ntop / nProbe

Open source components and extensions for nProbe
http://ntop.org
GNU General Public License v2.0
1.66k stars 44 forks source link

Nprobe crashes / stops collection after exactly 10 minutes #262

Closed error420 closed 6 years ago

error420 commented 6 years ago

Why does this happen? Is it because i'm running community version on Raspberry Pi 3?

I have to sudo service nprobe stop, sudo service nprobe restart. I also tried sudo nprobe --zmq="tcp://*:5556" --collector-port=2055

No errors in cli. Only a silent crash after exactly 10 minutes....

My ntopng conf is -i="tcp://127.0.0.1:5556"

Do you know why this is happening? I am very close to a working ntopng setup via rflow on the router but now it just stops working after 10 minutes. Is the program broken on raspberry pi?

shizbauer commented 6 years ago

same problem on centos7 with a valid license

simonemainardi commented 6 years ago

please, run an update and try with the latest available version (either dev or stable)

shizbauer commented 6 years ago

problem persist

UniVerzitetNis commented 6 years ago

for me it stopped working completely. Previously i could reboot it and it would collect for ten minutes...

leikoilja commented 6 years ago

oh, shut... Have the same problem n my RPi 👎 And it also did not create an automatic /etc/init.d/nprobe script for autostart after reboot and i dont have any instance as a service. Can't even call "service nprobe start". Thought the package seems to be normally installed, i can use and call it straight from cli. Though it crashes after 10mins.... Could someone share their /etc/init.d/nprobe startup script?

janvgils commented 6 years ago

Same problem, nprobe stops after 10 minute. Did the community option change or disappear?

nprobe -v

Welcome to nProbe v.8.5.180505 (r6149) for x86_64-pc-linux-gnu with native PF_RING acceleration. Copyright 2002-18 ntop.org

Build OS: Ubuntu 16.04.4 LTS SystemID: 3BFDC60409B0B922 GIT rev: dev:380a7d1b83e333089131e454e46afcd71b77076c:20180505 License: Invalid nProbe license (/etc/nprobe.license) [Empty license file]

Last line of the debug data:

5/May/2018 14:28:35 [util.c:4634] [ZMQ] [event] { "iface": { "name": "none", "speed": 1000, "ip": "" }, "probe": { "ip": "x.x.x.x", "public_ip": "" }, "time" : 1525523315.892, "bytes": 0, "packets": 0, "avg": { "bps": 0, "pps": 0 }, "drops" : { "export_queue_too_long": 0, "too_many_flows": 0, "elk_flow_drops": 0, "sflow_pkt_sample_drops": 0 }, "timeout": { "lifetime": 120, "idle": 30 }, "zmq": { "num_flow_exports": 279, "num_exporters": 1 }, }

leikoilja commented 6 years ago

So we have no one to help us? :(

UniVerzitetNis commented 6 years ago

Since the update from this morning - for me - everything works again.

leikoilja commented 6 years ago

@UniVerzitetNis, thanks for saying that there is an update. I'm installing and trying it now. Have you got nprobe 8.4.180506-6116 version now?

UniVerzitetNis commented 6 years ago

nprobe -v

Welcome to nProbe v.8.4.180506 (r6116) for x86_64-unknown-linux-gnu with native PF_RING acceleration. Copyright 2002-18 ntop.org

Build OS: CentOS Linux release 7.4.1708 (Core) SystemID: 68A739177605617E GIT rev: 8.4-stable:00a34831737ee1576152965d9b365ae15088bce2:20180506 License: Invalid nProbe license (/etc/nprobe.license) [License mismatch error]

nProbe is subject to the terms and conditions defined in the LICENSE and EULA files that are part of this package.

nProbe also contains third party code: Radix tree code - (C) The Regents of the University of Michigan ("The Regents") and Merit Network, Inc. sFlow collector - (C) InMon Inc.

leikoilja commented 6 years ago

@UniVerzitetNis, awesome thanks. That's the one i've just updated and am trying now. (fingers crossed) Since you are the only person who is active here, can i ask you the question if you have succeed to make nprove run after start up? If so, what did u do? Cause i have seen in docs that u need to create .start file near your configuration file under /etc/nprobe, but that doesn't seem to help :/

UniVerzitetNis commented 6 years ago

On Centos 7 systemctl enable ntopng systemctl enable nprobe

was enough for me.

leikoilja commented 6 years ago

@UniVerzitetNis , thanks man! You have made my day. Helped me to deal with two of my problems. same approach helped me(under Raspberian Stretch). Have you tried adding hosts to black list? So nprobe or ntopng would ignore some of the hosts? Cause i want to ignore traffic from my gateway.

janvgils commented 6 years ago

Installed the last update and everything seems to be fine again.

● nprobe.service - nprobe extensible NetFlow v5/v9/IPFIX probe/collector for IPv Loaded: loaded (/etc/systemd/system/nprobe.service; enabled; vendor preset: e Active: active (running) since Mon 2018-05-07 18:20:01 CEST; 38min ago

nprobe -v

Welcome to nProbe v.8.5.180507 (r6151) for x86_64-pc-linux-gnu with native PF_RING acceleration. Copyright 2002-18 ntop.org

Thanks for the support.

error420 commented 6 years ago

Confirmed. The latest and greatest update seems to have fixed it. Running ntopng Community/Embedded Edition v.3.5.180506 - Uptime: 14 min, 16 sec

simonemainardi commented 6 years ago

Thanks for reporting. I can confirm the issue is fixed.