Advanced
Mailing List Archive

Mailing List Archive

  1. Home >
  2. NTop>
  3. Users
Issues after upgrading to 3.0
tony.barrett at roke
Jun 5, 2017, 2:36 AM
Post #1 of 5 (974 views)
Permalink
I've just upgraded our installation from 2.4 (stable) to 3.0. PFRING 6.6 seemed to install ok after I cleared out the old kernel modules and deleted all but the current kernel from the system, but I did notice that it's complaining about a missing file - libntapi.so. Would this possibly explain the >20% number of dropped packets I'm now seeing? I had zero dropped packets in 2.4. I see this file has been reported missing before, and the file does seem to be present in the v6.5 rpm.

What I've also noticed since upgrading, is this being repeated in the log file every 5 minutes;

05/Jun/2017 10:20:20 [AlertsManager.cpp:1540] ERROR: SQL Error: near "ORDER": syntax error
DELETE FROM flows_alerts ORDER BY alert_tstamp ASC LIMIT 1288928

The 'ASC LIMIT' value grows with each log entry.

Thanks

Tony

________________________________________
Roke Manor Research Limited, Romsey, Hampshire, SO51 0ZN, United Kingdom.Part of the Chemring Group.
Registered in England & Wales. Registered No: 00267550
http://www.roke.co.uk

Please update your address book. Roke is currently transitioning to its original brand and will no longer
be branded under Chemring Technology Solutions. Email addresses of Roke staff have therefore been changed
from firstname.surname@chemringts.com to firstname.surname@roke.co.uk – please use this updated format
with immediate effect.

________________________________________
The information contained in this e-mail and any attachments is proprietary to Roke Manor Research Limited and
must not be passed to any third party without permission. This communication is for information only and shall
not create or change any contractual relationship.
________________________________________
Re: Issues after upgrading to 3.0 [ In reply to ]
cardigliano at ntop
Jun 5, 2017, 3:24 AM
Post #2 of 5 (974 views)
Permalink
Hi Tony
are you using a Napatech adapter? Where did you see the warning about libntapi.so? Could you provide a trace?

Thank you
Alfredo

> On 5 Jun 2017, at 11:36, Barrett, Tony <tony.barrett@roke.co.uk> wrote:
>
> I’ve just upgraded our installation from 2.4 (stable) to 3.0. PFRING 6.6 seemed to install ok after I cleared out the old kernel modules and deleted all but the current kernel from the system, but I did notice that it’s complaining about a missing file – libntapi.so. Would this possibly explain the >20% number of dropped packets I’m now seeing? I had zero dropped packets in 2.4. I see this file has been reported missing before, and the file does seem to be present in the v6.5 rpm.
>
> What I’ve also noticed since upgrading, is this being repeated in the log file every 5 minutes;
>
> 05/Jun/2017 10:20:20 [AlertsManager.cpp:1540] ERROR: SQL Error: near "ORDER": syntax error
> DELETE FROM flows_alerts ORDER BY alert_tstamp ASC LIMIT 1288928
>
> The ‘ASC LIMIT’ value grows with each log entry.
>
> Thanks
>
> Tony
>
>
> Follow Us: LinkedIn <http://www.linkedin.com/company/roke-manor-research> | Google+ <http://plus.google.com/+rokemanor> | Twitter <https://twitter.com/rokemanor> | Facebook <https://www.facebook.com/rokemanor>
> Roke Manor Research Limited, Romsey, Hampshire, SO51 0ZN, United Kingdom. Part of the Chemring Group. Registered in England & Wales. Registered No: 00267550. The information contained in this e-mail and any attachments is proprietary to Roke Manor Research Limited and must not be passed to any third party without permission. This communication is for information only and shall not create or change any contractual relationship.
> www.roke.co.uk <http://www.roke.co.uk/?utm_source=Roke&utm_medium=Email&utm_content=Company%20Signature&utm_campaign=Roke>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop <http://listgateway.unipi.it/mailman/listinfo/ntop>

Attached Files:

Re: Issues after upgrading to 3.0 [ In reply to ]
cardigliano at ntop
Jun 5, 2017, 3:24 AM
Post #3 of 5 (974 views)
Permalink
Hi Tony
are you using a Napatech adapter? Where did you see the warning about libntapi.so? Could you provide a trace?

Thank you
Alfredo

> On 5 Jun 2017, at 11:36, Barrett, Tony <tony.barrett@roke.co.uk> wrote:
>
> I’ve just upgraded our installation from 2.4 (stable) to 3.0. PFRING 6.6 seemed to install ok after I cleared out the old kernel modules and deleted all but the current kernel from the system, but I did notice that it’s complaining about a missing file – libntapi.so. Would this possibly explain the >20% number of dropped packets I’m now seeing? I had zero dropped packets in 2.4. I see this file has been reported missing before, and the file does seem to be present in the v6.5 rpm.
>
> What I’ve also noticed since upgrading, is this being repeated in the log file every 5 minutes;
>
> 05/Jun/2017 10:20:20 [AlertsManager.cpp:1540] ERROR: SQL Error: near "ORDER": syntax error
> DELETE FROM flows_alerts ORDER BY alert_tstamp ASC LIMIT 1288928
>
> The ‘ASC LIMIT’ value grows with each log entry.
>
> Thanks
>
> Tony
>
>
> Follow Us: LinkedIn <http://www.linkedin.com/company/roke-manor-research> | Google+ <http://plus.google.com/+rokemanor> | Twitter <https://twitter.com/rokemanor> | Facebook <https://www.facebook.com/rokemanor>
> Roke Manor Research Limited, Romsey, Hampshire, SO51 0ZN, United Kingdom. Part of the Chemring Group. Registered in England & Wales. Registered No: 00267550. The information contained in this e-mail and any attachments is proprietary to Roke Manor Research Limited and must not be passed to any third party without permission. This communication is for information only and shall not create or change any contractual relationship.
> www.roke.co.uk <http://www.roke.co.uk/?utm_source=Roke&utm_medium=Email&utm_content=Company%20Signature&utm_campaign=Roke>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it <mailto:Ntop@listgateway.unipi.it>
> http://listgateway.unipi.it/mailman/listinfo/ntop <http://listgateway.unipi.it/mailman/listinfo/ntop>

Attached Files:

Re: Issues after upgrading to 3.0 [ In reply to ]
mainardi at ntop
Jun 5, 2017, 5:46 AM
Post #4 of 5 (974 views)
Permalink
On Mon, Jun 5, 2017 at 11:36 AM, Barrett, Tony <tony.barrett@roke.co.uk>
wrote:

> I’ve just upgraded our installation from 2.4 (stable) to 3.0. PFRING 6.6
> seemed to install ok after I cleared out the old kernel modules and deleted
> all but the current kernel from the system, but I did notice that it’s
> complaining about a missing file – libntapi.so. Would this possibly explain
> the >20% number of dropped packets I’m now seeing? I had zero dropped
> packets in 2.4. I see this file has been reported missing before, and the
> file does seem to be present in the v6.5 rpm.
>
>
> What I’ve also noticed since upgrading, is this being repeated in the log
> file every 5 minutes;
>
>
>
> 05/Jun/2017 10:20:20 [AlertsManager.cpp:1540] ERROR: SQL Error: near
> "ORDER": syntax error
>
> DELETE FROM flows_alerts ORDER BY alert_tstamp ASC LIMIT 1288928
>

Tony, I can confirm this is fixed now both in stable and dev. Please wait
as new packages are being rebuilt and will be available tomorrow.


>
>
> The ‘ASC LIMIT’ value grows with each log entry.
>
>
>
> Thanks
>
>
>
> Tony
>
>
> Follow Us: LinkedIn <http://www.linkedin.com/company/roke-manor-research>
> | Google+ <http://plus.google.com/+rokemanor> | Twitter
> <https://twitter.com/rokemanor> | Facebook
> <https://www.facebook.com/rokemanor>
>
> Roke Manor Research Limited, Romsey, Hampshire, SO51 0ZN, United Kingdom.
> Part of the Chemring Group. Registered in England & Wales. Registered No:
> 00267550. The information contained in this e-mail and any attachments is
> proprietary to Roke Manor Research Limited and must not be passed to any
> third party without permission. This communication is for information only
> and shall not create or change any contractual relationship.
> www.roke.co.uk
> <http://www.roke.co.uk/?utm_source=Roke&utm_medium=Email&utm_content=Company%20Signature&utm_campaign=Roke>
> ------------------------------
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>
Re: Issues after upgrading to 3.0 [ In reply to ]
mainardi at ntop
Jun 5, 2017, 5:46 AM
Post #5 of 5 (974 views)
Permalink
On Mon, Jun 5, 2017 at 11:36 AM, Barrett, Tony <tony.barrett@roke.co.uk>
wrote:

> I’ve just upgraded our installation from 2.4 (stable) to 3.0. PFRING 6.6
> seemed to install ok after I cleared out the old kernel modules and deleted
> all but the current kernel from the system, but I did notice that it’s
> complaining about a missing file – libntapi.so. Would this possibly explain
> the >20% number of dropped packets I’m now seeing? I had zero dropped
> packets in 2.4. I see this file has been reported missing before, and the
> file does seem to be present in the v6.5 rpm.
>
>
> What I’ve also noticed since upgrading, is this being repeated in the log
> file every 5 minutes;
>
>
>
> 05/Jun/2017 10:20:20 [AlertsManager.cpp:1540] ERROR: SQL Error: near
> "ORDER": syntax error
>
> DELETE FROM flows_alerts ORDER BY alert_tstamp ASC LIMIT 1288928
>

Tony, I can confirm this is fixed now both in stable and dev. Please wait
as new packages are being rebuilt and will be available tomorrow.


>
>
> The ‘ASC LIMIT’ value grows with each log entry.
>
>
>
> Thanks
>
>
>
> Tony
>
>
> Follow Us: LinkedIn <http://www.linkedin.com/company/roke-manor-research>
> | Google+ <http://plus.google.com/+rokemanor> | Twitter
> <https://twitter.com/rokemanor> | Facebook
> <https://www.facebook.com/rokemanor>
>
> Roke Manor Research Limited, Romsey, Hampshire, SO51 0ZN, United Kingdom.
> Part of the Chemring Group. Registered in England & Wales. Registered No:
> 00267550. The information contained in this e-mail and any attachments is
> proprietary to Roke Manor Research Limited and must not be passed to any
> third party without permission. This communication is for information only
> and shall not create or change any contractual relationship.
> www.roke.co.uk
> <http://www.roke.co.uk/?utm_source=Roke&utm_medium=Email&utm_content=Company%20Signature&utm_campaign=Roke>
> ------------------------------
>
> _______________________________________________
> Ntop mailing list
> Ntop@listgateway.unipi.it
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

©2024 GT.net. A Gossamer Threads company.
5th Floor, 455 Granville St., Vancouver, BC V6C 1T1, Canada | Legal