Closed beveradb closed 4 years ago
As you have not specified an interface with -i, noting listens to all interfaces including loopback. Please add with -i an interface to listen to, and report what happens.
Hi, lucaderi! I'm having the same issue (xenserver virtual machine with very high load average when using ntopng during some hours). After reading your comment, I tried to start capturing only from eth0. Unfortunately, the result was the same: high load. What could I try? By now I'm using the old version (ntop) and it works fine without the high load, but the new version features and interface are much better. Thank you!
@ftoniolo make sure to upgrade and use the latest dev build as we have made some fixes recently.
Hi!
I updated the ntop package just now (there was a new version available). After few minutes running the updated version, ntopng increased the load average again to more than 6 :( There is another thing that could I do?
Thanks!
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sexta-feira, 14 de Outubro de 2016 9:54:36 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
@ftoniolo make sure to upgrade and use the latest dev build as we have made some fixes recently. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
@andrewthecoder
show the output of ntopng --version
also you should add a -i
to your config to specify the monitored interfaces of interest
[root@firewall ~]# ntopng --version v.2.4.161004 [Professional Edition] GIT rev: 2.4-stable:98ee891ed1bff3c11be3922a93c03f62619b8d6a:20161004 Pro rev: r641 System Id: D8EC8AC99206A1D8 Built on: CentOS release 6.8 (Final)
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sexta-feira, 14 de Outubro de 2016 13:46:16 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
@andrewthecoder show the output of ntopng --version also you should add a -i to your config to specify the monitored interfaces of interest — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
try with version dev 2.5.x
how many interfaces are you monitoring? what's their speed and load? How many active hosts/flows you have on average?
Ok, I'll try the recommended version. I'm starting it with the -i eth0 option.
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sexta-feira, 14 de Outubro de 2016 13:55:28 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
try with version dev 2.5.x how many interfaces are you monitoring? what's their speed and load? How many active hosts/flows you have on average? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
I don't know how to obtain the '2.5 dev' version, because I'm using the centos' yum package manager.
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sexta-feira, 14 de Outubro de 2016 13:55:28 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
try with version dev 2.5.x how many interfaces are you monitoring? what's their speed and load? How many active hosts/flows you have on average? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
you should add the repos at http://packages.ntop.org/centos/
Hi!
OK, I updated to recommended version as below:
[root@firewall ~]# ntopng --version v.2.5.161014 [Enterprise/Professional Edition] GIT rev: dev:4c14311a1d90d9807190a3b8d09ed29dc6a46711:20161014 Pro rev: r698 System Id: D8EC8AC99206A1D8 Built on: CentOS release 6.8 (Final)
During the weekend, load average remained low and stable. Today morning, it jumped to about 6 again.
I have 5 network interfaces in this vm: eth0 (lan) eth1 (dedicated link 2Mbps full duplex) eth2 (dedicated link 1Mbps full duplex) eth3 (adsl link for navigation, 15Mbps down, 768Kbps up) eth4 (dedicated link 10Mbps full duplex) - this is a new link, configured last week - the problem of high load average was already accurring before installing it
I'm capturing eth0 only in an attempt to reduce the load.
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sábado, 15 de Outubro de 2016 14:46:51 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
you should add the repos at http://packages.ntop.org/centos/ — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
uhm, ntopng supports speeds much greater than those you have described.
Can you please comment on the VM hardware resources allocated (CPU and RAM?). Note that each monitored interface translates into an independent thread so you should make sure your multi-core/multi-CPU system is able to properly handle that.
Sure! Please, see the attached screenshots describing the basic vm and xenserver host configuration.
Thanks ----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Quinta-feira, 20 de Outubro de 2016 10:02:01 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
uhm, ntopng supports speeds much greater than those you have described. Can you please comment on the VM hardware resources allocated (CPU and RAM?). Note that each monitored interface translates into an independent thread so you should make sure your multi-core/multi-CPU system is able to properly handle that. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
@ftoniolo screenshots have not been attached
Ok, trying again.
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Sexta-feira, 21 de Outubro de 2016 6:15:23 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
@ftoniolo screenshots have not been attached — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
no screenshots also this time. try to post them from the github issue page rather that directly as attachments via email
Ok, now posting via github.
so the load looks ok its 0.03.
Report the statistics when you experience an high load as reported. By the way I would increase the RAM allocated for the vm.
Yes, the load avg is low because I'm using the old version (ntop). I made that htop's screenshot just for showing you an overview of my hardware like cpu, memory and i/o usage (not for show the load avg).
If you think that it is important, I could change to the new version (ntopng). After some time, probably my load would be increased. So I could capture a screenshot for the purpose of showing you the high load avg.
Thanks
----- Mensagem original -----
De: "simonemainardi" notifications@github.com Para: "ntop/ntopng" ntopng@noreply.github.com Cc: "ftoniolo" ftoniolo@gmail.com, "Mention" mention@noreply.github.com Enviadas: Quarta-feira, 26 de Outubro de 2016 11:39:20 Assunto: Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
so the load looks ok its 0.03. Report the statistics when you experience an high load as reported. By the way I would increase the RAM allocated for the vm. — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub , or mute the thread .
Hello,
I've got the same issue on my platform : ntopng --version v.3.9.190221 [Enterprise/Professional build] GIT rev: dev:a486d2c19fc7226f9b247f3051b1d6b55268beb7:20190221 Pro rev: r2259 Built on: Ubuntu 16.04.5 LTS Platform: x86_64 Edition: Enterprise License Type: Permanent Maintenance: Until Tue Nov 12 14:42:47 2019 [264 days left]
Here is my configuration file :
-n=3 -w=8000 -W=0 -g=31 -m="50.176.0.0/16,50.177.0.0/16,50.178.0.0/16" -X=800000 -x=80000 -d=/storage/ntopng -G=/var/run/ntopng.pid -i=eno50
My ntopng's core 31 (i'm using affinity) is very high
Can you help me ?
Best Regards,
Does the high usage occurs during normal operation or when a browser window on the ntopng gui is opened? Please also post the output of top -H -p $(pgrep ntopng)
Hello, Load is very high at anytime.
top -H -p $(pgrep ntopng) top - 11:07:40 up 2:22, 1 user, load average: 9,99, 9,58, 8,38 Threads: 22 total, 5 en cours, 17 en veille, 0 arrêté, 0 zombie %Cpu(s): 10,9 ut, 6,1 sy, 0,0 ni, 79,0 id, 0,0 wa, 0,0 hi, 4,0 si, 0,0 st KiB Mem : 26401424+total, 23666635+libr, 7534968 util, 19812920 tamp/cache KiB Éch: 26829414+total, 26829414+libr, 0 util. 25502966+dispo Mem
PID UTIL. PR NI VIRT RES SHR S %CPU %MEM TEMPS+ COM.
4067 ntopng 20 0 3943136 2,524g 62908 R 88,3 1,0 11:56.32 ntopng
4093 ntopng 20 0 3943136 2,524g 62908 R 86,3 1,0 6:57.21 ntopng
4100 ntopng 20 0 3943136 2,524g 62908 R 84,3 1,0 28:32.22 ntopng
4066 ntopng 20 0 3943136 2,524g 62908 S 9,0 1,0 14:19.91 ntopng
4063 ntopng 20 0 3943136 2,524g 62908 S 5,0 1,0 6:15.35 ntopng
4064 ntopng 20 0 3943136 2,524g 62908 S 4,0 1,0 2:52.41 ntopng
4065 ntopng 20 0 3943136 2,524g 62908 S 4,0 1,0 6:13.28 ntopng
4098 ntopng 20 0 3943136 2,524g 62908 R 2,3 1,0 0:48.25 ntopng
4086 ntopng 20 0 3943136 2,524g 62908 S 1,0 1,0 0:21.24 ntopng
4099 ntopng 20 0 3943136 2,524g 62908 R 0,7 1,0 0:20.62 ntopng
4051 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 7:39.93 ntopng
4062 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:02.05 ntopng
4087 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 7:16.16 ntopng
4088 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 6:52.18 ntopng
4089 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.22 ntopng
4090 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:57.98 ntopng
4091 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 2:59.30 ntopng
4092 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.23 ntopng
4094 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.06 ntopng
4095 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.21 ntopng
4096 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.00 ntopng
4097 ntopng 20 0 3943136 2,524g 62908 S 0,0 1,0 0:00.21 ntopng
Please update to the new package version and post the new top -H -p $(pgrep ntopng)
command output
Here is the output after an apt-get update && apt-get dist-upgrade
ntopng --version v.3.9.190221 [Enterprise/Professional build] GIT rev: dev:6f94f7b1329335bc1bb997d83e37e408aed457a9:20190221 Pro rev: r2259 Built on: Ubuntu 16.04.5 LTS System Id: 9475F97E9206AB23 Platform: x86_64 Edition: Enterprise License Type: Permanent Maintenance: Until Tue Nov 12 14:42:47 2019 [263 days left] License: BC593FE2DCFC9EE7889180C2F8BE6C331573566167D21669BB
top - 16:04:25 up 7:19, 1 user, load average: 9,34, 8,30, 7,14 Threads: 22 total, 6 en cours, 16 en veille, 0 arrêté, 0 zombie %Cpu(s): 19,0 ut, 4,4 sy, 0,0 ni, 73,4 id, 0,0 wa, 0,0 hi, 3,1 si, 0,0 st KiB Mem : 26401424+total, 21930238+libr, 10696400 util, 34015456 tamp/cache KiB Éch: 26829414+total, 26829414+libr, 0 util. 25167660+dispo Mem
PID UTIL. PR NI VIRT RES SHR S %CPU %MEM TEMPS+ COM.
1953 ntopng 20 0 4422508 2,903g 62028 R 96,7 1,2 17:42.75 ntopng
1954 ntopng 20 0 4422508 2,903g 62028 R 96,7 1,2 13:17.55 ntopng
1986 ntopng 20 0 4422508 2,903g 62028 R 96,0 1,2 4:18.20 TrPoolWorker
1992 ntopng 20 0 4422508 2,903g 62028 R 94,4 1,2 18:30.97 eno50
1979 ntopng 20 0 4422508 2,903g 62028 R 94,0 1,2 3:23.58 TrPoolWorker
1886 ntopng 20 0 4422508 2,903g 62028 R 19,9 1,2 3:34.51 ntopng
1955 ntopng 20 0 4422508 2,903g 62028 S 5,0 1,2 0:18.85 ntopng
1990 ntopng 20 0 4422508 2,903g 62028 S 3,0 1,2 0:28.14 housekeeping.lu
1991 ntopng 20 0 4422508 2,903g 62028 S 1,7 1,2 0:11.23 discover.lua
1978 ntopng 20 0 4422508 2,903g 62028 S 1,0 1,2 0:11.47 second.lua
1952 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.99 ntopng
1956 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:22.84 ntopng
1957 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:19.03 ntopng
1980 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 3:37.12 TrPoolWorker
1981 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.12 minute.lua
1982 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:12.24 TrPoolWorker
1983 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:26.59 TrPoolWorker
1984 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.12 5min.lua
1985 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.04 TrPoolWorker
1987 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.11 hourly.lua
1988 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.00 TrPoolWorker
1989 ntopng 20 0 4422508 2,903g 62028 S 0,0 1,2 0:00.12 daily.lua
Can you attach gdb to the top threads, one at a time, and post here the results? For example, in order to attach to the first top thread (pid 1953):
sudo gdb `which ntopng`
attach 1953
bt
exit
post the output of the "bt" command above per each top thread
top - 16:23:25 up 7:38, 1 user, load average: 8,78, 8,51, 8,42 Threads: 22 total, 7 en cours, 15 en veille, 0 arrêté, 0 zombie %Cpu(s): 25,0 ut, 2,7 sy, 0,0 ni, 69,2 id, 0,0 wa, 0,0 hi, 3,1 si, 0,0 st KiB Mem : 26401424+total, 21998377+libr, 9917528 util, 34112932 tamp/cache KiB Éch: 26829414+total, 26829414+libr, 0 util. 25242987+dispo Mem
PID UTIL. PR NI VIRT RES SHR S %CPU %MEM TEMPS+ COM. 1956 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 2:53.63 ntopng 1957 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 3:46.31 ntopng 1986 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 21:38.09 TrPoolWorker 1953 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 34:29.84 ntopng 1954 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 30:39.84 ntopng 1955 ntopng 20 0 4815724 3,325g 64096 R 99,9 1,3 4:42.42 ntopng 1992 ntopng 20 0 4815724 3,325g 64096 R 99,0 1,3 35:25.60 eno50 1990 ntopng 20 0 4815724 3,325g 64096 S 2,0 1,3 0:54.99 housekeeping.lu 1978 ntopng 20 0 4815724 3,325g 64096 S 0,7 1,3 0:22.55 second.lua 1886 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 6:32.24 ntopng 1952 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:01.97 ntopng 1979 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 7:33.17 TrPoolWorker 1980 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 6:21.90 TrPoolWorker 1981 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.25 minute.lua 1982 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:12.82 TrPoolWorker 1983 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 1:15.97 TrPoolWorker 1984 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.26 5min.lua 1985 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.04 TrPoolWorker 1987 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.26 hourly.lua 1988 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.00 TrPoolWorker 1989 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:00.25 daily.lua 1991 ntopng 20 0 4815724 3,325g 64096 S 0,0 1,3 0:21.73 discover.lua
sudo gdb which ntopng
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.5) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/.
Find the GDB manual and other documentation resources online at:
http://www.gnu.org/software/gdb/documentation/.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/bin/ntopng...done.
(gdb)
(gdb) attach 1956
Attaching to program: /usr/local/bin/ntopng, process 1956
Reading symbols from /usr/lib/x86_64-linux-gnu/libpcap.so.0.8...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librrd.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzmq.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmaxminddb.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhiredis.so.0.13...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsqlite3.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmysqlclient.so.20...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...Reading symbols from /usr/lib/debug/.build-id/b1/7c21299099640a6d863e423d99265824e7bb16.debug...done.
done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Reading symbols from /lib/x86_64-linux-gnu/libz.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libdl.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libdl-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libradcli.so.4...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libssl.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/librt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/librt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libcap.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcurl.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzstd.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libm.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libm-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libstdc++.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libgcc_s.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libc-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libpng12.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdbi.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangocairo-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpango-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libglib-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcairo.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxml2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsodium.so.18...(no debugging symbols found)...done.
Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/ld-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libresolv-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsasl2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgnutls.so.30...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libidn.so.11...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librtmp.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfontconfig.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangoft2-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfreetype.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libthai.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libffi.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpcre.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-render.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXrender.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libX11.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXext.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicuuc.so.55...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/liblzma.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimntlm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.26...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libasn1.so.8...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcom_err.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhcrypto.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libroken.so.18...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libp11-kit.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libtasn1.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libnettle.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhogweed.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgmp.so.10...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libk5crypto.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5support.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libexpat.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libharfbuzz.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdatrie.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXau.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXdmcp.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicudata.so.55...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libwind.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimbase.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhx509.so.5...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libcrypt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libkeyutils.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgraphite2.so.3...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libnss_files-2.23.so...done.
done.
0x0000000000549580 in lua_settop ()
(gdb)
(gdb)
(gdb)
(gdb)
(gdb)
(gdb)
(gdb) attach 1957
A program is being debugged already. Kill it? (y or n) n
Not killed.
(gdb) bt
script_path=0x7f2a26e8a300 "/usr/share/ntopng/scripts/lua/pro/get_ts_table.lua", attack_attempt=0x7f2a26e8a1c0, user=0x7f2a26e8a2a0 "admin", group=0x7f2a26e8a2d0 "administrator", localuser=true)
at src/LuaEngine.cpp:9054
(gdb) exit Undefined command: "exit". Try "help". (gdb) quit A debugging session is active.
Inferior 1 [process 1956] will be detached.
Quit anyway? (y or n) y Detaching from program: /usr/local/bin/ntopng, process 1956
sudo gdb which ntopng
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.5) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/.
Find the GDB manual and other documentation resources online at:
http://www.gnu.org/software/gdb/documentation/.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/bin/ntopng...done.
(gdb) attach 1957
Attaching to program: /usr/local/bin/ntopng, process 1957
Reading symbols from /usr/lib/x86_64-linux-gnu/libpcap.so.0.8...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librrd.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzmq.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmaxminddb.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhiredis.so.0.13...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsqlite3.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmysqlclient.so.20...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...Reading symbols from /usr/lib/debug/.build-id/b1/7c21299099640a6d863e423d99265824e7bb16.debug...done.
done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Reading symbols from /lib/x86_64-linux-gnu/libz.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libdl.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libdl-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libradcli.so.4...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libssl.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/librt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/librt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libcap.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcurl.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzstd.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libm.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libm-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libstdc++.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libgcc_s.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libc-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libpng12.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdbi.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangocairo-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpango-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libglib-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcairo.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxml2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsodium.so.18...(no debugging symbols found)...done.
Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/ld-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libresolv-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsasl2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgnutls.so.30...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libidn.so.11...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librtmp.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfontconfig.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangoft2-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfreetype.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libthai.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libffi.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpcre.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-render.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXrender.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libX11.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXext.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicuuc.so.55...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/liblzma.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimntlm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.26...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libasn1.so.8...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcom_err.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhcrypto.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libroken.so.18...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libp11-kit.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libtasn1.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libnettle.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhogweed.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgmp.so.10...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libk5crypto.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5support.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libexpat.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libharfbuzz.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdatrie.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXau.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXdmcp.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicudata.so.55...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libwind.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimbase.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhx509.so.5...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libcrypt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libkeyutils.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgraphite2.so.3...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libnss_files-2.23.so...done.
done.
0x000000000054cf01 in luaD_precall ()
(gdb) bt
script_path=0x7f2a2ee8a300 "/usr/share/ntopng/scripts/lua/pro/get_ts_table.lua", attack_attempt=0x7f2a2ee8a1c0, user=0x7f2a2ee8a2a0 "admin", group=0x7f2a2ee8a2d0 "administrator", localuser=true)
at src/LuaEngine.cpp:9054
(gdb) exit Undefined command: "exit". Try "help". (gdb) quit A debugging session is active.
Inferior 1 [process 1957] will be detached.
Quit anyway? (y or n) y Detaching from program: /usr/local/bin/ntopng, process 1957
root@QYSTL1023106:~# sudo gdb which ntopng
GNU gdb (Ubuntu 7.11.1-0ubuntu1~16.5) 7.11.1
Copyright (C) 2016 Free Software Foundation, Inc.
License GPLv3+: GNU GPL version 3 or later http://gnu.org/licenses/gpl.html
This is free software: you are free to change and redistribute it.
There is NO WARRANTY, to the extent permitted by law. Type "show copying"
and "show warranty" for details.
This GDB was configured as "x86_64-linux-gnu".
Type "show configuration" for configuration details.
For bug reporting instructions, please see:
http://www.gnu.org/software/gdb/bugs/.
Find the GDB manual and other documentation resources online at:
http://www.gnu.org/software/gdb/documentation/.
For help, type "help".
Type "apropos word" to search for commands related to "word"...
Reading symbols from /usr/local/bin/ntopng...done.
(gdb)
(gdb) attach 1986
Attaching to program: /usr/local/bin/ntopng, process 1986
Reading symbols from /usr/lib/x86_64-linux-gnu/libpcap.so.0.8...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librrd.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzmq.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmaxminddb.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhiredis.so.0.13...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsqlite3.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libmysqlclient.so.20...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpthread.so.0...Reading symbols from /usr/lib/debug/.build-id/b1/7c21299099640a6d863e423d99265824e7bb16.debug...done.
done.
[Thread debugging using libthread_db enabled]
Using host libthread_db library "/lib/x86_64-linux-gnu/libthread_db.so.1".
Reading symbols from /lib/x86_64-linux-gnu/libz.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libdl.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libdl-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libradcli.so.4...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libssl.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypto.so.1.0.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/librt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/librt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libcap.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libldap_r-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/liblber-2.4.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcurl.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libzstd.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libm.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libm-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libstdc++.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libgcc_s.so.1...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libc.so.6...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libc-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libpng12.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdbi.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangocairo-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpango-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgobject-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libglib-2.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libcairo.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxml2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsodium.so.18...(no debugging symbols found)...done.
Reading symbols from /lib64/ld-linux-x86-64.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/ld-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libresolv.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libresolv-2.23.so...done.
done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libsasl2.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgnutls.so.30...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libidn.so.11...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/librtmp.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgssapi_krb5.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfontconfig.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpangoft2-1.0.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libfreetype.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libthai.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libffi.so.6...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libpcre.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libpixman-1.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-shm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb-render.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libxcb.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXrender.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libX11.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXext.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicuuc.so.55...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/liblzma.so.5...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimntlm.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.26...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libasn1.so.8...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcom_err.so.2...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhcrypto.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libroken.so.18...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libp11-kit.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libtasn1.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libnettle.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhogweed.so.4...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgmp.so.10...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libk5crypto.so.3...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libkrb5support.so.0...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libexpat.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libharfbuzz.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libdatrie.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXau.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libXdmcp.so.6...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libicudata.so.55...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libwind.so.0...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libheimbase.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libhx509.so.5...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libcrypt.so.1...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libcrypt-2.23.so...done.
done.
Reading symbols from /lib/x86_64-linux-gnu/libkeyutils.so.1...(no debugging symbols found)...done.
Reading symbols from /usr/lib/x86_64-linux-gnu/libgraphite2.so.3...(no debugging symbols found)...done.
Reading symbols from /lib/x86_64-linux-gnu/libnss_files.so.2...Reading symbols from /usr/lib/debug//lib/x86_64-linux-gnu/libnss_files-2.23.so...done.
done.
0x00000000005583b7 in luaV_execute ()
(gdb)
(gdb)
(gdb)
(gdb)
(gdb) bt
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb)
at src/ThreadedActivity.cpp:176
(gdb) exit Undefined command: "exit". Try "help". (gdb) quit A debugging session is active.
Inferior 1 [process 1986] will be detached.
Quit anyway? (y or n) y Detaching from program: /usr/local/bin/ntopng, process 1986
Cordialement, [cid:image001.jpg@01D3A017.2CD5FDF0]
Jean-Baptiste Vedel Resp. projet supervision orientée services Administrateur réseaux LAN & SAN CARSAT Rhône Alpes - Service Réseau & Téléphonie Tel/Fax - 04 27 82 73 69 / 04 72 91 95 46 Service Réseau : Tel/Mail - 04 72 91 99 98 / dsi_infra_reseau@carsat-ra.frmailto:dsi_infra_reseau@carsat-ra.fr
[cid:image003.jpg@01D3A017.2CD5FDF0]
[cid:image004.jpg@01D3A017.2CD5FDF0]
[cid:image005.gif@01D3A017.2CD5FDF0]Retrouvez-nous sur www.carsat-ra.frhttp://www.carsat-ra.fr/
De : Emanuele Faranda [mailto:notifications@github.com] Envoyé : jeudi 21 février 2019 16:17 À : ntop/ntopng Cc : LyonDsiInfraRessourcesReseau; Comment Objet : Re: [ntop/ntopng] ntopng pro: constant, high CPU usage (#640)
Can you attach gdb to the top threads, one at a time, and post here the results? For example, in order to attach to the first top thread (pid 1953):
sudo gdb which ntopng
attach 1953
bt
exit
post the output of the "bt" command above per each top thread
— You are receiving this because you commented. Reply to this email directly, view it on GitHubhttps://github.com/ntop/ntopng/issues/640#issuecomment-466037709, or mute the threadhttps://github.com/notifications/unsubscribe-auth/Atoc1hQNwXWMpJZsvEcetdcdhprEDJTYks5vPrhVgaJpZM4JD-p0.
Ce message électronique, les éventuels fichiers joints et les informations qu'il contient, peuvent être couverts par le secret professionnel et sont exclusivement adressés à son destinataire. Si vous le recevez par erreur, merci d'en informer l'expéditeur et de le détruire. A ce titre, toute diffusion non autorisée de ce message, même partielle, sous quelque forme que ce soit, est interdite et punie par la loi.
En aucun cas, le contenu de ce message ne peut valoir offre ou acceptation ou engagement de la part de la CARSAT RHONE-ALPES.
Les opinions contenues dans ce message sont personnelles à l'émetteur.
Il est de la responsabilité du destinataire de s'assurer que le message et ses éventuelles pièces jointes ne contiennent pas de virus informatique.
so you've dumped the stack of the following threads:
1953 ntopng 20 0 4422508 2,903g 62028 R 96,7 1,2 17:42.75 ntopng
1954 ntopng 20 0 4422508 2,903g 62028 R 96,7 1,2 13:17.55 ntopng
1986 ntopng 20 0 4422508 2,903g 62028 R 96,0 1,2 4:18.20 TrPoolWorker
everything seems normal (the first two processes are the one serving the gui timeseries charts requests). What is the stack trace of 1992
?
I just installed the latest version of ntopng on a small HP server: RAM 2GB CPU 2 core AMD Turion II Neo N40L 64 bit Windows 7 Pro 64 bit
I monitor a 30Mbps link, so I do not expect a lot of traffic. Despite that, ntopng is always at 80/90% of CPU.
I restricted the service to a single interface and I added those parameters in the service following your tuning guide: -n 1 -m 192.168.1.0/24 -x 8000 -X 8000 --capture-direction 1 --community --ignore-vlans
Nothing changed. Could you suggest if I can change some parameter in order to reduce the CPU utilization?
Thanks.
-x/-X 8000 is a small number. Increase it significantly as it must be much greater than the actual number of hosts.
Then please report new behavior and ntopng version.
Increased to 20000. The CPU it is still between 40-90% all the time.
Now I have around 3 to 7 Mbps of traffic. 476 flows. 96 hosts (inside + outside of my network).
ntopng version?
ntopng Community Edition v.4.1.200428
Please, update as you need a more recent version which contains https://github.com/ntop/ntopng/commit/607ba52263830c577e7b37c8c25320e60466a5f6
The version I have is the most recent available on your website: http://packages.ntop.org/ http://packages.ntop.org/Windows/ntopng-4.1.200428-x64.zip
@lucaderi can you please refresh the Windows build to make sure it contains the high-cpu fix?
Thanks Simone and Luca, so I should see the new version with the fix on this link? http://packages.ntop.org/
correct
I tried to download the new version that should include the fix, but the version available is still the same: v.4.1.200428
@lucaderi will notify you once the new windows build is ready
Package released with fixes. ntopng 4.1.200609
Thanks Luca. I think you have to fix the download link on http://packages.ntop.org/.
Download links are OK: http://packages.ntop.org/Windows/
I just go to http://packages.ntop.org/, then clicked on "Windows", then clicked on ntopng. It show me a "Not Found" page. I am sure the direct link will work.. It is the "ntopng" link that have to be fix.
By the way. The fix didn't fix the problem. See the attached processor graph.
here's the direct link: make sure you are running this version: http://packages.ntop.org/Windows/ntopng-4.1.200609-x64.zip
Yes, I already installed that version on top of the old one: ntopng Community Edition v.4.1.200609
The image you attached is not reporting any issue. I don't understand whereas the problem here. Can you please elaborate? The previous version was constantly over 100% that is not the cat here. Not to say that is hard to comment without knowing anything about your traffic. I will close this issue unless you have good arguments against this
Closing this ticket. Will reopen is necessary. We believe the behaviour reported is correct
Hi,
I just upgraded to v.5.1.210907 (Windows). The ntopng.exe process is consuming around 80-95% of CPU constantly even if there is no traffic. Only broadcast.
ntopng --dns-mode "1" --interface "2" --local-networks "192.168.1.0/24" --max-num-hosts "10000" --max-num-flows "10000" --capture-direction "1" --ignore-vlans --community
Regards Rob
I'm using the latest nightly build of ntopng pro and finding it's using a large amount of CPU time constantly, even when the user interface isn't open in a web browser, and even when there's barely any traffic passing through the server.
My configuration file contains:
-G=/var/run/ntopng.pid --disable-login=1 -F "mysql;localhost;ntopng;flows;username;password" -w=3050
However the same still occurs even if I remove the mysql line (I suspected it was file IO of writing flows, but apparently now).
Any suggestions to track down what ntopng is doing would be greatly appreciated - the load average on the server I'm running it on is through the roof!