Re: [Ntop] Some corruption with latest CVS

[Luca Deri]

Richard (and all of those who experience the same problem),
it looks that ntop isn't able to properly decode NetBios packets.

Please do this (for all the hosts that ntop isn't decoding):
1. tcpdump -s 1518 -w netbios.pcap udp and host 10.104.3.212 and port
138
2. after you have captured some packets, mail me netbios.pcap so I can
see what's wrong

Thanks, Luca

"Parvass, Richard" wrote:
> 
> Hi guys....Doing a bit of testing today - sorry for bombarding you with so
> many posts, but here goes....
> 
> In the Stats/Hosts page, there seems to be some corruption on some of the
> "Other Names" fields:
> 
> 10.104.3.212    10.104.3.212 00:06:29:EC:42:09
> ÒsØ^?ÿºÐËaåxOD4z6bæ°*ÓÙ¢YÜ5%r6Û|øó...^"2Ls!hÁ]S"d³½
ÿ ¡k?4g^îtp×"Ùl
> à/úqhdZ9¹®)²ÙÁ_$ôY
> ýÄÄ¢§Ü5%B6ÛøK"þ#´(tm)8Ct>f»¦DÈf[(tm)ÐEURög^nsp×"Ùl+à¯úwоc"'ãú
> õ*Ûw"\×"¶ÈfË?Y/ôo¡}Ë{"¢Ñg#&>í[øß&Ù5%òl¶øBÿÚ×LzUÐ'»¦D~ÍV¿Pè_Bû'?DN®kJ"Ùl
> kà¯úhG~Hää@GBHU3C7K  [õY¾R¶,@ÐùY¾]    IBM CORPORATION
> 
> Any ideas? This is a Win95 machine, and should be running Win95B
> 
> It only happens on some. I've seen this before in much earlier cvs versions,
> but it seemed to have been fixed until now. Could it just be that I need to
> clear down the database?
> 
> Thanks
> 
> Richard
> 
> _______________________________________________
> Ntop mailing list
> [EMAIL PROTECTED]
> http://listmanager.unipi.it/mailman/listinfo/ntop

-- 
Luca Deri                     NETikos S.p.A.
Via Matteucci 34/B            56124 Pisa, Italy.
Ph. +39/050/968.639           Fax. +39/050/968.626
Personal: [EMAIL PROTECTED]   Business: [EMAIL PROTECTED]
WWW: http://www.lucaderi.org/ ICQ: 68183632
Hacker: someone who loves to program and enjoys being
clever about it - Richard Stallman
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop