ngrep doesn't log anything at all 100% cpu use

kokoko3k · 2013-12-09 08:01:45

Sometimes ngrep just doesn't work, right now it seems so lazy!

What i run is:

ngrep -W byline -ql GET -d any

Then i browse some webpages, and get nothing in the log, yesterday it worked...
Any idea on what's going on, i don't even have a clue on what extra details i could provide...

-edit

just discovered that when i start it one core goes to 100% reported as idle work by top:

top - 09:22:09 up 14 min,  5 users,  load average: 1,16, 1,15, 0,84
Tasks: 162 total,   2 running, 160 sleeping,   0 stopped,   0 zombie
%Cpu(s): 50,0 us,  2,2 sy,  0,0 ni, 41,7 id,  6,0 wa,  0,0 hi,  0,1 si,  0,0 st
KiB Mem:   4136316 total,  1697360 used,  2438956 free,   168384 buffers
KiB Swap:  7393592 total,        0 used,  7393592 free.   841408 cached Mem

  PID USER      PR  NI    VIRT    RES    SHR S  %CPU %MEM     TIME+ COMMAND
 9730 nobody    20   0   14236   3736   3484 R  97,5  0,1   1:53.13 ngrep

this one works instead:

tcpdump -w - | ngrep -W byline -ql GET -p -I -

Last edited by kokoko3k (2013-12-09 08:40:35)

kokoko3k · 2013-12-16 15:35:52

It seems it is a regression with newer kernels, somebosy could confirm if it works for him?

guns · 2013-12-20 06:52:21

I am a regular user of ngrep and I noticed that it stopped working ~2 months ago. I've never been annoyed enough to investigate, but your idea of piping tcpdump output into ngrep is great.

So yes, I have the same problem.

kokoko3k · 2013-12-20 14:37:33

I compiled the mainline version, and got the same result, unfortunately.

Arch Linux

#1 2013-12-09 08:01:45

ngrep doesn't log anything at all 100% cpu use

#2 2013-12-16 15:35:52

Re: ngrep doesn't log anything at all 100% cpu use

#3 2013-12-20 06:52:21

Re: ngrep doesn't log anything at all 100% cpu use

#4 2013-12-20 14:37:33

Re: ngrep doesn't log anything at all 100% cpu use

Board footer