Ntop 不知什么原因进程down掉？？？、

murenfeng

我在网关了上装了Ntop3.2版本的，做流量监控，可前端用浏览器访问没有几分钟后台的NTOP服务进程就挂了。
郁闷。不知道到什么原因？？？
是不是ntop太费资源的原因？？？

knight_123

你没看看有什么日志信息吗

murenfeng

下面是我截取的日志信息

May 23 17:13:56 user ntop: INITD - *****/etc/init.d/ntop start running*****
May 23 17:13:56 user ntop: INITD -      Program is /usr/local/ntop/bin/ntop
May 23 17:13:56 user ntop: INITD -      Configuration in /etc/ntop.conf
May 23 17:13:56 user ntop: INITD - Skipping interface scan - list in parms
May 23 17:13:56 user ntop: INITD - interfaces are eth1 eth0
May 23 17:13:56 user ntop: INITD - Given parameter(s) are: ''
May 23 17:13:56 user ntop: INITD - Extra parameter(s) are: ' -d'
May 23 17:13:56 user ntop: INITD - Configuring interfaces
May 23 17:13:56 user ntop: INITD - eth1 is not ntopconfigure=yes, skipping
May 23 17:13:56 user ntop: INITD - eth0 is not ntopconfigure=yes, skipping
May 23 17:13:56 user ntop: INITD - Interfaces are configured
May 23 17:13:56 user ntop: INITD - Starting: /usr/local/ntop/bin/ntop -i eth1,eth0 @/etc/ntop.conf -d
May 23 17:13:56 user ntop[5404]:   THREADMGMT[t3085944512]: ntop RUNSTATE: PREINIT(1)
May 23 17:13:56 user ntop[5404]:   THREADMGMT[t3085944512]: ntop RUNSTATE: INIT(2)
May 23 17:13:56 user ntop:    Processing file /etc/ntop.conf for parameters...
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  NOTE: Interface merge enabled by default
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Initializing gdbm databases
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  ntop v.3.3
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Configured on May 20 2008 16:10:01, built on May 20 2008 16:10:56.
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Copyright 1998-2007 by Luca Deri <deri@ntop.org>
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Get the freshest ntop from http://www.ntop.org/
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  NOTE: ntop is running from '/usr/local/ntop/bin'
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  NOTE: (but see warning on man page for the --instance parameter)
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  NOTE: ntop libraries are in '/usr/local/ntop/lib'
May 23 17:13:56 user kernel: device eth1 entered promiscuous mode
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Initializing ntop
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Checking eth1 for additional devices
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Resetting traffic statistics for device eth1
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Initializing device eth1 (0)
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  DLT: Device 0 [eth1] is 1, mtu 1514, header 14
May 23 17:13:56 user kernel: device eth0 entered promiscuous mode
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Checking eth0 for additional devices
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Resetting traffic statistics for device eth0
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Initializing device eth0 (1)
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3085944512]: Now running as a daemon
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  DLT: Device 1 [eth0] is 1, mtu 1514, header 14
May 23 17:13:56 user ntop[5405]:   -m: Discarded unnecessary parameter 192.168.10.0/24 - this is the local network
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Initializing gdbm databases
May 23 17:13:56 user ntop[5405]:   ASN: Checking for Autonomous System Number table file
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: Loading MAC address table.
May 23 17:13:56 user ntop[5405]:   **WARNING** ASN: Unable to open file 'AS-list.txt'
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: Checking for MAC address table file
May 23 17:13:56 user ntop[5405]:   I18N: This instance of ntop does not support multiple languages
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: File '/usr/local/ntop/etc/ntop/specialMAC.txt.gz' does not need to be reloaded
May 23 17:13:56 user ntop[5405]:   IP2CC: Checking for IP address <-> Country Code mapping file
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: ntop continues ok
May 23 17:13:56 user ntop[5405]:   IP2CC: Loading file '/usr/local/ntop/etc/ntop/p2c.opt.table.gz'
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: Checking for MAC address table file
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: File '/usr/local/ntop/etc/ntop/oui.txt.gz' does not need to be reloaded
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  VENDOR: ntop continues ok
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Fingerprint: Loading signature file
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Fingerprint: Checking for Fingerprint file... file
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Fingerprint: Loading file '/usr/local/ntop/etc/ntop/etter.finger.os.gz'
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  Fingerprint: ...loaded 1765 records
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  INIT: Parent process is exiting (this is normal)
May 23 17:13:56 user ntop: Fri May 23 17:13:56 2008  INIT: Bye bye: I'm becoming a daemon...
May 23 17:13:56 user ntop: ntop startup succeeded
May 23 17:13:56 user ntop[5405]:   IP2CC: ...found 52395 lines
May 23 17:13:56 user ntop[5405]:   Database support not compiled into ntop
May 23 17:13:56 user ntop[5405]:   Initializing external applications
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3048594336]: NPA: Started thread for network packet analyzer (eth1)
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3038104480]: NPA: Started thread for network packet analyzer (eth0)
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3027614624]: SFP: Started thread for fingerprinting
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3048594336]: NPA: network packet analyzer (packet processor) thread running [p5405]
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3027614624]: SFP: Fingerprint scan thread starting [p5405]
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3017124768]: SIH: Started thread for idle hosts detection
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3038104480]: NPA: network packet analyzer (packet processor) thread running [p5405]
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3005217696]: DNSAR(1): Started thread for DNS address resolution
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2994727840]: DNSAR(2): Started thread for DNS address resolution
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3017124768]: SIH: Idle host scan thread starting [p5405]
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t3005217696]: DNSAR(1): Address resolution thread running
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2994727840]: DNSAR(2): Address resolution thread running
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2984237984]: DNSAR(3): Started thread for DNS address resolution
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2984237984]: DNSAR(3): Address resolution thread running
May 23 17:13:56 user ntop[5405]:   Calling plugin start functions (if any)
May 23 17:13:56 user ntop[5405]:   SSL is present but https is disabled: use -W <https port> for enabling it
May 23 17:13:56 user ntop[5405]:   INITWEB: Initializing web server
May 23 17:13:56 user ntop[5405]:   INITWEB: Initializing TCP/IP socket connections for web server
May 23 17:13:56 user ntop[5405]:   INITWEB: Initialized socket, port 3000, address (any)
May 23 17:13:56 user ntop[5405]:   INITWEB: Waiting for HTTP connections on port 3000
May 23 17:13:56 user ntop[5405]:   INITWEB: Starting web server
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2973748128]: INITWEB: Started thread for web server
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2973748128]: WEB: Server connection thread starting [p5405]
May 23 17:13:56 user ntop[5405]:   Listening on [eth1,eth0]
May 23 17:13:56 user ntop[5405]:   Note: SIGPIPE handler set (ignore)
May 23 17:13:56 user ntop[5405]:   Loading Plugins
May 23 17:13:56 user ntop[5405]:   THREADMGMT[t2973748128]: WEB: Server connection thread running [p5405]
May 23 17:13:56 user ntop[5405]:   Searching for plugins in /usr/local/ntop/lib/ntop/plugins
May 23 17:13:56 user ntop[5405]:   WEB: ntop's web server is now processing requests
May 23 17:13:56 user ntop[5405]:   Remote: Welcome to Remote. (C) 2006-07 by L.Deri
May 23 17:13:56 user ntop[5405]:   SFLOW: Welcome to sFlow.(C) 2002-04 by Luca Deri
May 23 17:13:56 user ntop[5405]:   RRD: Welcome to Round-Robin Databases. (C) 2002-07 by Luca Deri.
May 23 17:13:56 user ntop[5405]:   PDA: Welcome to PDA. (C) 2001-2005 by L.Deri and W.Brock
May 23 17:13:56 user ntop[5405]:   NETFLOW: Welcome to NetFlow.(C) 2002-07 by Luca Deri
May 23 17:13:56 user ntop[5405]:   LASTSEEN: Welcome to Host Last Seen. (C) 1999 by Andrea Marangoni
May 23 17:13:56 user ntop[5405]:   ICMP: Welcome to ICMP Watch. (C) 1999-2005 by Luca Deri
May 23 17:13:56 user ntop[5405]:   Calling plugin start functions (if any)
May 23 17:13:56 user ntop[5405]:   RRD: Welcome to the RRD plugin
May 23 17:13:56 user ntop[5405]:   RRD: Mask for new directories is 0700
May 23 17:13:56 user ntop[5405]:   RRD: Mask for new files is 0066
May 23 17:13:56 user ntop[5405]:   RRD_DEBUG: Parameters:
May 23 17:13:56 user ntop[5405]:   RRD_DEBUG:     dumpInterval 300 seconds
May 23 17:13:56 user ntop[5405]:   RRD_DEBUG:     dumpShortInterval 10 seconds
May 23 17:13:56 user ntop[5405]:   RRD_DEBUG:     dumpHours 72 hours by 300 seconds
May 23 17:13:56 user ntop[5405]:   RRD_DEBUG:     dumpDays 90 days by hour
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpMonths 36 months by day
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpDomains no
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpFlows no
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpHosts no
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpInterfaces yes
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpASs yes
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpMatrix no
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     dumpDetail high
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     hostsFilter
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     rrdPath /var/log/ntop/rrd
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     umask 0066
May 23 17:13:57 user ntop[5405]:   RRD_DEBUG:     DirPerms 0700
May 23 17:13:57 user ntop[5405]:   THREADMGMT: RRD: Started thread (t2963258272) for data collection
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2963258272]: RRD: Data collection thread starting [p5405]
May 23 17:13:57 user ntop[5405]:   INIT: Created pid file (/var/run/ntop.pid)
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t3085944512]: ntop RUNSTATE: INITNONROOT(3)
May 23 17:13:57 user ntop[5405]:   Now running as requested user 'ntop' (502:502)
May 23 17:13:57 user ntop[5405]:   Note: Reporting device initally set to 0 [eth1] (merged)
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t3085944512]: ntop RUNSTATE: RUN(4)
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t3027614624]: SFP: Fingerprint scan thread running [p5405]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t3017124768]: SIH: Idle host scan thread running [p5405]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2952768416]: NPS(1): Started thread for network packet sniffing [eth1]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2952768416]: NPS(eth1): pcapDispatch thread starting [p5405]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2942278560]: NPS(2): Started thread for network packet sniffing [eth0]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2942278560]: NPS(eth0): pcapDispatch thread starting [p5405]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2952768416]: NPS(eth1): pcapDispatch thread running [p5405]
May 23 17:13:57 user ntop[5405]:   THREADMGMT[t2942278560]: NPS(eth0): pcapDispatch thread running [p5405]
May 23 17:14:07 user ntop[5405]:   THREADMGMT[t2912943008]: RRD: Started thread for throughput data collection
May 23 17:14:07 user ntop[5405]:   THREADMGMT[t2963258272]: RRD: Data collection thread running [p5405]
May 23 17:14:07 user ntop[5405]:   THREADMGMT[t2912943008]: RRD: Throughput data collection: Thread starting [p5405]
May 23 17:14:07 user ntop[5405]:   THREADMGMT[t2912943008]: RRD: Throughput data collection: Thread running [p5405]
May 23 17:14:13 user kernel: device eth1 left promiscuous mode
May 23 17:14:13 user kernel: device eth0 left promiscuous mode



然后执行  ps aux|grep -v ntop|grep ntop   ntop进程又没有了
有时得service ntop start N多次才能起来，不过一会就down了？

sanyork

清空掉日志看看，我运行的ntop也不稳定，而且感觉ntop这个程序非常占资源。