Login | Register For Free | Help
Search for: (Advanced)

Mailing List Archive: NTop: Users

problem with ntop 4

 

 

NTop users RSS feed   Index | Next | Previous | View Threaded


twolf at alten-technology

Mar 22, 2012, 1:56 AM

Post #1 of 3 (1034 views)
Permalink
problem with ntop 4

Hello community,

i have managed to compile ntop 4 from svn (version 4.99.0) on an Ubuntu 10.04 linux where ntop 3.3 ran fine.

Compiling was done following the link http://blog.dinotools.de/2010/12/20/ntop-4-unter-ubuntu-10-04-selbst-compilieren-und-installieren (sorry, it's a german site), compiling, linking and installing ran without any error.

Now ntop starts, shows a few errors like

**WARNING** Internal error: protocol overflow [140/139]
......
CHKVER: * You have requested - via the --skip-version-check option .... *
......


and sometimes (not always) ends up with a segmentation fault. What is more strange: I have provided a comprehensive list of ports / protocols, but on the website I can't see my protocols in the distribution diagrams, everything is "unknown". It's actually not even identified as IP traffic !

And: I never have given the command line option "--skip-version-check", here's my command line:


ntop -i "eth1" -M -m "111.222.333.0/20" -r "90" -t "2" -u "ntop" -w "3000" -D "myDomain" -P "/ntopdata" -p /etc/ntop/myProtos.list -c -B "no vlan" -4


As I said, ntop 3.3 ran fine, so what can I do to see what's going wrong ?

Thanks in advance for your help and best wishes,
Thorsten


deri at ntop

Mar 27, 2012, 7:20 AM

Post #2 of 3 (954 views)
Permalink
Re: problem with ntop 4 [In reply to]

Thorsten
we're moving towads nDPI and less on port-based detection. Can you please share with me your myProtos.list file?

Luca

On Mar 22, 2012, at 9:56 AM, Thorsten Volkmer-Wolf wrote:

> Hello community,
>
> i have managed to compile ntop 4 from svn (version 4.99.0) on an Ubuntu 10.04 linux where ntop 3.3 ran fine.
>
> Compiling was done following the linkhttp://blog.dinotools.de/2010/12/20/ntop-4-unter-ubuntu-10-04-selbst-compilieren-und-installieren (sorry, it’s a german site), compiling, linking and installing ran without any error.
>
> Now ntop starts, shows a few errors like
>
> **WARNING** Internal error: protocol overflow [140/139]
> ……
> CHKVER: * You have requested - via the --skip-version-check option …. *
> ……
>
>
> and sometimes (not always) ends up with a segmentation fault. What is more strange: I have provided a comprehensive list of ports / protocols, but on the website I can’t see my protocols in the distribution diagrams, everything is “unknown”. It’s actually not even identified as IP traffic !
>
> And: I never have given the command line option “--skip-version-check”, here’s my command line:
>
>
> ntop -i "eth1" -M -m "111.222.333.0/20" -r "90" -t "2" -u "ntop" -w "3000" -D "myDomain" -P "/ntopdata" -p /etc/ntop/myProtos.list -c -B "no vlan" -4
>
>
> As I said, ntop 3.3 ran fine, so what can I do to see what’s going wrong ?
>
> Thanks in advance for your help and best wishes,
> Thorsten
> _______________________________________________
> Ntop mailing list
> Ntop [at] listgateway
> http://listgateway.unipi.it/mailman/listinfo/ntop


twolf at alten-technology

Mar 27, 2012, 9:15 AM

Post #3 of 3 (961 views)
Permalink
Re: problem with ntop 4 [In reply to]

Hi Luca,

thanks for your kind help. Attached you'll find the file, as it is in use right now (but obviously this changes from time to time).

I compiled 4.1, that works on Ubuntu 10.04. Of course I would appreciate to have DPI, but for the time being it's ok for me to live with a more port based solution. For DPI i might also be able to pay for consultancy and commercial support. Could you give me a calculation base please ?

Let me know if I can contribute any further and I'll see if I can manage.

Best wishes,
Thorsten

Dipl.-Ing.
Thorsten Volkmer-Wolf
Head of IT Network & Infrastructure
Tel : +49 (40) 742198 - 241
Fax: +49 (40) 742198 - 111
Thorsten.Volkmer-Wolf [at] alten-technology
[cid:image004.jpg [at] 01CD0C45]

[cid:image006.png [at] 01CD0C45]


[cid:image003.jpg [at] 01CD0C45]

http://www.aerotec.de<http://www.aerotec.de/>
Geschäftsführer: Pierre Marcel
Amtsgericht Hamburg HRB 105801

Von: Luca Deri [mailto:deri [at] ntop]
Gesendet: Dienstag, 27. März 2012 16:21
An: ntop [at] unipi
Betreff: Re: [Ntop] problem with ntop 4

Thorsten
we're moving towads nDPI and less on port-based detection. Can you please share with me your myProtos.list file?

Luca

On Mar 22, 2012, at 9:56 AM, Thorsten Volkmer-Wolf wrote:


Hello community,

i have managed to compile ntop 4 from svn (version 4.99.0) on an Ubuntu 10.04 linux where ntop 3.3 ran fine.

Compiling was done following the linkhttp://blog.dinotools.de/2010/12/20/ntop-4-unter-ubuntu-10-04-selbst-compilieren-und-installieren (sorry, it's a german site), compiling, linking and installing ran without any error.

Now ntop starts, shows a few errors like

**WARNING** Internal error: protocol overflow [140/139]
......
CHKVER: * You have requested - via the --skip-version-check option .... *
......


and sometimes (not always) ends up with a segmentation fault. What is more strange: I have provided a comprehensive list of ports / protocols, but on the website I can't see my protocols in the distribution diagrams, everything is "unknown". It's actually not even identified as IP traffic !

And: I never have given the command line option "--skip-version-check", here's my command line:


ntop -i "eth1" -M -m "111.222.333.0/20" -r "90" -t "2" -u "ntop" -w "3000" -D "myDomain" -P "/ntopdata" -p /etc/ntop/myProtos.list -c -B "no vlan" -4


As I said, ntop 3.3 ran fine, so what can I do to see what's going wrong ?

Thanks in advance for your help and best wishes,
Thorsten
_______________________________________________
Ntop mailing list
Ntop [at] listgateway<mailto:Ntop [at] listgateway>
http://listgateway.unipi.it/mailman/listinfo/ntop
Attachments: image003.jpg (1.80 KB)
  image004.jpg (0.80 KB)
  image005.emz (3.39 KB)
  image006.png (3.01 KB)
  aeroProtos.list (0.53 KB)

NTop users RSS feed   Index | Next | Previous | View Threaded
 
 


Interested in having your list archived? Contact Gossamer Threads
 
  Web Applications & Managed Hosting Powered by Gossamer Threads Inc.