WRT: Flags - there's some descriptive stuff in the back traffic for the list and in docs/FAQ:
"Q. What are High/Medium/Low risk flags A. They are set in reportUtils.c based on fairly self-obvious functions: Medium: hasWrongNetmask() High: hasDuplicatedMac() Often seen if you are monitoring a backbone or common network (high) or if you have cloned MAC addresses for, say, a home Firewall box." WRT: WishList - very funny. There's two of us working on ntop and we do what we want to meet our needs. If somebody want's something done, there's two alternatives: 1. DIY 2. $ponsor the development work oh, and for trivial things, #3 sometimes works: 3. Ask nicely, be willing to test it and say thank you after the fact. -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kaczmarek, Thaddeus Sent: Monday, November 24, 2003 8:47 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled Sorry, this wasn't a log message but from the Network Healthness. It has the little yellow status flag next to the hostname. Now since enabling sFlow I can't seem to find the same screen anymore. The ntop daemon is running on a 10.0.X.X/24 which is also running opennms. Ifconfig and the ntop configuration screen both display proper netmask and ifconfig displays proper broadcast, 255.255.255.0 and 10.0.X.255 respectively. I was seeing all the local flows before, and every host had the little flag next to it and on the right side was the note about the wrong netmask or bridging being enabled. I disabled sFlow and restarted ntop and no longer am seeing that message. Could that have been due to the fact that ntop was not running long enough. Very impressive work, what I see so far I am very impressed with. You guys need to get yourselves a wish list like the opennms guys have. Ted On Mon, 2003-11-24 at 09:22, Burton M. Strauss III wrote: > And I'm supposed to guess at the actual log message? And the > configuration?? > > I'm good, but not that good... > > -----Burton > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Kaczmarek, Thaddeus > Sent: Monday, November 24, 2003 7:59 AM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled > > > It has the correct interface information in its config. > On he info.html is shows the Local Networks subnet mask as a /24. > > > Ted > On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote: > > ntop uses the interface information (e.g. ifconfig) to figure out the net > > mask. > > > > Beyond that, no clue since you've given no useable information - please > see > > "How To ask for help" in docs/FAQ. > > > > -----Burton > > > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tomas > > Charvat > > Sent: Monday, November 24, 2003 6:09 AM > > To: [EMAIL PROTECTED] > > Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled > > > > > > what about "-o" ? > > > > > > ----- Original Message ----- > > From: "Ted Kaczmarek" <[EMAIL PROTECTED]> > > To: <[EMAIL PROTECTED]> > > Sent: Monday, November 24, 2003 12:33 PM > > Subject: [Ntop] Bogus wrong netmask or bridging enabled > > > > > > > Does ntop need to be told what size each subnet is? I am seeing > > > wrong network mask or bridging enabled for every machine in one > > > broadcast domain that is a 24 bit 10.X.X.X. > > > > > > Thanks, > > > Ted > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > DISCLAIMER > e-mail, and any attachments thereto, is intended only for use by the > addressee(s) named herein and may contain legally privileged and/or > confidential information. If you are not the intended recipient of this > e-mail, you are hereby notified that any dissemination, distribution or > copying of this e-mail, and any attachments thereto, is strictly prohibited. > If you have received this e-mail in error, please immediately notify me and > permanently delete the original and any copy of any e-mail and any printout > thereof. > E-mail transmission cannot be guaranteed to be secure or error-free. The > sender therefore does not accept liability for any errors or omissions in > the contents of this message which arise as a result of e-mail transmission. > REGARDING PRIVACY AND CONFIDENTIALITY > Crown Financial Group may, at its discretion, monitor and review the content > of all e-mail communications. > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop DISCLAIMER e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof. E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission. REGARDING PRIVACY AND CONFIDENTIALITY Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop