[Ntop] Sflow stops on windows server 2003

[Burton Strauss]

Well. 

 

(1) We don't support other people's packages - you should refer the problem
to OpenXTRA.

 

(2) I don't know much about sFlow - InMon contributed the code, but hasn't
AFAIK provided support since then.

 

(3) The usual (generic) answer is to run under gdb (debugger) to find out
the failure point information.  That's a *nix ism, of course.  So that's not
of much help here.  It might be possible to use tcpdump (Win32 ports are
available), to capture the incoming sFlow packet.  If you capture the packet
which kills the plugin you could send it to InMon.

 

-----Burton

 

  _____  

From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Kilpatrick, Jeff
Sent: Friday, August 12, 2005 10:24 AM
To: ntop at Unipi.IT
Subject: [Ntop] Sflow stops on windows server 2003 

 

I'm running NTOP on windows server 2003, it works ok until I enable the
sFlow plugin and an sFlow device sends a packet at which point NTOP stops.
I've tried running as a service and from a dos prompt with the same results.
Enabling debug on the sflow plugin, it appears one flow sample packet is
received and then NTOP exits.   Here's output from debug:

 

08/11/05 22:29:56 [MSGID9263038] [sflowPlugin:2798] datagramSourceIP
2.16.135.10

 

08/11/05 22:29:56 [MSGID9293630] [sflowPlugin:2799] datagramSize 204

08/11/05 22:29:56 [MSGID0906686] [sflowPlugin:2800] unixSecondsUTC
1123813796

<snip />

08/11/05 22:30:00 [MSGID0008966] [sflowPlugin:2852] startSample
----------------------

08/11/05 22:30:00 [MSGID8458718] [sflowPlugin:2853] sampleType_tag 0:1

08/11/05 22:30:00 [MSGID0000686] [sflowPlugin:2464] sampleType FLOWSAMPLE

08/11/05 22:30:00 [MSGID8488894] [sflowPlugin:2468] sampleSequenceNo 192

08/11/05 22:30:00 [MSGID9142654] [sflowPlugin:2478] sourceId 0:53

08/11/05 22:30:00 [MSGID9169278] [sflowPlugin:2483] meanSkipCount 37

08/11/05 22:30:00 [MSGID0405502] [sflowPlugin:2484] samplePool 37028949

08/11/05 22:30:00 [MSGID0724158] [sflowPlugin:2485] dropEvents 0

08/11/05 22:30:00 [MSGID8475102] [sflowPlugin:2518] flowBlock_tag 0:1

08/11/05 22:30:00 [MSGID0596954] [sflowPlugin:2235] flowSampleType HEADER

08/11/05 22:30:00 [MSGID8717822] [sflowPlugin:2237] headerProtocol 1

08/11/05 22:30:00 [MSGID0662334] [sflowPlugin:2239] sampledPacketSize 68

08/11/05 22:30:00 [MSGID9096766] [sflowPlugin:2243] strippedBytes 8

08/11/05 22:30:00 [MSGID0876926] [sflowPlugin:2246] headerLen 60

08/11/05 22:30:00 [MSGID0692318] [sflowPlugin:2253] headerBytes
FF-FF-FF-FF-FF-F

F-00-06-5B-C0-DE-FD-08-06-00-01-08-00-06-04-00-01-00-06-5B-C0-DE-FD-0A-23-11
-35-

00-00-00-00-00-00-0A-23-10-22-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-0
0-00

-00

08/11/05 22:30:00 [MSGID0358506] [sflowPlugin:1567] dstMAC ffffffffffff

08/11/05 22:30:00 [MSGID0358506] [sflowPlugin:1569] srcMAC 00065bc0defd

08/11/05 22:30:00 [MSGID0008966] [sflowPlugin:2870] endSample
----------------------

 

-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://listgateway.unipi.it/pipermail/ntop/attachments/20050812/bb6fc15e/attachment.htm