ntop illegal filter error.

linuxlover.chaitanya · 08-20-2010, 03:56 AM

Hello all,
ntop installed on CentOS5 system running as squid using yum. Starting ntop on command line and not as daemon and gives error for illegal filter.

Code:

Fri Aug 20 14:10:12 2010  NOTE: Interface merge enabled by default
Fri Aug 20 14:10:12 2010  Initializing gdbm databases
Fri Aug 20 14:10:12 2010  ntop will be started as user nobody
Fri Aug 20 14:10:12 2010  ntop v.3.3.8 (Dag Apt RPM Repository)
Fri Aug 20 14:10:12 2010  Configured on Jul 12 2009  3:32:30, built on Jul 12 2009 03:32:53.
Fri Aug 20 14:10:12 2010  Copyright 1998-2007 by Luca Deri <deri@ntop.org>
Fri Aug 20 14:10:12 2010  Get the freshest ntop from http://www.ntop.org/
Fri Aug 20 14:10:12 2010  NOTE: ntop is running from 'ntop'
Fri Aug 20 14:10:12 2010  NOTE: (but see warning on man page for the --instance parameter)
Fri Aug 20 14:10:12 2010  NOTE: ntop libraries are in '/usr/lib'
Fri Aug 20 14:10:12 2010  Initializing ntop
Fri Aug 20 14:10:12 2010  No patterns to load: protocol guessing disabled.
Fri Aug 20 14:10:12 2010  Checking eth1 for additional devices
Fri Aug 20 14:10:12 2010  Resetting traffic statistics for device eth1
Fri Aug 20 14:10:12 2010  Initializing device eth1 (0)
Fri Aug 20 14:10:12 2010  DLT: Device 0 [eth1] is 1, mtu 1514, header 14
Fri Aug 20 14:10:12 2010  Initializing gdbm databases
Fri Aug 20 14:10:12 2010  VENDOR: Loading MAC address table.
Fri Aug 20 14:10:12 2010  VENDOR: Checking for MAC address table file
Fri Aug 20 14:10:12 2010  VENDOR: Loading newer file './specialMAC.txt.gz'
Fri Aug 20 14:10:12 2010  VENDOR: ...found 61 lines
Fri Aug 20 14:10:12 2010  VENDOR: ...loaded 59 records
Fri Aug 20 14:10:12 2010  VENDOR: Checking for MAC address table file
Fri Aug 20 14:10:12 2010  VENDOR: Loading newer file './oui.txt.gz'
Fri Aug 20 14:10:12 2010  VENDOR: ...found 48541 lines
Fri Aug 20 14:10:12 2010  VENDOR: ...loaded 7853 records
Fri Aug 20 14:10:12 2010  Fingerprint: Loading signature file
Fri Aug 20 14:10:12 2010  Fingerprint: Checking for Fingerprint file... file
Fri Aug 20 14:10:12 2010  Fingerprint: Loading file './etter.finger.os.gz'
Fri Aug 20 14:10:12 2010  Fingerprint: ...loaded 0 records
Fri Aug 20 14:10:12 2010  **WARNING** Bad format '��' - ignoring entry
Fri Aug 20 14:10:12 2010  **FATAL_ERROR** Wrong filter '""' (illegal token: "") on interface eth1
Fri Aug 20 14:10:12 2010  CLEANUP[t3086341840]: ntop caught signal 2 [state=2]
Fri Aug 20 14:10:12 2010  ntop is now quitting...

Tried reinstalling couple of times but still do not understand where this ends up with.

linuxlover.chaitanya · 08-20-2010, 04:47 AM

Well ntop stated working after deleting the db files. But there are still errors in ntop. I can not see the Network load statistics though rrd plugin is enabled. And I am not able to configure configuration file /etc/ntop.conf file to write and access log file at /var/log/ntop/. Also if ntop is run for multiple interfaces it crashes.
If anyone can help me out with the above issues?