segfault in libc-2.15.so

[Jim Tarvid]

I added the -M option to enable interface switching

root@helen:~# diff ntop /etc/init.d/ntop
96c96
< -d -L -u $USER -P $HOMEDIR \
---
> -d -M -L -u $USER -P $HOMEDIR \

Running on two interraces

root@helen:~# cat /var/lib/ntop/init.cfg
USER="ntop"
INTERFACES="eth0,eth1"

ProblemType: Bug
DistroRelease: Ubuntu 12.04
Package: ntop 3:4.1.0+dfsg1-1
ProcVersionSignature: Ubuntu 3.2.0-25.40-generic 3.2.18
Uname: Linux 3.2.0-25-generic x86_64
ApportVersion: 2.0.1-0ubuntu8
Architecture: amd64
Date: Wed Jun 27 09:37:42 2012
InstallationMedia: Ubuntu-Server 12.04 LTS "Precise Pangolin" - Release amd64 (20120424.1)
ProcEnviron:
 TERM=xterm
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: ntop
UpgradeStatus: No upgrade log present (probably fresh install)
mtime.conffile..etc.init.d.ntop: 2012-06-27T01:16:44.458641

[Jim Tarvid (tarvid)]

May be in the web interface. Up for several minutes now without incident.

[Jim Tarvid (tarvid)]

after a couple of hours
Jun 27 12:35:32 helen ntop[4423]: WARNING: Max num hash entries (8192) reached (see -x)
Jun 27 12:35:32 helen ntop[4423]: **ERROR** Sanity check failed (2) [Low memory?]

increased mas hash table entries

root@helen:/etc/init.d# diff /root/ntop /etc/init.d/ntop
96c96
< -d -L -u $USER -P $HOMEDIR \
---
> -d -M -L -u $USER -P $HOMEDIR -x 65536 \

[Jim Tarvid (tarvid)]

Also a place to do that in the Admin > Configure interface. Up an hour with browsing and no segfaults

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Daryl Lublink (dlublink)]

I tried "-x 32768" and ntop still failed. I think ntop lasted an extra 15 minutes this time. It might be a resource leak?

[Daryl Lublink (dlublink)]

Here is the version I am using :
Version: 3:4.1.0+dfsg1-1
Filename: pool/universe/n/ntop/ntop_4.1.0+dfsg1-1_amd64.deb

[Daryl Lublink (dlublink)]

I tested it with only one interface :

 3097 ? Ssl 0:00 /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --access-log-file /var/log/ntop/access.log -i eth0 -p /etc/ntop/protocol.list -O /var/log/ntop -n 0 -x 32768

Aug 23 10:26:26 kamailio-dev-1 ntop[3003]: CHKVER: This version of ntop is a minimally supported but OLDER version - please upgrade
Aug 23 10:26:31 kamailio-dev-1 ntop[3003]: THREADMGMT[t139863395399424]: RRD: Started thread for throughput data collection
Aug 23 10:26:31 kamailio-dev-1 ntop[3003]: THREADMGMT[t139863752234752]: RRD: Data collection thread running [p3003]
Aug 23 10:26:31 kamailio-dev-1 ntop[3003]: THREADMGMT[t139863395399424]: RRD: Throughput data collection: Thread starting [p3003]
Aug 23 10:26:31 kamailio-dev-1 ntop[3003]: THREADMGMT[t139863395399424]: RRD: Throughput data collection: Thread running [p3003]
Aug 23 10:34:23 kamailio-dev-1 kernel: [65257.913335] ntop[3006]: segfault at ffffffee ip 00007f349ac0f57c sp 00007f3492ebabe8 error 4 in libc-2.15.so[7f349ab8c000+1b5000]

[Juan Moyano (wincus)]

I'm having the same issue ( runnin on Ubuntu 12.04.3 )

ntop[22401]: segfault at fffffff7 ip 00007fec2903b57c sp 00007fec212e6be8 error 4 in libc-2.15.so[7fec28fb8000+1b5000]

This happens every couple of hours. Ntop is getting flows from remote fprobes.