[Ntop] SFLOW issue with ntop v3.1 ( MAX_NUM_SFLOW_INTERFACE )

[Burton Strauss]

The code is pretty clear there in both 3.1 and the cvs:

  if(ifName->ifIndex > MAX_NUM_SFLOW_INTERFACES) {
    traceEvent(CONST_TRACE_WARNING, "SFLOW: ifIndex=%d is too large
(increase MAX_NUM_SFLOW_INTERFACE)", ifName->ifIndex);
  } else {
...

So I suspect you aren't actually (successfully) changing the #define value.

The constant is now defined as 4096 in the cvs, so give that version a try.

-----Burton

-----Original Message-----
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Shawn Freeman
Sent: Wednesday, August 10, 2005 5:52 PM
To: ntop at Unipi.IT
Subject: [Ntop] SFLOW issue with ntop v3.1 ( MAX_NUM_SFLOW_INTERFACE )

Does anyone have any suggestions on what I should do about this syslog error
message "**WARNING** SFLOW: ifIndex=386 is too large (increase
MAX_NUM_SFLOW_INTERFACE)"

I'm trying to get our Foundry Netiron switch to send flow information see
how ntop works. I tried changing the file "globals-structtypes.h" line 1254
from "#define MAX_NUM_SFLOW_INTERFACES      256" to 512. I've even tried
1024, 2048, 4096, and all the way to 16777216 just cause. I re-compiled and
restarted each time.  No change. I still get these error in syslog.

I've done some searching through the archives and on google and can't really
find any suggestions.  Any help would be appreciated.

Thanks,

-- Shawn

Here's the syslog output just incase.



[/var/lib/ntop]: tail -f /var/log/daemon.log 
Aug 10 15:23:15 flapper ntop[9075]:   RRD: Started thread (1149274464) for
data collection.
Aug 10 15:23:15 flapper ntop[9075]:   THREADMGMT: rrd thread (1149274464)
started
Aug 10 15:23:15 flapper ntop[9075]:   Now running as requested user 'ntop'
(101:601)
Aug 10 15:23:15 flapper ntop[9075]:   INIT: Created pid file
(/var/lib/ntop/ntop.pid)
Aug 10 15:23:15 flapper ntop[9075]:   Note: Reporting device initally set to
1 [hfr-01]
Aug 10 15:23:15 flapper ntop[9075]:   THREADMGMT: Started thread
(1157667168) for network packet sniffing on eth0
Aug 10 15:23:15 flapper ntop[9075]:   THREADMGMT: pcapDispatch(eth0) thread
running...
Aug 10 15:23:15 flapper ntop[9075]:   CHKVER: Version file is from
'version.ntop.org'
Aug 10 15:23:15 flapper ntop[9075]:   CHKVER: as of date is
'2004-12-01T17:00:00'
Aug 10 15:23:15 flapper ntop[9075]:   CHKVER: This version of ntop is the
CURRENT stable version
Aug 10 15:26:03 flapper ntop[9075]:   SFLOW: initializing '2' devices
Aug 10 15:26:03 flapper ntop[9075]:   SFLOW: createsFlowDevice(2)
Aug 10 15:26:03 flapper ntop[9075]:   Creating dummy interface,
'sFlow-device.2'
Aug 10 15:26:03 flapper ntop[9075]:   SFLOW: Created a UDP socket (15)
Aug 10 15:26:03 flapper ntop[9075]:   SFLOW: Collector listening on port
6343
Aug 10 15:26:03 flapper ntop[9075]:   SFLOW: createsFlowDevice created
device 2
Aug 10 15:26:08 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:26:08 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:26:28 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:26:28 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:26:48 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:26:48 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:08 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:08 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:28 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:28 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:48 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=386 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
Aug 10 15:27:48 flapper ntop[9075]:   **WARNING** SFLOW: ifIndex=387 is too
large (increase MAX_NUM_SFLOW_INTERFACE)
[..repeat..]


_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop