3000

Hope this helps.

Matthew

-----Original Message-----
From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of umpajosh [at] yahoo
Sent: Tuesday, January 26, 2010 12:34 PM
To: ntop [at] listgateway
Subject: [Ntop] ntop problem

on a relatively clean installation of CentOS 5.4, with all related dependencies, i have installed ntop-3.3.8 via 'yum'.

the install goes through fine with no problems reported. its running and listening on port 3000, but browsing to the site only displays an error page with a couple of broken links. it says:



Please enable make sure that the ntop html/ directory is properly installed
Error 400
The specified request is invalid.
Received request:
"GET / HTTP/1.1"


ive tried starting ntop under both --user ntop and --user root, ive tried it both with and without --daemon, but regardless, it always displays that error.

the db path is /var/ntop

and the html path is

/usr/share/ntop/html

all of these paths are default, ive set no options during any stage of the installation manually.

ive seen a few posts online with this same problem, and ive tried various suggestions there but to no avail. any ideas would be very appreciated

-josh



_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


This e-mail message, including any attachments, is for the
sole use of the intended recipient(s) and may contain
confidential or privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If
you are not the intended recipient, please contact the
sender by reply e-mail and destroy the message.

Think Green! Please do not print this e-mail unless you need to. Thank you.

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


mcabezadebaca at clinitech

Jan 26, 2010, 2:08 PM

Post #3 of 13 (1265 views)
Permalink
Re: ntop problem [In reply to]

Though I am not sure of what you have tried, but I have found:

# limit ntop to listening on a specific interface and port
#--http-server 127.0.0.1:3000

This setting in the ntop.conf to be enabled. I have mine modified to be:

--http-server 3000

Hope this helps.

Matthew

-----Original Message-----
From: ntop-bounces [at] listgateway [mailto:ntop-bounces [at] listgateway] On Behalf Of umpajosh [at] yahoo
Sent: Tuesday, January 26, 2010 12:34 PM
To: ntop [at] listgateway
Subject: [Ntop] ntop problem

on a relatively clean installation of CentOS 5.4, with all related dependencies, i have installed ntop-3.3.8 via 'yum'.

the install goes through fine with no problems reported. its running and listening on port 3000, but browsing to the site only displays an error page with a couple of broken links. it says:



Please enable make sure that the ntop html/ directory is properly installed
Error 400
The specified request is invalid.
Received request:
"GET / HTTP/1.1"


ive tried starting ntop under both --user ntop and --user root, ive tried it both with and without --daemon, but regardless, it always displays that error.

the db path is /var/ntop

and the html path is

/usr/share/ntop/html

all of these paths are default, ive set no options during any stage of the installation manually.

ive seen a few posts online with this same problem, and ive tried various suggestions there but to no avail. any ideas would be very appreciated

-josh



_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


This e-mail message, including any attachments, is for the
sole use of the intended recipient(s) and may contain
confidential or privileged information. Any unauthorized
review, use, disclosure or distribution is prohibited. If
you are not the intended recipient, please contact the
sender by reply e-mail and destroy the message.

Think Green! Please do not print this e-mail unless you need to. Thank you.

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


umpajosh at yahoo

Jan 27, 2010, 9:04 AM

Post #4 of 13 (1288 views)
Permalink
Re: solved ntop problem [In reply to]

on CentOS 5.4, after installing ntop 3.3.8-2.el5.rf using yum, without setting any special flags or changing the default settings whatsoever, the built in http server of ntop functioned fine but the page would not display- i got a generic page with "400" (not 404) errors saying that it couldnt find the html documents. the error was like this:

"Please enable make sure that the ntop html/ directory is properly installed"

so i used yum to erase the installation and tried downloading the latest from ntop's site directly. i compiled and installed ntop-3.4-pre2, and the same thing happened again.. so i figured that perhaps my permissions were wrong, so i tinkered with that for awhile but still the problem remained. so i tried this just for kicks, and it worked:

for some reason, when i specify the address of the server itself in the command (not only the port, but the address also), the webserver no longer reports "400" errors- everything functions fine.

this is the command i use to start ntop now (of course, replacing the xx.xx.xx.xx with the appropriate ip)


/usr/local/bin/ntop -i "eth1" -w xx.xx.xx.xx:3000 -d -L -u ntop -P /usr/local/var/ntop --skip-version-check --use-syslog=daemon --access-log-file /var/log/nt.log


hope this helps someone,
floppyraid


--- On Tue, 1/26/10, umpajosh [at] yahoo <umpajosh [at] yahoo> wrote:

> From: umpajosh [at] yahoo <umpajosh [at] yahoo>
> Subject: [Ntop] ntop problem
> To: ntop [at] listgateway
> Date: Tuesday, January 26, 2010, 2:34 PM
> on a relatively clean installation of
> CentOS 5.4, with all related dependencies, i have installed
> ntop-3.3.8 via 'yum'.
>
> the install goes through fine with no problems reported.
> its running and listening on port 3000, but browsing to the
> site only displays an error page with a couple of broken
> links. it says:
>
>
>
> Please enable make sure that the ntop html/ directory is
> properly installed
> Error 400
> The specified request is invalid.
> Received request:
> "GET / HTTP/1.1"
>
>
> ive tried starting ntop under both --user ntop and --user
> root, ive tried it both with and without --daemon, but
> regardless, it always displays that error.
>
> the db path is /var/ntop
>
> and the html path is
>
> /usr/share/ntop/html
>
> all of these paths are default, ive set no options during
> any stage of the installation manually.
>
> ive seen a few posts online with this same problem, and ive
> tried various suggestions there but to no avail. any ideas
> would be very appreciated
>
> -josh
>
>
>      
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>



_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Pascal.Legrand at univ-orleans

Feb 2, 2010, 12:37 AM

Post #5 of 13 (1383 views)
Permalink
ntop problem [In reply to]

Hello
I'm using ntop v.3.4-pre2 (32 bit) installed from sources.
Everything worked fine, but after some time ntop segfault again

i launch it like that "/usr/local/bin/ntop -u ntop -K -n"

dmesg tell me :
[671256.012006] ntop[4392]: segfault at 534 ip b7db545a sp af95a8b0 error 4 in
libntop-3.4-pre2.so[b7d95000+58000]


and i've got this trace :

*** glibc detected *** /usr/local/bin/ntop: double free or corruption
(fasttop): 0x0a227358 ***
======= Backtrace: =========
/lib/i686/cmov/libc.so.6[0xb7c7e624]
/lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7c80826]
/usr/local/lib/libntop-3.4-pre2.so(ntop_safefree+0x2c)[0xb7db589c]
/usr/local/lib/libntop-3.4-pre2.so(deleteFragment+0x47)[0xb7dbca57]
/usr/local/lib/libntop-3.4-pre2.so[0xb7dbe84e]
/usr/local/lib/libntop-3.4-pre2.so[0xb7dc2f99]
/usr/local/lib/libntop-3.4-pre2.so(processPacket+0x24c9)[0xb7dc9ae9]
/usr/local/lib/libntop-3.4-pre2.so(queuePacket+0x2b2)[0xb7dcd842]
/usr/lib/libpcap.so.0.8[0xb785bd45]
/usr/lib/libpcap.so.0.8(pcap_dispatch+0x27)[0xb785c0e7]
/usr/local/lib/libntop-3.4-pre2.so(pcapDispatch+0x13b)[0xb7db6b0b]
/lib/i686/cmov/libpthread.so.0[0xb7a174c0]
/lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7cf06de]
======= Memory map: ========
08048000-08058000 r-xp 00000000 03:05 185149 /usr/local/bin/ntop
08058000-08059000 rw-p 0000f000 03:05 185149 /usr/local/bin/ntop
09fb9000-0a232000 rw-p 09fb9000 00:00 0 [heap]
af000000-af021000 rw-p af000000 00:00 0
af021000-af100000 ---p af021000 00:00 0
af153000-af154000 ---p af153000 00:00 0
af154000-af954000 rw-p af154000 00:00 0
af954000-af964000 r-xp 00000000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
af964000-af966000 rw-p 0000f000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
af966000-af968000 rw-p af966000 00:00 0
af968000-af969000 ---p af968000 00:00 0
af969000-b0169000 rw-p af969000 00:00 0
b0169000-b016a000 ---p b0169000 00:00 0
b016a000-b096a000 rw-p b016a000 00:00 0
b096a000-b096b000 ---p b096a000 00:00 0
b096b000-b116b000 rw-p b096b000 00:00 0
b116b000-b116c000 ---p b116b000 00:00 0
b116c000-b196c000 rw-p b116c000 00:00 0
b196c000-b198e000 r-xp 00000000 03:05 185582
/usr/local/lib/ntop/plugins/rrdPlugin.so
b198e000-b198f000 rw-p 00022000 03:05 185582
/usr/local/lib/ntop/plugins/rrdPlugin.so
b198f000-b1996000 r-xp 00000000 03:05 185581
/usr/local/lib/ntop/plugins/cpacketPlugin.so
b1996000-b1997000 rw-p 00006000 03:05 185581
/usr/local/lib/ntop/plugins/cpacketPlugin.so
b1997000-b1998000 ---p b1997000 00:00 0
b1998000-b219a000 rw-p b1998000 00:00 0
b219a000-b219b000 ---p b219a000 00:00 0
b219b000-b299b000 rw-p b219b000 00:00 0
b299b000-b299c000 ---p b299b000 00:00 0
b299c000-b675a000 rw-p b299c000 00:00 0
b675d000-b6769000 r-xp 00000000 03:01 14059 /lib/libgcc_s.so.1
b6769000-b676a000 rw-p 0000b000 03:01 14059 /lib/libgcc_s.so.1
b676a000-b676e000 r-xp 00000000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
b676e000-b6770000 rw-p 00003000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
b6770000-b6784000 r-xp 00000000 03:05 185580
/usr/local/lib/ntop/plugins/netflowPlugin.so
b6784000-b6785000 rw-p 00013000 03:05 185580
/usr/local/lib/ntop/plugins/netflowPlugin.so
b6785000-b679a000 r-xp 00000000 03:05 185583
/usr/local/lib/ntop/plugins/sflowPlugin.so
b679a000-b679b000 rw-p 00014000 03:05 185583
/usr/local/lib/ntop/plugins/sflowPlugin.so
b679b000-b68d5000 r--p 00000000 03:05 88779 /usr/lib/locale/locale-archive
b68d5000-b6957000 rw-p b68d5000 00:00 0
b6957000-b6961000 r-xp 00000000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
b6961000-b6963000 rw-p 00009000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
b6963000-b696b000 r-xp 00000000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
b696b000-b696d000 rw-p 00008000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
b696d000-b6982000 r-xp 00000000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
b6982000-b6984000 rw-p 00014000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
b6984000-b6986000 rw-p b6984000 00:00 0
b6986000-b698d000 r-xp 00000000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
b698d000-b698f000 rw-p 00006000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
b6995000-b7262000 rw-p b6995000 00:00 0
b7262000-b7263000 r-xp 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
b7263000-b7264000 rw-p 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
b7264000-b7265000 rw-p b7264000 00:00 0
b7265000-b7269000 r-xp 00000000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
b7269000-b726a000 rw-p 00003000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
b726a000-b726c000 r-xp 00000000 03:05 89828 /usr/lib/libXau.so.6.0.0
b726c000-b726d000 rw-p 00001000 03:05 89828 /usr/lib/libXau.so.6.0.0
b726d000-b7291000 r-xp 00000000 03:05 89861 /usr/lib/libexpat.so.1.5.2
b7291000-b7293000 rw-p 00023000 03:05 89861 /usr/lib/libexpat.so.1.5.2
b7293000-b72bb000 r-xp 00000000 03:05 88562 /usr/lib/libpcre.so.3.12.1
b72bb000-b72bc000 rw-p 00027000 03:05 88562 /usr/lib/libpcre.so.3.12.1
b72bc000-b72e4000 r-xp 00000000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
b72e4000-b72e5000 rw-p 00027000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
b72e5000-b72e6000 rw-p b72e5000 00:00 0
b72e6000-b73d1000 r-xp 00000000 03:05 89836 /usr/lib/libX11.so.6.2.0
b73d1000-b73d5000 rw-p 000ea000 03:05 89836 /usr/lib/libX11.so.6.2.0
b73d5000-b73dd000 r-xp 00000000 03:05 89890 /usr/lib/libXrender.so.1.3.0
b73dd000-b73de000 rw-p 00007000 03:05 89890 /usr/lib/libXrender.so.1.3.0
b73de000-b73f5000 r-xp 00000000 03:05 89832 /usr/lib/libxcb.so.1.0.0
b73f5000-b73f6000 rw-p 00017000 03:05 89832 /usr/lib/libxcb.so.1.0.0
b73f6000-b73fc000 r-xp 00000000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
b73fc000-b73fd000 rw-p 00005000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
b73fd000-b7400000 r-xp 00000000 03:05 89888
/usr/lib/libxcb-render-util.so.0.0.0
b7400000-b7401000 rw-p 00002000 03:05 89888
/usr/lib/libxcb-render-util.so.0.0.0
b7401000-b7414000 r-xp 00000000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
b7414000-b7415000 rw-p 00012000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
b7415000-b7416000 rw-p b7415000 00:00 0
b7416000-b741d000 r-xp 00000000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
b741d000-b741e000 rw-p 00006000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
b741e000-b7483000 r-xp 00000000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
b7483000-b7485000 rw-p 00065000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
b7485000-b74af000 r-xp 00000000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
b74af000-b74b0000 rw-p 0002a000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
b74b0000-b7521000 r-xp 00000000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
b7521000-b7525000 rw-p 00070000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
b7525000-b754b000 r-xp 00000000 03:05 89906
/usr/lib/libpangoft2-1.0.so.0.2002.3
b754b000-b754c000 rw-p 00026000 03:05 89906
/usr/lib/libpangoft2-1.0.so.0.2002.3
b754c000-b754d000 rw-p b754c000 00:00 0
b754d000-b7601000 r-xp 00000000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
b7601000-b7602000 rw-p 000b4000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
b7602000-b7605000 r-xp 00000000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
b7605000-b7606000 rw-p 00002000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
b7606000-b7641000 r-xp 00000000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
b7641000-b7642000 rw-p 0003b000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
b7642000-b76ac000 r-xp 00000000 03:05 89892 /usr/lib/libcairo.so.2.17.5
b76ac000-b76ae000 rw-p 0006a000 03:05 89892 /usr/lib/libcairo.so.2.17.5
b76ae000-b76ec000 r-xp 00000000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
b76ec000-b76ee000 rw-p 0003d000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
b76ee000-b76ef000 rw-p b76ee000 00:00 0
b76ef000-b76f8000 r-xp 00000000 03:05 89905
/usr/lib/libpangocairo-1.0.so.0.2002.3
b76f8000-b76f9000 rw-p 00008000 03:05 89905
/usr/lib/libpangocairo-1.0.so.0.2002.3
b76f9000-b771c000 r-xp 00000000 03:05 89870 /usr/lib/libpng12.so.0.27.0
b771c000-b771d000 rw-p 00023000 03:05 89870 /usr/lib/libpng12.so.0.27.0
b771d000-b7850000 r-xp 00000000 03:05 88953 /usr/lib/libxml2.so.2.6.32
b7850000-b7855000 rw-p 00132000 03:05 88953 /usr/lib/libxml2.so.2.6.32
b7855000-b7856000 rw-p b7855000 00:00 0
b7856000-b787e000 r-xp 00000000 03:05 90024 /usr/lib/libpcap.so.0.9.8
b787e000-b7880000 rw-p 00027000 03:05 90024 /usr/lib/libpcap.so.0.9.8
b7880000-b78a7000 r-xp 00000000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
b78a7000-b78a8000 rw-p 00027000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
b78a8000-b78a9000 rw-p b78a8000 00:00 0
b78a9000-b79b8000 r-xp 00000000 03:05 88580 /usr/lib/libpython2.5.so.1.0
b79b8000-b79dd000 rw-p 0010e000 03:05 88580 /usr/lib/libpython2.5.so.1.0
b79dd000-b79e3000 rw-p b79dd000 00:00 0
b79e3000-b7a07000 r-xp 00000000 03:01 24101 /lib/i686/cmov/libm-2.7.so
b7a07000-b7a09000 rw-p 00023000 03:01 24101 /lib/i686/cmov/libm-2.7.so
b7a09000-b7a0b000 r-xp 00000000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
b7a0b000-b7a0d000 rw-p 00001000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
b7a0d000-b7a0f000 r-xp 00000000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
b7a0f000-b7a11000 rw-p 00001000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
b7a11000-b7a26000 r-xp 00000000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
b7a26000-b7a28000 rw-p 00014000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
b7a28000-b7a2a000 rw-p b7a28000 00:00 0
b7a2a000-b7a3e000 r-xp 00000000 03:05 88552 /usr/lib/libz.so.1.2.3.3
b7a3e000-b7a3f000 rw-p 00013000 03:05 88552 /usr/lib/libz.so.1.2.3.3
b7a3f000-b7a40000 rw-p b7a3f000 00:00 0
b7a40000-b7a45000 r-xp 00000000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
b7a45000-b7a46000 rw-p 00004000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
b7a46000-b7a73000 r-xp 00000000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
b7a73000-b7a76000 rw-p 0002d000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
b7a76000-b7bb0000 r-xp 00000000 03:05 89988
/usr/lib/i686/cmov/libcrypto.so.0.9.8
b7bb0000-b7bc6000 rw-p 0013a000 03:05 89988
/usr/lib/i686/cmov/libcrypto.so.0.9.8
b7bc6000-b7bc9000 rw-p b7bc6000 00:00 0
b7bc9000-b7c0c000 r-xp 00000000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
b7c0c000-b7c10000 rw-p 00042000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
b7c10000-b7d65000 r-xp 00000000 03:01 24117 /lib/i686/cmov/libc-2.7.so
b7d65000-b7d66000 r--p 00155000 03:01 24117 /lib/i686/cmov/libc-2.7.so
b7d66000-b7d68000 rw-p 00156000 03:01 24117 /lib/i686/cmov/libc-2.7.so
b7d68000-b7d6b000 rw-p b7d68000 00:00 0
b7d6b000-b7d74000 r-xp 00000000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
b7d74000-b7d76000 rw-p 00008000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
b7d76000-b7d9e000 rw-p b7d76000 00:00 0
b7d9e000-b7df6000 r-xp 00000000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
b7df6000-b7df8000 rw-p 00058000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
b7df8000-b7f2d000 rw-p b7df8000 00:00 0
b7f2d000-b7fba000 r-xp 00000000 03:05 185145
/usr/local/lib/libntopreport-3.4-pre2.so
b7fba000-b7fbc000 rw-p 0008c000 03:05 185145
/usr/local/lib/libntopreport-3.4-pre2.so
b7fbc000-b7fbd000 rw-p b7fbc000 00:00 0
b7fbe000-b7fc2000 r-xp 00000000 03:05 185579
/usr/local/lib/ntop/plugins/icmpPlugin.so
b7fc2000-b7fc3000 rw-p 00003000 03:05 185579
/usr/local/lib/ntop/plugins/icmpPlugin.so
b7fc3000-b7fc5000 rw-p b7fc3000 00:00 0
b7fc5000-b7fc6000 r-xp b7fc5000 00:00 0 [vdso]
b7fc6000-b7fe0000 r-xp 00000000 03:01 14191 /lib/ld-2.7.so
b7fe0000-b7fe2000 rw-p 0001a000 03:01 14191 /lib/ld-2.7.so
bfa0f000-bfa24000 rw-p bffeb000 00:00 0 [stack]

anybody could help me to make it works ?
i can give other informations if necessary

thank you

--

---------------------------------------------------------------
Pascal Legrand
---------------------------------------------------------------

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Feb 2, 2010, 1:42 AM

Post #6 of 13 (1296 views)
Permalink
Re: ntop problem [In reply to]

Pascal
there's a bug while reassembling fragmented packets. Please capture with
wireshark some packets that are able to reproduce the problem

Luca


On 02/02/2010 09:37 AM, Pascal Legrand wrote:
> Hello
> I'm using ntop v.3.4-pre2 (32 bit) installed from sources.
> Everything worked fine, but after some time ntop segfault again
>
> i launch it like that "/usr/local/bin/ntop -u ntop -K -n"
>
> dmesg tell me :
> [671256.012006] ntop[4392]: segfault at 534 ip b7db545a sp af95a8b0 error 4 in
> libntop-3.4-pre2.so[b7d95000+58000]
>
>
> and i've got this trace :
>
> *** glibc detected *** /usr/local/bin/ntop: double free or corruption
> (fasttop): 0x0a227358 ***
> ======= Backtrace: =========
> /lib/i686/cmov/libc.so.6[0xb7c7e624]
> /lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7c80826]
> /usr/local/lib/libntop-3.4-pre2.so(ntop_safefree+0x2c)[0xb7db589c]
> /usr/local/lib/libntop-3.4-pre2.so(deleteFragment+0x47)[0xb7dbca57]
> /usr/local/lib/libntop-3.4-pre2.so[0xb7dbe84e]
> /usr/local/lib/libntop-3.4-pre2.so[0xb7dc2f99]
> /usr/local/lib/libntop-3.4-pre2.so(processPacket+0x24c9)[0xb7dc9ae9]
> /usr/local/lib/libntop-3.4-pre2.so(queuePacket+0x2b2)[0xb7dcd842]
> /usr/lib/libpcap.so.0.8[0xb785bd45]
> /usr/lib/libpcap.so.0.8(pcap_dispatch+0x27)[0xb785c0e7]
> /usr/local/lib/libntop-3.4-pre2.so(pcapDispatch+0x13b)[0xb7db6b0b]
> /lib/i686/cmov/libpthread.so.0[0xb7a174c0]
> /lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7cf06de]
> ======= Memory map: ========
> 08048000-08058000 r-xp 00000000 03:05 185149 /usr/local/bin/ntop
> 08058000-08059000 rw-p 0000f000 03:05 185149 /usr/local/bin/ntop
> 09fb9000-0a232000 rw-p 09fb9000 00:00 0 [heap]
> af000000-af021000 rw-p af000000 00:00 0
> af021000-af100000 ---p af021000 00:00 0
> af153000-af154000 ---p af153000 00:00 0
> af154000-af954000 rw-p af154000 00:00 0
> af954000-af964000 r-xp 00000000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
> af964000-af966000 rw-p 0000f000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
> af966000-af968000 rw-p af966000 00:00 0
> af968000-af969000 ---p af968000 00:00 0
> af969000-b0169000 rw-p af969000 00:00 0
> b0169000-b016a000 ---p b0169000 00:00 0
> b016a000-b096a000 rw-p b016a000 00:00 0
> b096a000-b096b000 ---p b096a000 00:00 0
> b096b000-b116b000 rw-p b096b000 00:00 0
> b116b000-b116c000 ---p b116b000 00:00 0
> b116c000-b196c000 rw-p b116c000 00:00 0
> b196c000-b198e000 r-xp 00000000 03:05 185582
> /usr/local/lib/ntop/plugins/rrdPlugin.so
> b198e000-b198f000 rw-p 00022000 03:05 185582
> /usr/local/lib/ntop/plugins/rrdPlugin.so
> b198f000-b1996000 r-xp 00000000 03:05 185581
> /usr/local/lib/ntop/plugins/cpacketPlugin.so
> b1996000-b1997000 rw-p 00006000 03:05 185581
> /usr/local/lib/ntop/plugins/cpacketPlugin.so
> b1997000-b1998000 ---p b1997000 00:00 0
> b1998000-b219a000 rw-p b1998000 00:00 0
> b219a000-b219b000 ---p b219a000 00:00 0
> b219b000-b299b000 rw-p b219b000 00:00 0
> b299b000-b299c000 ---p b299b000 00:00 0
> b299c000-b675a000 rw-p b299c000 00:00 0
> b675d000-b6769000 r-xp 00000000 03:01 14059 /lib/libgcc_s.so.1
> b6769000-b676a000 rw-p 0000b000 03:01 14059 /lib/libgcc_s.so.1
> b676a000-b676e000 r-xp 00000000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
> b676e000-b6770000 rw-p 00003000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
> b6770000-b6784000 r-xp 00000000 03:05 185580
> /usr/local/lib/ntop/plugins/netflowPlugin.so
> b6784000-b6785000 rw-p 00013000 03:05 185580
> /usr/local/lib/ntop/plugins/netflowPlugin.so
> b6785000-b679a000 r-xp 00000000 03:05 185583
> /usr/local/lib/ntop/plugins/sflowPlugin.so
> b679a000-b679b000 rw-p 00014000 03:05 185583
> /usr/local/lib/ntop/plugins/sflowPlugin.so
> b679b000-b68d5000 r--p 00000000 03:05 88779 /usr/lib/locale/locale-archive
> b68d5000-b6957000 rw-p b68d5000 00:00 0
> b6957000-b6961000 r-xp 00000000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
> b6961000-b6963000 rw-p 00009000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
> b6963000-b696b000 r-xp 00000000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
> b696b000-b696d000 rw-p 00008000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
> b696d000-b6982000 r-xp 00000000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
> b6982000-b6984000 rw-p 00014000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
> b6984000-b6986000 rw-p b6984000 00:00 0
> b6986000-b698d000 r-xp 00000000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
> b698d000-b698f000 rw-p 00006000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
> b6995000-b7262000 rw-p b6995000 00:00 0
> b7262000-b7263000 r-xp 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
> b7263000-b7264000 rw-p 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
> b7264000-b7265000 rw-p b7264000 00:00 0
> b7265000-b7269000 r-xp 00000000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
> b7269000-b726a000 rw-p 00003000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
> b726a000-b726c000 r-xp 00000000 03:05 89828 /usr/lib/libXau.so.6.0.0
> b726c000-b726d000 rw-p 00001000 03:05 89828 /usr/lib/libXau.so.6.0.0
> b726d000-b7291000 r-xp 00000000 03:05 89861 /usr/lib/libexpat.so.1.5.2
> b7291000-b7293000 rw-p 00023000 03:05 89861 /usr/lib/libexpat.so.1.5.2
> b7293000-b72bb000 r-xp 00000000 03:05 88562 /usr/lib/libpcre.so.3.12.1
> b72bb000-b72bc000 rw-p 00027000 03:05 88562 /usr/lib/libpcre.so.3.12.1
> b72bc000-b72e4000 r-xp 00000000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
> b72e4000-b72e5000 rw-p 00027000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
> b72e5000-b72e6000 rw-p b72e5000 00:00 0
> b72e6000-b73d1000 r-xp 00000000 03:05 89836 /usr/lib/libX11.so.6.2.0
> b73d1000-b73d5000 rw-p 000ea000 03:05 89836 /usr/lib/libX11.so.6.2.0
> b73d5000-b73dd000 r-xp 00000000 03:05 89890 /usr/lib/libXrender.so.1.3.0
> b73dd000-b73de000 rw-p 00007000 03:05 89890 /usr/lib/libXrender.so.1.3.0
> b73de000-b73f5000 r-xp 00000000 03:05 89832 /usr/lib/libxcb.so.1.0.0
> b73f5000-b73f6000 rw-p 00017000 03:05 89832 /usr/lib/libxcb.so.1.0.0
> b73f6000-b73fc000 r-xp 00000000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
> b73fc000-b73fd000 rw-p 00005000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
> b73fd000-b7400000 r-xp 00000000 03:05 89888
> /usr/lib/libxcb-render-util.so.0.0.0
> b7400000-b7401000 rw-p 00002000 03:05 89888
> /usr/lib/libxcb-render-util.so.0.0.0
> b7401000-b7414000 r-xp 00000000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
> b7414000-b7415000 rw-p 00012000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
> b7415000-b7416000 rw-p b7415000 00:00 0
> b7416000-b741d000 r-xp 00000000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
> b741d000-b741e000 rw-p 00006000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
> b741e000-b7483000 r-xp 00000000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
> b7483000-b7485000 rw-p 00065000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
> b7485000-b74af000 r-xp 00000000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
> b74af000-b74b0000 rw-p 0002a000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
> b74b0000-b7521000 r-xp 00000000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
> b7521000-b7525000 rw-p 00070000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
> b7525000-b754b000 r-xp 00000000 03:05 89906
> /usr/lib/libpangoft2-1.0.so.0.2002.3
> b754b000-b754c000 rw-p 00026000 03:05 89906
> /usr/lib/libpangoft2-1.0.so.0.2002.3
> b754c000-b754d000 rw-p b754c000 00:00 0
> b754d000-b7601000 r-xp 00000000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
> b7601000-b7602000 rw-p 000b4000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
> b7602000-b7605000 r-xp 00000000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
> b7605000-b7606000 rw-p 00002000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
> b7606000-b7641000 r-xp 00000000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
> b7641000-b7642000 rw-p 0003b000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
> b7642000-b76ac000 r-xp 00000000 03:05 89892 /usr/lib/libcairo.so.2.17.5
> b76ac000-b76ae000 rw-p 0006a000 03:05 89892 /usr/lib/libcairo.so.2.17.5
> b76ae000-b76ec000 r-xp 00000000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
> b76ec000-b76ee000 rw-p 0003d000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
> b76ee000-b76ef000 rw-p b76ee000 00:00 0
> b76ef000-b76f8000 r-xp 00000000 03:05 89905
> /usr/lib/libpangocairo-1.0.so.0.2002.3
> b76f8000-b76f9000 rw-p 00008000 03:05 89905
> /usr/lib/libpangocairo-1.0.so.0.2002.3
> b76f9000-b771c000 r-xp 00000000 03:05 89870 /usr/lib/libpng12.so.0.27.0
> b771c000-b771d000 rw-p 00023000 03:05 89870 /usr/lib/libpng12.so.0.27.0
> b771d000-b7850000 r-xp 00000000 03:05 88953 /usr/lib/libxml2.so.2.6.32
> b7850000-b7855000 rw-p 00132000 03:05 88953 /usr/lib/libxml2.so.2.6.32
> b7855000-b7856000 rw-p b7855000 00:00 0
> b7856000-b787e000 r-xp 00000000 03:05 90024 /usr/lib/libpcap.so.0.9.8
> b787e000-b7880000 rw-p 00027000 03:05 90024 /usr/lib/libpcap.so.0.9.8
> b7880000-b78a7000 r-xp 00000000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
> b78a7000-b78a8000 rw-p 00027000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
> b78a8000-b78a9000 rw-p b78a8000 00:00 0
> b78a9000-b79b8000 r-xp 00000000 03:05 88580 /usr/lib/libpython2.5.so.1.0
> b79b8000-b79dd000 rw-p 0010e000 03:05 88580 /usr/lib/libpython2.5.so.1.0
> b79dd000-b79e3000 rw-p b79dd000 00:00 0
> b79e3000-b7a07000 r-xp 00000000 03:01 24101 /lib/i686/cmov/libm-2.7.so
> b7a07000-b7a09000 rw-p 00023000 03:01 24101 /lib/i686/cmov/libm-2.7.so
> b7a09000-b7a0b000 r-xp 00000000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
> b7a0b000-b7a0d000 rw-p 00001000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
> b7a0d000-b7a0f000 r-xp 00000000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
> b7a0f000-b7a11000 rw-p 00001000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
> b7a11000-b7a26000 r-xp 00000000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
> b7a26000-b7a28000 rw-p 00014000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
> b7a28000-b7a2a000 rw-p b7a28000 00:00 0
> b7a2a000-b7a3e000 r-xp 00000000 03:05 88552 /usr/lib/libz.so.1.2.3.3
> b7a3e000-b7a3f000 rw-p 00013000 03:05 88552 /usr/lib/libz.so.1.2.3.3
> b7a3f000-b7a40000 rw-p b7a3f000 00:00 0
> b7a40000-b7a45000 r-xp 00000000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
> b7a45000-b7a46000 rw-p 00004000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
> b7a46000-b7a73000 r-xp 00000000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
> b7a73000-b7a76000 rw-p 0002d000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
> b7a76000-b7bb0000 r-xp 00000000 03:05 89988
> /usr/lib/i686/cmov/libcrypto.so.0.9.8
> b7bb0000-b7bc6000 rw-p 0013a000 03:05 89988
> /usr/lib/i686/cmov/libcrypto.so.0.9.8
> b7bc6000-b7bc9000 rw-p b7bc6000 00:00 0
> b7bc9000-b7c0c000 r-xp 00000000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
> b7c0c000-b7c10000 rw-p 00042000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
> b7c10000-b7d65000 r-xp 00000000 03:01 24117 /lib/i686/cmov/libc-2.7.so
> b7d65000-b7d66000 r--p 00155000 03:01 24117 /lib/i686/cmov/libc-2.7.so
> b7d66000-b7d68000 rw-p 00156000 03:01 24117 /lib/i686/cmov/libc-2.7.so
> b7d68000-b7d6b000 rw-p b7d68000 00:00 0
> b7d6b000-b7d74000 r-xp 00000000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
> b7d74000-b7d76000 rw-p 00008000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
> b7d76000-b7d9e000 rw-p b7d76000 00:00 0
> b7d9e000-b7df6000 r-xp 00000000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
> b7df6000-b7df8000 rw-p 00058000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
> b7df8000-b7f2d000 rw-p b7df8000 00:00 0
> b7f2d000-b7fba000 r-xp 00000000 03:05 185145
> /usr/local/lib/libntopreport-3.4-pre2.so
> b7fba000-b7fbc000 rw-p 0008c000 03:05 185145
> /usr/local/lib/libntopreport-3.4-pre2.so
> b7fbc000-b7fbd000 rw-p b7fbc000 00:00 0
> b7fbe000-b7fc2000 r-xp 00000000 03:05 185579
> /usr/local/lib/ntop/plugins/icmpPlugin.so
> b7fc2000-b7fc3000 rw-p 00003000 03:05 185579
> /usr/local/lib/ntop/plugins/icmpPlugin.so
> b7fc3000-b7fc5000 rw-p b7fc3000 00:00 0
> b7fc5000-b7fc6000 r-xp b7fc5000 00:00 0 [vdso]
> b7fc6000-b7fe0000 r-xp 00000000 03:01 14191 /lib/ld-2.7.so
> b7fe0000-b7fe2000 rw-p 0001a000 03:01 14191 /lib/ld-2.7.so
> bfa0f000-bfa24000 rw-p bffeb000 00:00 0 [stack]
>
> anybody could help me to make it works ?
> i can give other informations if necessary
>
> thank you
>
>

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Pascal.Legrand at univ-orleans

Feb 2, 2010, 2:15 AM

Post #7 of 13 (1274 views)
Permalink
Re: ntop problem [In reply to]

> Pascal
> there's a bug while reassembling fragmented packets. Please capture with
> wireshark some packets that are able to reproduce the problem
>

does ngrep -O file.pcap is the same than wireshark ?
then i could launch ntop and at the same time ngrep
the problem is the size of the file.pcap

thanks for your answer


--

---------------------------------------------------------------
Pascal Legrand
*IUT de Chartres* - _Service Informatique_
---------------------------------------------------------------
1, place Roger Joly
28000 Chartres
Tel : 02 37 91 83 36 - Fax: 02 37 91 83 01

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Feb 2, 2010, 4:56 AM

Post #8 of 13 (1280 views)
Permalink
Re: ntop problem [In reply to]

On 02/02/2010 11:15 AM, Pascal Legrand wrote:
Pascal there's a bug while reassembling fragmented packets. Please capture with wireshark some packets that are able to reproduce the problem
does ngrep -O file.pcap is the same than wireshark ? then i could launch ntop and at the same time ngrep the problem is the size of the file.pcap
No idea but bear in mind that I need all packet fragments in order to reproduce the problem

Luca
thanks for your answer


Pascal.Legrand at univ-orleans

Feb 2, 2010, 5:34 AM

Post #9 of 13 (1268 views)
Permalink
Re: ntop problem [In reply to]

> No idea but bear in mind that I need all packet fragments in order to
> reproduce the problem
>
> Luca
ntop is on a machine with 2 interfaces configured like that :

auto eth1
iface eth1 inet static
address 192.168.151.200
netmask 255.255.255.0
network 192.168.151.0
broadcast 192.168.151.255
gateway 192.168.151.254

auto eth0
iface eth0 inet static
address 192.168.151.238
netmask 255.255.255.0
network 192.168.151.0
broadcast 192.168.151.255

auto eth0.2
iface eth0.2 inet static
address 192.168.39.238
netmask 255.255.255.0
network 192.168.39.0
broadcast 192.168.39.255

auto eth0.3
iface eth0.3 inet static
address 192.168.152.238
netmask 255.255.255.0
network 192.168.152.0
broadcast 192.168.152.255


eth0 is "vlaned" and ntop is working on eth0, eth0.2, eth0.3
eth1 is the interface i use to go on web server (192.168.151.200:3000)
if i had to get all the packet fragment what is the way to get it on all eth0 ?

thanks again

--

---------------------------------------------------------------
Pascal Legrand
*IUT de Chartres* - _Service Informatique_
---------------------------------------------------------------
1, place Roger Joly
28000 Chartres
Tel : 02 37 91 83 36 - Fax: 02 37 91 83 01

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


deri at ntop

Feb 2, 2010, 5:47 AM

Post #10 of 13 (1274 views)
Permalink
Re: ntop problem [In reply to]

On 02/02/2010 02:34 PM, Pascal Legrand wrote:
No idea but bear in mind that I need all packet fragments in order to reproduce the problem Luca
ntop is on a machine with 2 interfaces configured like that : auto eth1 iface eth1 inet static address 192.168.151.200 netmask 255.255.255.0 network 192.168.151.0 broadcast 192.168.151.255 gateway 192.168.151.254 auto eth0 iface eth0 inet static address 192.168.151.238 netmask 255.255.255.0 network 192.168.151.0 broadcast 192.168.151.255 auto eth0.2 iface eth0.2 inet static address 192.168.39.238 netmask 255.255.255.0 network 192.168.39.0 broadcast 192.168.39.255 auto eth0.3 iface eth0.3 inet static address 192.168.152.238 netmask 255.255.255.0 network 192.168.152.0 broadcast 192.168.152.255 eth0 is "vlaned" and ntop is working on eth0, eth0.2, eth0.3 eth1 is the interface i use to go on web server (192.168.151.200:3000) if i had to get all the packet fragment what is the way to get it on all eth0 ?
tcpdump -s 0 -i eth0 -w myfile.pcap

Luca
thanks again


Pascal.Legrand at univ-orleans

Feb 2, 2010, 6:16 AM

Post #11 of 13 (1276 views)
Permalink
Re: ntop problem [In reply to]

> tcpdump -s 0 -i eth0 -w myfile.pcap
>
> Luca

then first i launch tcpdump like that : tcpdump -s 0 -i eth0 -w /home/ntop.pcap
just after i launch ntop : /usr/local/bin/ntop -u ntop -K -n
when ntop crash i stop tcpdump
i display only fragmented

here is the file : http://plegrand1.free.fr/ntop.fragmented.pcap

thanks again for your help


--

---------------------------------------------------------------
Pascal Legrand
---------------------------------------------------------------

_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Pascal.Legrand at univ-orleans

Feb 8, 2010, 5:18 AM

Post #12 of 13 (1247 views)
Permalink
Re: ntop problem [In reply to]

-------- Message original --------

> Pascal
> there's a bug while reassembling fragmented packets. Please capture with
> wireshark some packets that are able to reproduce the problem
>
> Luca
>
>
> On 02/02/2010 09:37 AM, Pascal Legrand wrote:
>> Hello
>> I'm using ntop v.3.4-pre2 (32 bit) installed from sources.
>> Everything worked fine, but after some time ntop segfault again
>>
>> i launch it like that "/usr/local/bin/ntop -u ntop -K -n"
>>
>> dmesg tell me :
>> [671256.012006] ntop[4392]: segfault at 534 ip b7db545a sp af95a8b0 error 4 in
>> libntop-3.4-pre2.so[b7d95000+58000]
>>
>>
>> and i've got this trace :
>>
>> *** glibc detected *** /usr/local/bin/ntop: double free or corruption
>> (fasttop): 0x0a227358 ***
>> ======= Backtrace: =========
>> /lib/i686/cmov/libc.so.6[0xb7c7e624]
>> /lib/i686/cmov/libc.so.6(cfree+0x96)[0xb7c80826]
>> /usr/local/lib/libntop-3.4-pre2.so(ntop_safefree+0x2c)[0xb7db589c]
>> /usr/local/lib/libntop-3.4-pre2.so(deleteFragment+0x47)[0xb7dbca57]
>> /usr/local/lib/libntop-3.4-pre2.so[0xb7dbe84e]
>> /usr/local/lib/libntop-3.4-pre2.so[0xb7dc2f99]
>> /usr/local/lib/libntop-3.4-pre2.so(processPacket+0x24c9)[0xb7dc9ae9]
>> /usr/local/lib/libntop-3.4-pre2.so(queuePacket+0x2b2)[0xb7dcd842]
>> /usr/lib/libpcap.so.0.8[0xb785bd45]
>> /usr/lib/libpcap.so.0.8(pcap_dispatch+0x27)[0xb785c0e7]
>> /usr/local/lib/libntop-3.4-pre2.so(pcapDispatch+0x13b)[0xb7db6b0b]
>> /lib/i686/cmov/libpthread.so.0[0xb7a174c0]
>> /lib/i686/cmov/libc.so.6(clone+0x5e)[0xb7cf06de]
>> ======= Memory map: ========
>> 08048000-08058000 r-xp 00000000 03:05 185149 /usr/local/bin/ntop
>> 08058000-08059000 rw-p 0000f000 03:05 185149 /usr/local/bin/ntop
>> 09fb9000-0a232000 rw-p 09fb9000 00:00 0 [heap]
>> af000000-af021000 rw-p af000000 00:00 0
>> af021000-af100000 ---p af021000 00:00 0
>> af153000-af154000 ---p af153000 00:00 0
>> af154000-af954000 rw-p af154000 00:00 0
>> af954000-af964000 r-xp 00000000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
>> af964000-af966000 rw-p 0000f000 03:01 34143 /lib/i686/cmov/libresolv-2.7.so
>> af966000-af968000 rw-p af966000 00:00 0
>> af968000-af969000 ---p af968000 00:00 0
>> af969000-b0169000 rw-p af969000 00:00 0
>> b0169000-b016a000 ---p b0169000 00:00 0
>> b016a000-b096a000 rw-p b016a000 00:00 0
>> b096a000-b096b000 ---p b096a000 00:00 0
>> b096b000-b116b000 rw-p b096b000 00:00 0
>> b116b000-b116c000 ---p b116b000 00:00 0
>> b116c000-b196c000 rw-p b116c000 00:00 0
>> b196c000-b198e000 r-xp 00000000 03:05 185582
>> /usr/local/lib/ntop/plugins/rrdPlugin.so
>> b198e000-b198f000 rw-p 00022000 03:05 185582
>> /usr/local/lib/ntop/plugins/rrdPlugin.so
>> b198f000-b1996000 r-xp 00000000 03:05 185581
>> /usr/local/lib/ntop/plugins/cpacketPlugin.so
>> b1996000-b1997000 rw-p 00006000 03:05 185581
>> /usr/local/lib/ntop/plugins/cpacketPlugin.so
>> b1997000-b1998000 ---p b1997000 00:00 0
>> b1998000-b219a000 rw-p b1998000 00:00 0
>> b219a000-b219b000 ---p b219a000 00:00 0
>> b219b000-b299b000 rw-p b219b000 00:00 0
>> b299b000-b299c000 ---p b299b000 00:00 0
>> b299c000-b675a000 rw-p b299c000 00:00 0
>> b675d000-b6769000 r-xp 00000000 03:01 14059 /lib/libgcc_s.so.1
>> b6769000-b676a000 rw-p 0000b000 03:01 14059 /lib/libgcc_s.so.1
>> b676a000-b676e000 r-xp 00000000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
>> b676e000-b6770000 rw-p 00003000 03:01 34140 /lib/i686/cmov/libnss_dns-2.7.so
>> b6770000-b6784000 r-xp 00000000 03:05 185580
>> /usr/local/lib/ntop/plugins/netflowPlugin.so
>> b6784000-b6785000 rw-p 00013000 03:05 185580
>> /usr/local/lib/ntop/plugins/netflowPlugin.so
>> b6785000-b679a000 r-xp 00000000 03:05 185583
>> /usr/local/lib/ntop/plugins/sflowPlugin.so
>> b679a000-b679b000 rw-p 00014000 03:05 185583
>> /usr/local/lib/ntop/plugins/sflowPlugin.so
>> b679b000-b68d5000 r--p 00000000 03:05 88779 /usr/lib/locale/locale-archive
>> b68d5000-b6957000 rw-p b68d5000 00:00 0
>> b6957000-b6961000 r-xp 00000000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
>> b6961000-b6963000 rw-p 00009000 03:01 34145 /lib/i686/cmov/libnss_files-2.7.so
>> b6963000-b696b000 r-xp 00000000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
>> b696b000-b696d000 rw-p 00008000 03:01 24111 /lib/i686/cmov/libnss_nis-2.7.so
>> b696d000-b6982000 r-xp 00000000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
>> b6982000-b6984000 rw-p 00014000 03:01 24112 /lib/i686/cmov/libnsl-2.7.so
>> b6984000-b6986000 rw-p b6984000 00:00 0
>> b6986000-b698d000 r-xp 00000000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
>> b698d000-b698f000 rw-p 00006000 03:01 24115 /lib/i686/cmov/libnss_compat-2.7.so
>> b6995000-b7262000 rw-p b6995000 00:00 0
>> b7262000-b7263000 r-xp 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
>> b7263000-b7264000 rw-p 00000000 03:05 89834 /usr/lib/libxcb-xlib.so.0.0.0
>> b7264000-b7265000 rw-p b7264000 00:00 0
>> b7265000-b7269000 r-xp 00000000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
>> b7269000-b726a000 rw-p 00003000 03:05 89830 /usr/lib/libXdmcp.so.6.0.0
>> b726a000-b726c000 r-xp 00000000 03:05 89828 /usr/lib/libXau.so.6.0.0
>> b726c000-b726d000 rw-p 00001000 03:05 89828 /usr/lib/libXau.so.6.0.0
>> b726d000-b7291000 r-xp 00000000 03:05 89861 /usr/lib/libexpat.so.1.5.2
>> b7291000-b7293000 rw-p 00023000 03:05 89861 /usr/lib/libexpat.so.1.5.2
>> b7293000-b72bb000 r-xp 00000000 03:05 88562 /usr/lib/libpcre.so.3.12.1
>> b72bb000-b72bc000 rw-p 00027000 03:05 88562 /usr/lib/libpcre.so.3.12.1
>> b72bc000-b72e4000 r-xp 00000000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
>> b72e4000-b72e5000 rw-p 00027000 03:05 89884 /usr/lib/libpixman-1.so.0.10.0
>> b72e5000-b72e6000 rw-p b72e5000 00:00 0
>> b72e6000-b73d1000 r-xp 00000000 03:05 89836 /usr/lib/libX11.so.6.2.0
>> b73d1000-b73d5000 rw-p 000ea000 03:05 89836 /usr/lib/libX11.so.6.2.0
>> b73d5000-b73dd000 r-xp 00000000 03:05 89890 /usr/lib/libXrender.so.1.3.0
>> b73dd000-b73de000 rw-p 00007000 03:05 89890 /usr/lib/libXrender.so.1.3.0
>> b73de000-b73f5000 r-xp 00000000 03:05 89832 /usr/lib/libxcb.so.1.0.0
>> b73f5000-b73f6000 rw-p 00017000 03:05 89832 /usr/lib/libxcb.so.1.0.0
>> b73f6000-b73fc000 r-xp 00000000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
>> b73fc000-b73fd000 rw-p 00005000 03:05 89886 /usr/lib/libxcb-render.so.0.0.0
>> b73fd000-b7400000 r-xp 00000000 03:05 89888
>> /usr/lib/libxcb-render-util.so.0.0.0
>> b7400000-b7401000 rw-p 00002000 03:05 89888
>> /usr/lib/libxcb-render-util.so.0.0.0
>> b7401000-b7414000 r-xp 00000000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
>> b7414000-b7415000 rw-p 00012000 03:05 89876 /usr/lib/libdirect-1.0.so.0.1.0
>> b7415000-b7416000 rw-p b7415000 00:00 0
>> b7416000-b741d000 r-xp 00000000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
>> b741d000-b741e000 rw-p 00006000 03:05 89878 /usr/lib/libfusion-1.0.so.0.1.0
>> b741e000-b7483000 r-xp 00000000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
>> b7483000-b7485000 rw-p 00065000 03:05 89877 /usr/lib/libdirectfb-1.0.so.0.1.0
>> b7485000-b74af000 r-xp 00000000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
>> b74af000-b74b0000 rw-p 0002a000 03:05 89866 /usr/lib/libfontconfig.so.1.3.0
>> b74b0000-b7521000 r-xp 00000000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
>> b7521000-b7525000 rw-p 00070000 03:05 89864 /usr/lib/libfreetype.so.6.3.18
>> b7525000-b754b000 r-xp 00000000 03:05 89906
>> /usr/lib/libpangoft2-1.0.so.0.2002.3
>> b754b000-b754c000 rw-p 00026000 03:05 89906
>> /usr/lib/libpangoft2-1.0.so.0.2002.3
>> b754c000-b754d000 rw-p b754c000 00:00 0
>> b754d000-b7601000 r-xp 00000000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
>> b7601000-b7602000 rw-p 000b4000 03:05 89848 /usr/lib/libglib-2.0.so.0.1600.6
>> b7602000-b7605000 r-xp 00000000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
>> b7605000-b7606000 rw-p 00002000 03:05 89847 /usr/lib/libgmodule-2.0.so.0.1600.6
>> b7606000-b7641000 r-xp 00000000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
>> b7641000-b7642000 rw-p 0003b000 03:05 89845 /usr/lib/libgobject-2.0.so.0.1600.6
>> b7642000-b76ac000 r-xp 00000000 03:05 89892 /usr/lib/libcairo.so.2.17.5
>> b76ac000-b76ae000 rw-p 0006a000 03:05 89892 /usr/lib/libcairo.so.2.17.5
>> b76ae000-b76ec000 r-xp 00000000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
>> b76ec000-b76ee000 rw-p 0003d000 03:05 89904 /usr/lib/libpango-1.0.so.0.2002.3
>> b76ee000-b76ef000 rw-p b76ee000 00:00 0
>> b76ef000-b76f8000 r-xp 00000000 03:05 89905
>> /usr/lib/libpangocairo-1.0.so.0.2002.3
>> b76f8000-b76f9000 rw-p 00008000 03:05 89905
>> /usr/lib/libpangocairo-1.0.so.0.2002.3
>> b76f9000-b771c000 r-xp 00000000 03:05 89870 /usr/lib/libpng12.so.0.27.0
>> b771c000-b771d000 rw-p 00023000 03:05 89870 /usr/lib/libpng12.so.0.27.0
>> b771d000-b7850000 r-xp 00000000 03:05 88953 /usr/lib/libxml2.so.2.6.32
>> b7850000-b7855000 rw-p 00132000 03:05 88953 /usr/lib/libxml2.so.2.6.32
>> b7855000-b7856000 rw-p b7855000 00:00 0
>> b7856000-b787e000 r-xp 00000000 03:05 90024 /usr/lib/libpcap.so.0.9.8
>> b787e000-b7880000 rw-p 00027000 03:05 90024 /usr/lib/libpcap.so.0.9.8
>> b7880000-b78a7000 r-xp 00000000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
>> b78a7000-b78a8000 rw-p 00027000 03:05 185119 /usr/local/lib/libGeoIP.so.1.4.5
>> b78a8000-b78a9000 rw-p b78a8000 00:00 0
>> b78a9000-b79b8000 r-xp 00000000 03:05 88580 /usr/lib/libpython2.5.so.1.0
>> b79b8000-b79dd000 rw-p 0010e000 03:05 88580 /usr/lib/libpython2.5.so.1.0
>> b79dd000-b79e3000 rw-p b79dd000 00:00 0
>> b79e3000-b7a07000 r-xp 00000000 03:01 24101 /lib/i686/cmov/libm-2.7.so
>> b7a07000-b7a09000 rw-p 00023000 03:01 24101 /lib/i686/cmov/libm-2.7.so
>> b7a09000-b7a0b000 r-xp 00000000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
>> b7a0b000-b7a0d000 rw-p 00001000 03:01 24113 /lib/i686/cmov/libutil-2.7.so
>> b7a0d000-b7a0f000 r-xp 00000000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
>> b7a0f000-b7a11000 rw-p 00001000 03:01 24114 /lib/i686/cmov/libdl-2.7.so
>> b7a11000-b7a26000 r-xp 00000000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
>> b7a26000-b7a28000 rw-p 00014000 03:01 24110 /lib/i686/cmov/libpthread-2.7.so
>> b7a28000-b7a2a000 rw-p b7a28000 00:00 0
>> b7a2a000-b7a3e000 r-xp 00000000 03:05 88552 /usr/lib/libz.so.1.2.3.3
>> b7a3e000-b7a3f000 rw-p 00013000 03:05 88552 /usr/lib/libz.so.1.2.3.3
>> b7a3f000-b7a40000 rw-p b7a3f000 00:00 0
>> b7a40000-b7a45000 r-xp 00000000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
>> b7a45000-b7a46000 rw-p 00004000 03:05 88947 /usr/lib/libgdbm.so.3.0.0
>> b7a46000-b7a73000 r-xp 00000000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
>> b7a73000-b7a76000 rw-p 0002d000 03:05 90036 /usr/lib/librrd_th.so.4.0.0
>> b7a76000-b7bb0000 r-xp 00000000 03:05 89988
>> /usr/lib/i686/cmov/libcrypto.so.0.9.8
>> b7bb0000-b7bc6000 rw-p 0013a000 03:05 89988
>> /usr/lib/i686/cmov/libcrypto.so.0.9.8
>> b7bc6000-b7bc9000 rw-p b7bc6000 00:00 0
>> b7bc9000-b7c0c000 r-xp 00000000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
>> b7c0c000-b7c10000 rw-p 00042000 03:05 89987 /usr/lib/i686/cmov/libssl.so.0.9.8
>> b7c10000-b7d65000 r-xp 00000000 03:01 24117 /lib/i686/cmov/libc-2.7.so
>> b7d65000-b7d66000 r--p 00155000 03:01 24117 /lib/i686/cmov/libc-2.7.so
>> b7d66000-b7d68000 rw-p 00156000 03:01 24117 /lib/i686/cmov/libc-2.7.so
>> b7d68000-b7d6b000 rw-p b7d68000 00:00 0
>> b7d6b000-b7d74000 r-xp 00000000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
>> b7d74000-b7d76000 rw-p 00008000 03:01 24106 /lib/i686/cmov/libcrypt-2.7.so
>> b7d76000-b7d9e000 rw-p b7d76000 00:00 0
>> b7d9e000-b7df6000 r-xp 00000000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
>> b7df6000-b7df8000 rw-p 00058000 03:05 185142 /usr/local/lib/libntop-3.4-pre2.so
>> b7df8000-b7f2d000 rw-p b7df8000 00:00 0
>> b7f2d000-b7fba000 r-xp 00000000 03:05 185145
>> /usr/local/lib/libntopreport-3.4-pre2.so
>> b7fba000-b7fbc000 rw-p 0008c000 03:05 185145
>> /usr/local/lib/libntopreport-3.4-pre2.so
>> b7fbc000-b7fbd000 rw-p b7fbc000 00:00 0
>> b7fbe000-b7fc2000 r-xp 00000000 03:05 185579
>> /usr/local/lib/ntop/plugins/icmpPlugin.so
>> b7fc2000-b7fc3000 rw-p 00003000 03:05 185579
>> /usr/local/lib/ntop/plugins/icmpPlugin.so
>> b7fc3000-b7fc5000 rw-p b7fc3000 00:00 0
>> b7fc5000-b7fc6000 r-xp b7fc5000 00:00 0 [vdso]
>> b7fc6000-b7fe0000 r-xp 00000000 03:01 14191 /lib/ld-2.7.so
>> b7fe0000-b7fe2000 rw-p 0001a000 03:01 14191 /lib/ld-2.7.so
>> bfa0f000-bfa24000 rw-p bffeb000 00:00 0 [stack]
>>
>> anybody could help me to make it works ?
>> i can give other informations if necessary
>>
>> thank you
>>
>>
>
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
>
i made the capture and i put the file here :
http://plegrand1.free.fr/ntop.fragmented.pcap

do you prefere i send it to you by mail ?

thank you for your answer

--


_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop


Pascal.Legrand at univ-orleans

Mar 5, 2010, 12:37 AM

Post #13 of 13 (1102 views)
Permalink
Re: ntop problem [In reply to]

-------- Message original --------

> Pascal
> there's a bug while reassembling fragmented packets. Please capture with
> wireshark some packets that are able to reproduce the problem
>
> Luca
>
>
Hello Luca
have you got some news about this problem ?

--


_______________________________________________
Ntop mailing list
Ntop [at] listgateway
http://listgateway.unipi.it/mailman/listinfo/ntop

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.