[Ntop] ntop crashes (segfault error)

[Graber Stefan]

I sent two pcap files directly to Luca. 

In the meantime I compiled and installed ntop on another server to verify that there isn't a problem if the recording of the probe and the analysis of the flow takes place on the same server. Unfortunately there was the same behavior as before: After some seconds, ntop crashes...

In /var/log/messages I found to following information:

Feb  9 12:24:59 dtsmo1 kernel: [ 2858.708801] ntop[4279]: segfault at 19e ip 00007fae8933de8e sp 00007fae7ff58310 error 4 in libntopreport-4.1.2.so[7fae8930e000+7f000]
Feb  9 12:25:07 dtsmo1 kernel: [ 2866.394141] ntop[4267]: segfault at 18 ip 00007fae8893b76c sp 00007fae7ccc38b0 error 4 in libc-2.11.1.so[7fae888c4000+17a000]

nProbe was started with the following parameters on the existing server:

sudo /usr/local/bin/nprobe -V 9 -i eth0 -n 192.168.1.97:2055 -T "%IPV4_SRC_ADDR %IPV4_DST_ADDR %IPV4_NEXT_HOP %INPUT_SNMP %OUTPUT_SNMP %IN_PKTS %IN_BYTES %FIRST_SWITCHED %LAST_SWITCHED %L4_SRC_PORT %L4_DST_PORT %TCP_FLAGS %PROTOCOL %SRC_TOS %SRC_AS %DST_AS %SRC_MASK %DST_MASK %L7_PROTO %L7_PROTO_NAME" -b 1


Is there a list of all dependencies for ntop and nProbe? I just want to make sure that I don't forget anything and this is the reason for the problem.

Thanks. Stefan


-----Original Message-----
From: ntop-bounces at listgateway.unipi.it [mailto:ntop-bounces at listgateway.unipi.it] On Behalf Of Luca Deri
Sent: Mittwoch, 8. Februar 2012 21:04
To: ntop at unipi.it
Subject: Re: [Ntop] ntop crashes (segfault error)

Stefan
are you able to capture enough packets sent by nProbe to ntop (full packets please) and send them to me on a pcap file so I can reproduce the bug?

Thanks Luca


On Feb 8, 2012, at 8:34 PM, Graber Stefan wrote:

> Hi,
>  
> My employer decided to analyze the network traffic with NetFlow. But I hit on problems while using the today's SVN version of ntop in combination with nProbe Pro 6.9.1. The recording of the probe and the analysis of the flow takes place on the same server.
>  
> If I start ntop, I can use the service without any problems. But as soon as I start nProbe for generating the flow, I takes about some seconds and ntop crashes. Within the /var/log/messages I found the following information:
>  
> Feb  8 19:46:33 dtsmo2 kernel: [90342.148238] ntop[15366]: segfault at be5 ip 00007f2f2a62173a sp 00007f2f1e8a7680 error 4 in libc-2.11.1.so[7f2f2a5aa000+17a000]
>  
> Unfortunately I was not able to find out why ntop crashes. There are a lot of search results for 'segfault libc-2.11.1.so'  in Google, but no one with a solution - at least I didn't found it ;) Are there any other logs (maybe from ntop itself) which probably give me additional information? What could be the problem?
>  
> As this is my first installation of ntop / nProbe, I'll describe shortly my procedure. As a first step I installed a dedicated server with Ubuntu Linux x64 10.04.3 with the latest updates. Afterwards I compiled and installed nProbe Pro and ntopl. Attached you'll a list with each step and the corresponding commands - maybe I forgot an important one?
>  
> Additionally vou'll find my ntop configuration as a second attachment.
>  
> Thanks for your support.
>  
> Stefan