ntop service on opensuse 12.3 not working

Ok, first off, what I wanted to achieve is monitor my home network to see bootlenecks (existing or coming) and suspicious traffic.

After installation, ntop did not work.
Both, a hint in the service output and in the README.Suse file were wrong.
I found out after fruitless searching and many, many iterations that you need to do this to make it work:

root@job1 ~
# ntop -P /var/lib/ntop -A

Opened bugzilla https://bugzilla.novell.com/show_bug.cgi?id=848276 for this

Question remaining: Is ntop the best tool for this?

I think so, but I wonder why it does not work ootb. Could be an indication for an exotic approach.

On 2013-10-30 14:06, joba1 wrote:

> I think so, but I wonder why it does not work ootb. Could be an
> indication for an exotic approach.

Bugs happen.


> Telcontar:~ # ntop -A
> Wed Oct 30 14:21:32 2013  NOTE: Interface merge enabled by default
> Wed Oct 30 14:21:32 2013  Initializing gdbm databases
> Wed Oct 30 14:21:32 2013  **ERROR** ....open of /var/ntop/prefsCache.db failed: File open error
> Wed Oct 30 14:21:32 2013  Possible solution: please use '-P <directory>'
> Wed Oct 30 14:21:32 2013  **FATAL_ERROR** GDBM open failed, ntop shutting down...
> Wed Oct 30 14:21:32 2013  CLEANUP[t140123480365248]: ntop caught signal 2 [state=2]
> Wed Oct 30 14:21:32 2013  ntop is now quitting...
> Telcontar:~ # l /var/ntop/prefsCache.db
> ls: cannot access /var/ntop/prefsCache.db: No such file or directory
> Telcontar:~ # locate prefsCache.db
> /var/lib/ntop/prefsCache.db
> Telcontar:~ #


However, the daemon starts fine here:


> Telcontar:~ # rcntop
> Usage: /usr/sbin/rcntop {start|stop|restart|reload|force-reload|status|try-restart|probe}
> Telcontar:~ # rcntop start
> redirecting to systemctl  start ntop
> Telcontar:~ # rcntop status
> Checking for service ntop:                                                                        running
> ntop.service - LSB: ntop Network Monitor
>           Loaded: loaded (/etc/init.d/ntop)
>           Active: active (running) since Wed, 2013-10-30 14:27:20 CET; 3s ago
>          Process: 8681 ExecStart=/etc/init.d/ntop start (code=exited, status=0/SUCCESS)
>           CGroup: name=systemd:/system/ntop.service
>                   └ 8690 /usr/bin/ntop -P /var/lib/ntop -i eth0 -u ntop -w 127.0.0.1:3000
>
> Oct 30 14:27:20 Telcontar.valinor systemd[1]: Starting LSB: ntop Network Monitor...
> Oct 30 14:27:20 Telcontar.valinor ntop[8690]: THREADMGMT[t139909809600704]: ntop RUNSTATE: PREINIT(1)
> Oct 30 14:27:20 Telcontar.valinor ntop[8690]: THREADMGMT[t139909809600704]: ntop RUNSTATE: INIT(2)
> Oct 30 14:27:20 Telcontar.valinor ntop[8681]: Starting service ntop ..done
> Oct 30 14:27:20 Telcontar.valinor systemd[1]: Started LSB: ntop Network Monitor.
> Telcontar:~ #


And it works, I can open the localhost:3000 page. It might be that I set
the password years ago.


Cheers / Saludos,

Carlos E. R.
(from 12.3 x86_64 “Dartmouth” at Telcontar)