[Ntop] I love nTop - BUT!!!!

Thu Feb 5 20:16:47 CET 2009

FWIW: nTop process is around 500MB when it dies - as reported by top.  I
don't watch top every second, but 500MB-ish is the largest I've seen it.

G

-----Original Message-----
From: Gary Gatten 
Sent: Thursday, February 05, 2009 1:05 PM
To: 'ntop at unipi.it'; 'yuri at ntop.org'
Subject: RE: [Ntop] I love nTop - BUT!!!!

Died again - no malloc error this time, just doing something with
IDLE_PURGE - which seems to be a recurring theme:

Feb  5 13:04:27 wanmon1 Home.Office[646]:  [MSGID0825709] IDLE_PURGE:
Device[NetFlow-device.8] FINISHED selection, 1116 [out of 10809] hosts
selected

Feb  5 13:04:27 wanmon1 kernel: pid 646 (ntop), uid 1002: exited on
signal 11

I'm Still looking into increasing some kernel limits, maybe it will
help?

G

-----Original Message-----
From: Gary Gatten 
Sent: Thursday, February 05, 2009 11:12 AM
To: 'ntop at unipi.it'; 'yuri at ntop.org'
Subject: RE: [Ntop] I love nTop - BUT!!!!

Maybe:  See output below - FreeBSD 6.x.  Increase stacksize?

wanmon1# limits
Resource limits (current):
  cputime          infinity secs
  filesize         infinity kB
  datasize           524288 kB
  stacksize           65536 kB
  coredumpsize     infinity kB
  memoryuse        infinity kB
  memorylocked     infinity kB
  maxprocesses         5504
  openfiles           11008
  sbsize           infinity bytes
  vmemoryuse       infinity kB

-----Original Message-----
From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf Of
Yuri Francalacci
Sent: Thursday, February 05, 2009 11:08 AM
To: ntop at unipi.it
Subject: Re: [Ntop] I love nTop - BUT!!!!

Could it be an issue related to the limit of the system for your user
(limits.conf)?

cputime      unlimited
filesize     unlimited
datasize     unlimited
stacksize    10240 kbytes
coredumpsize 0 kbytes
memoryuse    unlimited
vmemoryuse   unlimited
descriptors  1024
memorylocked 32 kbytes
maxproc      1024

On 02/05/2009 05:40 PM, Gary Gatten wrote:
> Just died again.  There was plenty of avail memory - real and virtual
> before it died:
> 
> Feb  5 10:47:29 wanmon1 Home.Office[557]:  [MSGID8483603] **ERROR**
> malloc(10384) @ pbuf.c:122 returned NULL [no more memory?]
> Feb  5 10:47:29 wanmon1 kernel: pid 557 (ntop), uid 1002: exited on
> signal 11
> 
> Maybe my swap file is bad?  I'll cold boot with extended memory test
and
> create a new swap file.
> 
> G
> 
> 
> -----Original Message-----
> From: Gary Gatten 
> Sent: Thursday, February 05, 2009 9:27 AM
> To: 'ntop at unipi.it'
> Subject: RE: [Ntop] I love nTop - BUT!!!!
> 
> Different messages.  Used to be sig 11 with not much else.  I attached
> debug output many times but no love.  Seems IDLE_PURGE and/or RRD was
> running before it faulted
> 
> Now:
> 
> [46274]:  [MSGID8483603] **ERROR** malloc(268
> ) @ sessions.c:1847 returned NULL [no more memory?]
> Feb  3 14:23:34 wanmon1 Home.Office[46274]:
> 
> [MSGID8442646] **ERROR** accessMute
> x() call 'handleTCPSession' failed (rc=11)
[0x28600c98 at sessions.c:1767]
> 
> [MSGID8850278] **ERROR** Bad magic
> number [expected=1968/real=0][deviceId=5] getFirstHost()[address.c/54]
> 
> [MSGID8483603] **ERROR** malloc(103
> 84) @ pbuf.c:122 returned NULL [no more memory?]
> 
> 
> I THINK my memory is OK.  I'll bounce the box and see if that helps at
> all.  And maybe try to find more RAM.
> 
> G
> 
> 
> -----Original Message-----
> From: ntop-bounces at unipi.it [mailto:ntop-bounces at unipi.it] On Behalf
Of
> Walt Henley
> Sent: Wednesday, February 04, 2009 5:25 PM
> To: ntop at unipi.it
> Subject: Re: [Ntop] I love nTop - BUT!!!!
> 
> What's the syslog say when it crashes?
> 
> On 2/4/09, Gary Gatten <Ggatten at waddell.com> wrote:
>> If it doesn't stop crashing I'm gonna go insane!!!!  (2) instances
>> running on the same box at the same time - same exact bins, perms,
> etc.
>> - different paths of course.  Once instance may run for months with
no
>> problems, but the other will crash every hour.  I think a file/db
>> somewhere is whacked  - tried the dnsCache with little impact, but
> some
>> help.  I think it's a host/interface file - but I don't want to lose
> all
>> my data by wiping the whole directory...
>>
>>
>>
>> I'm still on an older version (3.2.1) so I guess I need to upgrade,
> but
>> from what I've seen on the list similar problems exist even in the
>> latest version.  Sorry for the rant...
>>
>>
>>
>> G
>>
>>
>>
>>
>>
>>
>>
>>
>> <font size="1">
>> <div style='border:none;border-bottom:double windowtext
> 2.25pt;padding:0in
>> 0in 1.0pt 0in'>
>> </div>
>> "This email is intended to be reviewed by only the intended recipient
>>  and may contain information that is privileged and/or confidential.
>>  If you are not the intended recipient, you are hereby notified that
>>  any review, use, dissemination, disclosure or copying of this email
>>  and its attachments, if any, is strictly prohibited.  If you have
>>  received this email in error, please immediately notify the sender
by
>>  return email and delete this email from your system."
>> </font>
>>
>>
> 

-- 
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
Yuri Francalacci
E-Mail: yuri at ntop.org   Internet: http://www.ntop.org/
*** Esse Quam Videri -- To Be, Rather Than To Seem ***
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=
_______________________________________________
Ntop mailing list
Ntop at unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop

<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
 and may contain information that is privileged and/or confidential.
 If you are not the intended recipient, you are hereby notified that
 any review, use, dissemination, disclosure or copying of this email
 and its attachments, if any, is strictly prohibited.  If you have
 received this email in error, please immediately notify the sender by
 return email and delete this email from your system."
</font>