Mailing List Archive

Ntop 2.0 Beta Segfaults when using -S 1 Option
Hi!

I'm using Ntop 2.0 Beta on Debian 2.2 to monitor a Cisco 7500 Router. It's
doing fine, but it crashes when I'm trying to use the -S 1 Option (Store
information for all hosts after shutdown).
By the way: How do I get rid of the Trojan Warning when someone is
accessing our Proxy Server (Port 8080).

Stdout looks like this:
linmon:/usr/local/bin# /usr/local/bin/ntop -W 3000 -D wgkk.sozvers.at -u
netsaint -m 1.0.0.0/8 -i eth1 -p /etc/protocol.list -c -N -S 1 -P /tmp/ -a
/var/log/apache -t 5
Wait please: ntop is coming up...
26/Jun/2001:18:38:59 [main.c:406] ntop v.2.0.0 MT (SSL) [i686-pc-linux]
(06/22/01 12:29:42 AM build)
26/Jun/2001:18:38:59 [main.c:426] Listening on [eth1]
26/Jun/2001:18:38:59 [main.c:427] Copyright 1998-2001 by Luca Deri
<deri@ntop.org>
26/Jun/2001:18:38:59 [main.c:428] Get the freshest ntop from
http://www.ntop.org/
26/Jun/2001:18:38:59 [main.c:429] Initialising...
26/Jun/2001:18:38:59 [plugin.c:319] Loading plugins (if any)...
26/Jun/2001:18:38:59 [plugin.c:337] Searching plugins in
/usr/local/lib/ntop/plugins
26/Jun/2001:18:38:59 [icmpPlugin.c:1254] Welcome to icmpWatchPlugin. (C)
1999 by Luca Deri.
26/Jun/2001:18:39:00 [lastSeenPlugin.c:414] Welcome to LastSeenWatchPlugin.
(C) 1999 by Andrea Marangoni.
26/Jun/2001:18:39:00 [nfsPlugin.c:342] Welcome to nfsWatchPlugin. (C) 1999
by Luca Deri.
26/Jun/2001:18:39:00 [rmonPlugin.c:169] Welcome to ntopRmon. (C) 2000 by
Luca Deri.
26/Jun/2001:18:39:00 [rmonPlugin.c:171] WARNING: plugin disabled [missing
NET-SNMP]
26/Jun/2001:18:39:00 [wapPlugin.c:304] Welcome to WAPPlugin. (C) 2000 by
Luca Deri.
26/Jun/2001:18:39:00 [plugin.c:190] WARNING: unable to load plugin
'/usr/local/lib/ntop/plugins/libpep.so'
[/usr/local/lib/ntop/plugins/libpep.so: undefined symbol: Perl_hv_undef]
26/Jun/2001:18:39:00 [util.c:548] WARNING: Discarded network 1.0.0.0/8:
this is the local network.
26/Jun/2001:18:39:00 [initialize.c:306] Resetting traffic statistics...
26/Jun/2001:18:39:00 [initialize.c:566] Started thread (1026) for lsof
support.
26/Jun/2001:18:39:00 [initialize.c:502] Started thread (2051) for network
packet analyser.
26/Jun/2001:18:39:00 [initialize.c:509] Started thread (3076) for host
traffic statistics.
26/Jun/2001:18:39:00 [initialize.c:517] Started thread (4101) for
throughput update.
26/Jun/2001:18:39:00 [initialize.c:525] Started thread (5126) for idle
hosts detection.
26/Jun/2001:18:39:00 [initialize.c:547] Started thread (6151) for DNS
address resolution.
26/Jun/2001:18:39:00 [plugin.c:407] Initialising plugins (if any)...
26/Jun/2001:18:39:00 [webInterface.c:821] Waiting for HTTP connections on
port 3000...
26/Jun/2001:18:39:00 [webInterface.c:827] Waiting for HTTPS (SSL)
connections on port 3000...
26/Jun/2001:18:39:00 [main.c:489] Sniffying...
26/Jun/2001:18:39:00 [initialize.c:946] Started thread (8201) for network
packet sniffing on eth1.
*****************26/Jun/2001:18:39:00 [pbuf.c:2222] New TCP session
[130.1.20.247:1635] <-> [172.16.10.222:8080] (# sessions = 11)
**26/Jun/2001:18:39:00 [hash.c:188] Extending hash: [old=32, new=48]
26/Jun/2001:18:39:00 [pbuf.c:1828] WARNING: HTTP detected at wrong port
(trojan?) 130.1.20.247:1635 -> 172.16.10.222:8080 [GET
http://ad.at.doubleclick.net/ad/N1120.derstandard.at/B39957]
26/Jun/2001:18:39:00 [pbuf.c:2222] New TCP session [130.1.20.247:1636] <->
[172.16.10.222:8080] (# sessions = 13)
26/Jun/2001:18:39:00 [pbuf.c:2222] New TCP session [130.1.20.247:1637] <->
[172.16.10.222:8080] (# sessions = 13)
26/Jun/2001:18:39:00 [pbuf.c:1828] WARNING: HTTP detected at wrong port
(trojan?) 130.1.20.247:1636 -> 172.16.10.222:8080 [GET
http://derstandard.at/img/navigation/headerlogo/WEBSTANDARD]
26/Jun/2001:18:39:00 [pbuf.c:1828] WARNING: HTTP detected at wrong port
(trojan?) 130.1.20.247:1637 -> 172.16.10.222:8080 [GET
http://derstandard.at/cgi-bin/ivw/CP/Newsroom/Webstandard/U]
**26/Jun/2001:18:39:00 [pbuf.c:2222] New TCP session [130.1.20.247:1638]
<-> [172.16.10.222:8080] (# sessions = 18)
***26/Jun/2001:18:39:01 [pbuf.c:1828] WARNING: HTTP detected at wrong port
(trojan?) 130.1.20.247:1638 -> 172.16.10.222:8080 [GET
http://accel3.activeagent.at/banner/active-isp/pix.gif HTTP]
**26/Jun/2001:18:39:01 [pbuf.c:2222] New TCP session [130.1.20.247:1639]
<-> [172.16.10.222:8080] (# sessions = 20)
26/Jun/2001:18:39:01 [pbuf.c:1828] WARNING: HTTP detected at wrong port
(trojan?) 130.1.20.247:1639 -> 172.16.10.222:8080 [GET
http://derstandard.at/incl/werbung/werbung.asp?rt=CP/Newsro]
****26/Jun/2001:18:39:01 [hash.c:188] Extending hash: [old=48, new=72]
*****26/Jun/2001:18:39:01 [pbuf.c:2222] New TCP session [130.1.20.247:1640]
<-> [172.16.10.222:8080] (# sessions = 23)
*************26/Jun/2001:18:39:02 [hash.c:188] Extending hash: [old=72,
new=108]
**26/Jun/2001:18:39:03 [pbuf.c:2222] New TCP session [130.1.21.19:2301] <->
[172.16.10.222:8080] (# sessions = 23)
26/Jun/2001:18:39:03 [pbuf.c:2222] New TCP session [130.1.21.19:2302] <->
[172.16.10.222:8080] (# sessions = 23)
*******26/Jun/2001:18:39:03 [pbuf.c:2222] New TCP session
[130.1.21.19:2303] <-> [172.16.10.222:8080] (# sessions = 23)
*26/Jun/2001:18:39:03 [pbuf.c:2222] New TCP session [130.1.21.19:2304] <->
[172.16.10.222:8080] (# sessions = 23)
**********26/Jun/2001:18:39:05 [hash.c:188] Extending hash: [old=108,
new=162]
***26/Jun/2001:18:39:06 [pbuf.c:2222] New TCP session [ccc1049:1559] <->
[sp225:3200] (# sessions = 23)
***26/Jun/2001:18:39:08 [pbuf.c:2222] New TCP session [130.1.20.142:2372]
<-> [172.16.10.222:8080] (# sessions = 23)
***26/Jun/2001:18:39:09 [pbuf.c:2222] New TCP session [130.1.20.142:2373]
<-> [172.16.10.222:8080] (# sessions = 23)
******************26/Jun/2001:18:39:12 [pbuf.c:2222] New TCP session
[130.1.20.247:1643] <-> [172.16.10.222:8080] (# sessions = 23)
**26/Jun/2001:18:39:13 [pbuf.c:2222] New TCP session [130.1.20.247:1644]
<-> [172.16.10.222:8080] (# sessions = 23)
26/Jun/2001:18:39:13 [pbuf.c:2222] New TCP session [130.1.20.247:1645] <->
[172.16.10.222:8080] (# sessions = 23)
26/Jun/2001:18:39:13 [pbuf.c:2222] New TCP session [130.1.20.247:1646] <->
[172.16.10.222:8080] (# sessions = 23)
****26/Jun/2001:18:39:14 [pbuf.c:2222] New TCP session [130.1.20.247:1648]
<-> [172.16.10.222:8080] (# sessions = 23)
**26/Jun/2001:18:39:14 [hash.c:188] Extending hash: [old=162, new=242]
26/Jun/2001:18:39:14 [pbuf.c:2222] New TCP session [130.1.20.247:1649] <->
[172.16.10.222:8080] (# sessions = 23)
*26/Jun/2001:18:39:14 [pbuf.c:2222] New TCP session [ccc1039:1234] <->
[sp226:3200] (# sessions = 23)
26/Jun/2001:18:39:14 [pbuf.c:2222] New TCP session [ntgz111:3547] <->
[nts004:139] (# sessions = 23)
****************26/Jun/2001:18:39:18 [pbuf.c:2222] New TCP session
[hkh1003:3099] <-> [172.16.10.222:8080] (# sessions = 23)
*26/Jun/2001:18:39:19 [pbuf.c:2222] New TCP session [hkh1003:3100] <->
[172.16.10.222:8080] (# sessions = 23)
26/Jun/2001:18:39:19 [pbuf.c:2222] New TCP session [hkh1003:3101] <->
[172.16.10.222:8080] (# sessions = 23)
26/Jun/2001:18:39:19 [pbuf.c:2222] New TCP session [hkh1003:3102] <->
[172.16.10.222:8080] (# sessions = 23)
****26/Jun/2001:18:39:19 [pbuf.c:2222] New TCP session [hkh1003:3103] <->
[172.16.10.222:8080] (# sessions = 23)
**26/Jun/2001:18:39:19 [pbuf.c:2222] New TCP session [hkh1003:3104] <->
[172.16.10.222:8080] (# sessions = 23)
*****26/Jun/2001:18:39:21 [pbuf.c:2222] New TCP session [130.1.20.75:4477]
<-> [172.16.10.222:8080] (# sessions = 23)
*26/Jun/2001:18:39:21 [pbuf.c:2222] New TCP session [130.1.20.75:4478] <->
[172.16.10.222:8080] (# sessions = 23)
********26/Jun/2001:18:39:22 [pbuf.c:2222] New TCP session [hkh1003:3105]
<-> [172.16.10.222:8080] (# sessions = 23)
**Segmentation fault


cu andreas

---
If you wrap the Internet around every person on the planet and spin the
planet, software flows in the network.
- Eben Moglen's Metaphorical Corollary to Faraday's Law