RE: [Ntop] problem with ntop www display
(Excerpted Slightly updated from a 07Jan2001 post to ntop and ntop-dev) Please give us more information... Specifically: Hardware Type # of processors Amount of memory # network interfaces and types (vendor, bus, etc.) Software NTop version, source and any applied patches If you've compiled from the source, say so! If you're using a package (such as an .rpm), where did you get it from and what is the EXACT name? The EXACT command line you are using to invoke NTop OS vendor version Any major upgrades (kernel, networking, etc.) gcc version (e.g. gcc --version) glibc version What else is running Network Roughly where are the interface(s) you're monitoring (Public Internet, Private LAN, what?) What's the bandwidth (e.g. 10 Mbps University internet, 1.5 Mbps T1, CableModem capped at 1.5Mbps, 56K dialup) How many machines (traffic sources/destinations) and users Operations The EXACT command like you use to invoke ntop. If it's in a script, cut paste it and resolve all the variables! Error Messages: Cut paste the exact text. If it's in the log, give us 15 or 20 lines before. Also-- How about the exact URLs The generated html source - both local and remote... (do a view source and cut paste it) (If you're uncomfortable giving specifics, then leave it generic) -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Damon Sisola Sent: Thursday, February 07, 2002 6:03 PM To: [EMAIL PROTECTED] Subject: [Ntop] problem with ntop www display I have installed ntop successfully on two Linux boxes, and the functionality looks very good. But I am having trouble with the www output on one of the boxes (from any browser/client) where the web pages are simple tables with only placeholders for graphics. On the other box, the local Netscape browser displays the properly formatted html, but any remote browser gets the same plain-table and image-free results. The data information is there in both cases, but for presentation to management, the nice looking GUI is much more friendly. thanks for any ideas, Damon ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Ntop should monitor only 1 host
Yes -m tells ntop what is local, not what to monitor. You need to use the -B option and create a filter. Off the top of my head, something like this: -B src or dst host aaa.bbb.ccc.ddd -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Axel Umpfenbach Sent: Thursday, February 14, 2002 12:20 PM To: [EMAIL PROTECTED] Subject: [Ntop] Ntop should monitor only 1 host Hi, I want ntop only monitors 1 signle host. I startet it with ntop -m aaa.bbb.ccc.ddd/255.255.255.255 But it still monitors the whole subnet. Do I make a mistake? Axel ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] question using custom services.list with NTOP
I am using a file to tell ntop which services to report on using the command line: ntop -w 5000 -d -q -m 192.168.1.0/24 -p /usr/local/bin/services.list Ntop is watching and reporting on the ports in the protocol.list file, however it is also displaying duplicate columns for all of the default protocols. This means that if I put any of the default protocols such as 'FTP=ftp|ftp_data' in the services.list, then the FTP column shows up twice in the Web pages, but data is logged only under the second (my added) column instance. If I do not put the FTP protocol in my services.list file, it still shows on the Web pages but data is always 0. Hopefully this makes sense, and the sought after remedy would be to have nmap show ONLY the protocols in the services.list files, and nothing more. thanks, Damon ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Ntop should monitor only 1 host
By using the -m switch, you have told ntop how to differentiate between your defined local subnet and all other hosts within its reports. To tell ntop to only watch one host use TCPdump style arguments like: ntop host 192.1.1.1 Damon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Axel Umpfenbach Sent: Thursday, February 14, 2002 10:20 AM To: [EMAIL PROTECTED] Subject: [Ntop] Ntop should monitor only 1 host Hi, I want ntop only monitors 1 signle host. I startet it with ntop -m aaa.bbb.ccc.ddd/255.255.255.255 But it still monitors the whole subnet. Do I make a mistake? Axel ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Problem merging traffic on multiple interfaces on v2.0.1
1) There was a bug related to -M always being on/off - it's been fixed. 2) There are a number of changes in the hashing tables, etc. Please try a more recent snapshot. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Domski, Samuel Sent: Saturday, February 09, 2002 12:19 AM To: [EMAIL PROTECTED] Subject: [Ntop] Problem merging traffic on multiple interfaces on v2.0.1 Hi All, I have encountered problem merging traffic on multiple interfaces on NTOP v2.0.1 (Feb. 8), v2.0.0 had no such problem and you had to add -M in order to prevent merging. My hardware/software configuration is as follows: CPU:Athlon 1700 RAM:512Mb HD: 40Gb NICs: 4 x 3C980 PCI (eth0 with IP defined, and eth1,eth2, and eth3 used for NTOP with no IP defined) OS: Red Hat 7.2 (kernel 2.4.7-10) NTOP: 2.0.1 (02/08/2002) LIBS: gcc-2.96-98, glibc-2.2.4-13 SERVICES: anacron, apmd, atd, crond, network, portmap, sshd, syslog, xinetd, wu-ftpd NTOP RUN: /usr/local/bin/ntop -i eth1,eth2 -w 3000 -P ./ -u ntop With this run I am unable to even switch NICs through Admin/Switch NIC. Option is available but it doesn't switch NIC. NTOP RUN: /usr/local/bin/ntop -i eth1,eth2 -w 3000 -P ./ -u ntop -K When -K is added I am able to switch NICs through Admin/Switch NIC. Adding -M to either of the above NTOP RUNs doesn't seem to have any effect. In both cased NTOP reports on startup: Listening on [eth1,eth2] Started thread (8201) for network packet sniffing on eth0. Started thread (9226) for network packet sniffing on eth1. Any thoughts on this problem are appreciated. Cheers, Sam Domski ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
Re: [Ntop] can't install ntop
Dans son précédent message Jane Sun écrivait : I try to download ntop v2.0 or v1.1 and install. I couldn't go through. Do you have any documentation for installation and executable file which I can download? Which files did you download and for what kind of OS ? Guillaume [ Sent with SquirrelMail - http://www.squirrelmail.org ] ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface
In my 04Feb2002 message about changes to ntop, I mentioned the zombie: 7. Some code that looks like it's work on the BSD zombie problem... grep for usedFork... then again... Have you tried one of the more recent snapshots? Feed back on whether it's fixed would be useful... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sean O'Neill Sent: Thursday, February 14, 2002 9:31 AM To: [EMAIL PROTECTED] Subject: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface I noticed that in Jan 02 of the ntop archives that a couple of posts for FreeBSD 4.5 having ntop zombies showing up when using the web interface. I recently installed the ntop port in FreeBSD 4.5R. It runs fine. Its just I don't particularly like having 306+ ntop zombies laying around. Besides the -K switch, was any resolution found for this annoying issue ? - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] Multiple Interfaces
I have three different networks on different switches with same subnet mask.I want to run ntop using three listening interfaces on one PC. It is desirable to view three networks seperately using one IP address. Anyone with ides to implement this on NTOP running on Linux platform. Davinder Singh Network Services ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface
I'm trying to compile snapshot 2-15-2002 but I'm getting the following error on FreeBSD 4.5R: # gmake gmake all-recursive gmake[1]: Entering directory `/tmp/ntop-current/ntop' Making all in . gmake[2]: Entering directory `/tmp/ntop-current/ntop' /bin/sh ./libtool --mode=link gcc -g -O2 -pipe -o libntop.la -rpath /usr/local/ntop/lib -version-info -release -export-dynamic address.lo dataFormat.lo event.lo globals-core.lo hash.lo initialize.lo leaks.lo logger.lo mysql.lo netflow.lo ntop.lo pbuf.lo protocols.lo plugin.lo qsort.lo regex.lo rules.lo sql.lo sessions.lo ssl.lo term.lo traffic.lo util.lo vendor.lo version.lo ntop_darwin.lo -lpcap -L/usr/local/lib -lgdbm -lc_r -lcrypt -lm -lz -L/tmp/ntop-current/gdchart0.94c -lgdchart -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3 -lgd -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3/libpng-1.0.8 -lpng -L/tmp/ntop-current/gdchart0.94c/zlib-1.1.3 -lz -lssl -lcrypto libtool: link: CURRENT `-release' is not a nonnegative integer libtool: link: `-release' is not valid version information gmake[2]: *** [libntop.la] Error 1 gmake[2]: Leaving directory `/tmp/ntop-current/ntop' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/ntop-current/ntop' gmake: *** [all-recursive-am] Error 2 Any ideas how I can fix this and continue testing ? At 07:26 AM 2/15/2002 -0600, Burton M. Strauss III wrote: In my 04Feb2002 message about changes to ntop, I mentioned the zombie: 7. Some code that looks like it's work on the BSD zombie problem... grep for usedFork... then again... Have you tried one of the more recent snapshots? Feed back on whether it's fixed would be useful... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sean O'Neill Sent: Thursday, February 14, 2002 9:31 AM To: [EMAIL PROTECTED] Subject: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface I noticed that in Jan 02 of the ntop archives that a couple of posts for FreeBSD 4.5 having ntop zombies showing up when using the web interface. I recently installed the ntop port in FreeBSD 4.5R. It runs fine. Its just I don't particularly like having 306+ ntop zombies laying around. Besides the -K switch, was any resolution found for this annoying issue ? - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface
K ... I cheated a bit and hacked libtool by changing the following #current=$2 current=0 This allowed the compile to continue - somewhat. Now I'm getting this: .libs/libntop.so: undefined reference to `atoll' gmake[2]: *** [ntop] Error 1 gmake[2]: Leaving directory `/tmp/ntop-current/ntop' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/ntop-current/ntop' gmake: *** [all-recursive-am] Error 2 According to http://people.freebsd.org/~mike/c99/, atoll() isn't in FreeBSD 4.x - its in FreeBSD 5.x. So maybe, for FreeBSD 4.x ntop should be using strtoll() in address.c ? At 09:58 AM 2/15/2002 -0600, Sean O'Neill wrote: I'm trying to compile snapshot 2-15-2002 but I'm getting the following error on FreeBSD 4.5R: # gmake gmake all-recursive gmake[1]: Entering directory `/tmp/ntop-current/ntop' Making all in . gmake[2]: Entering directory `/tmp/ntop-current/ntop' /bin/sh ./libtool --mode=link gcc -g -O2 -pipe -o libntop.la -rpath /usr/local/ntop/lib -version-info -release -export-dynamic address.lo dataFormat.lo event.lo globals-core.lo hash.lo initialize.lo leaks.lo logger.lo mysql.lo netflow.lo ntop.lo pbuf.lo protocols.lo plugin.lo qsort.lo regex.lo rules.lo sql.lo sessions.lo ssl.lo term.lo traffic.lo util.lo vendor.lo version.lo ntop_darwin.lo -lpcap -L/usr/local/lib -lgdbm -lc_r -lcrypt -lm -lz -L/tmp/ntop-current/gdchart0.94c -lgdchart -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3 -lgd -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3/libpng-1.0.8 -lpng -L/tmp/ntop-current/gdchart0.94c/zlib-1.1.3 -lz -lssl -lcrypto libtool: link: CURRENT `-release' is not a nonnegative integer libtool: link: `-release' is not valid version information gmake[2]: *** [libntop.la] Error 1 gmake[2]: Leaving directory `/tmp/ntop-current/ntop' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/ntop-current/ntop' gmake: *** [all-recursive-am] Error 2 Any ideas how I can fix this and continue testing ? At 07:26 AM 2/15/2002 -0600, Burton M. Strauss III wrote: In my 04Feb2002 message about changes to ntop, I mentioned the zombie: 7. Some code that looks like it's work on the BSD zombie problem... grep for usedFork... then again... Have you tried one of the more recent snapshots? Feed back on whether it's fixed would be useful... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sean O'Neill Sent: Thursday, February 14, 2002 9:31 AM To: [EMAIL PROTECTED] Subject: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface I noticed that in Jan 02 of the ntop archives that a couple of posts for FreeBSD 4.5 having ntop zombies showing up when using the web interface. I recently installed the ntop port in FreeBSD 4.5R. It runs fine. Its just I don't particularly like having 306+ ntop zombies laying around. Besides the -K switch, was any resolution found for this annoying issue ? - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop - . ..- -. .. -..- .-. ..- .-.. . ... .-- .. -. -... .-.. --- .-- ... -.. .-. --- --- .-.. ... Sean O'Neill ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] Error compiling NTOP on Win2K
I am trying to compile NTOP under windows 2000 and am getting the following error. I have followed the instructions step by step and when I start compiling NTOP itself I get this error. I also noticed that the current release (stable) doesn't containe bpf.h that is supposed to have the necessary definitions for MINGW. Would appreciate any input. egex.c rm version.c rm: cannot remove `version.c': No such file or directory make: [version.c] Error 1 (ignored) echo char version[] = \1.1\; version.c echo char osName[] = \win2k\; version.c echo char author[] = \Luca Deri [EMAIL PROTECTED]\; version.c gcc -O -DHAVE_FCNTL_H=1 -DHAVE_PCAP_H=1 -DHAVE_STDARG_H=1 -I. -Ic:/mingw/inc lude -Ic:/wpdpack/include -Ic:/wpdpack/include/NET -I../gdchart0.94c -o version.o -c version.c gcc -O -Lc:/wpdpack/lib -Lc:/mingw/lib -L../gdchart0.94c -L../gdchart0.94c/z lib- 1.1.3 -L../gdchart0.94c/gd-1.8.3 -L../gdchart0.94c/gd-1.8.3/libpng-1.0.8 -o nto p ntop.o pbuf.o util.o http.o vendor.o report.o qsort.o globals-core.o globals-r eport.o address.o admin.o dataFormat.o emitter.o event.o graph.o hash.o initiali ze.o leaks.o logger.o main.o ntop_win32.o reportUtils.o traffic.o plugin.o webIn terface.o term.o netflow.o sql.o rules.o plugins/icmpPlugin.o plugins/lastSeenPl ugin.o plugins/nfsPlugin.o plugins/rmonPlugin.o plugins/wapPlugin.o regex.o vers ion.o -lgdbm -lwpcap -lgdchart -lgd -lpng -lz -lwsock32 pbuf.o(.text+0x2040):pbuf.c: undefined reference to `handleBootp' pbuf.o(.text+0x72cf):pbuf.c: undefined reference to `processDNSPacket' pbuf.o(.text+0x7673):pbuf.c: undefined reference to `handleNetbios' make: *** [ntop] Error 1g BEGIN:VCARD VERSION:2.1 N:Arumainathan;Dilan FN:Dilan Arumainathan EMAIL;PREF;INTERNET:[EMAIL PROTECTED] REV:20020215T172822Z END:VCARD
RE: [Ntop] Multiple Interfaces
Um... Read the man page? You have two choices. One is to run a single instance and use the -M flag Two is to run multiple instances, each monitoring separate nics Make sure you are using a recent snapshot, as there were problems with -M in the 2.0 released version. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Davinder Singh - McLean Sent: Friday, February 15, 2002 8:33 AM To: '[EMAIL PROTECTED]' Subject: [Ntop] Multiple Interfaces I have three different networks on different switches with same subnet mask.I want to run ntop using three listening interfaces on one PC. It is desirable to view three networks seperately using one IP address. Anyone with ides to implement this on NTOP running on Linux platform. Davinder Singh Network Services ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] FreeBSD 4.5R make problem
Edit the generated Makefile, puting a valid # after the -release... There is something wrt to automake/autoconf/make, whatever, where it doesn't put the version # in properly. I though this was fixed, but it comes back. 1. run ./autogen.sh -1 this rebuilds everything and is an especially good idea if your environment isn't 100% the same as Luca's... 2. I use this patch, fwiw: --- ntop-current/Makefile.amTue Jan 8 17:05:04 2002 +++ 2.0-released/Makefile.amFri Dec 28 08:57:06 2001 @@ -57,5 +57,6 @@ SUBDIRS = . @PLUGINS@ @INTOP@ -DIST_COMMON = AUTHORS CONTENTS COPYING ChangeLog \ +DIST_COMMON = +DIST_COMMON += AUTHORS CONTENTS COPYING ChangeLog \ MANIFESTO NEWS PORTING \ SUPPORT_NTOP.txt THANKS \ @@ -130,5 +131,5 @@ libntop_la_DEPENDENCIES = config.h libntop_la_LIBADD = $(CORELIBS) -libntop_la_LDFLAGS = -version-info @NTOP_VERSION_INFO@ -release @NTOP_RELEASE@ -export-dynamic @DYN_FLAGS@ +libntop_la_LDFLAGS = -version-info 0 -release 2 -export-dynamic @DYN_FLAGS@ # Archive for http representation, or the 'viewer' @@ -144,5 +145,5 @@ libntopreport_la_DEPENDENCIES = config.h libntopreport_la_LIBADD = $(MORELIBS) -libntopreport_la_LDFLAGS = -version-info @NTOP_VERSION_INFO@ -release @NTOP_RELEASE@ -export-dynamic @DYN_FLAGS@ +libntopreport_la_LDFLAGS = -version-info 0 -release 2 -export-dynamic @DYN_FLAGS@ man_MANS = ntop.8 intop/intop.1 --- ntop-current/plugins/pep/Makefile.amWed Jan 2 17:07:21 2002 +++ 2.0-released/plugins/pep/Makefile.amFri Dec 28 08:57:06 2001 @@ -24,5 +24,6 @@ # -DIST_COMMON = Makefile.am Makefile.in +DIST_COMMON = +DIST_COMMON += Makefile.am Makefile.in CLEANFILES = EXTRA_DIST = available.pl hosts.pl @@ -54,6 +55,6 @@ LIBS = # ${PEPLIBS} -pep.so: pep.c +pep.so($EXEEXT): pep.c # ${CC} -shared ${libpep_la_OBJECTS} ${PEPLIBS} -Wl,-soname -Wl,libpep.so.0 -o pep.so @${CC} -shared ${libpep_la_OBJECTS} ${PEPLIBS} -o pep.so - (cd .. ln -fs pep/pep.so .) \ No newline at end of file + (cd .. ln -fs pep/pep.so .) --- ntop-current/intop/Makefile.am Wed Jan 2 17:07:05 2002 +++ 2.0-released/intop/Makefile.am Fri Dec 28 08:57:06 2001 @@ -25,5 +25,6 @@ # -DIST_COMMON = Makefile.am Makefile.in intop.1 +DIST_COMMON = +DIST_COMMON += Makefile.am Makefile.in intop.1 DISTCLEANFILES = logger.db ntop.db ntop_pw.db intops --- ntop-current-original/plugins/Makefile.am Tue Feb 5 17:05:34 2002 +++ ntop-current/plugins/Makefile.amWed Feb 6 10:40:18 2002 @@ -27,5 +27,6 @@ SUBDIRS = . #pep -DIST_COMMON = Makefile.am Makefile.in +DIST_COMMON = +DIST_COMMON += Makefile.am Makefile.in CLEANFILES = EXTRA_DIST = @@ -52,20 +53,20 @@ libicmpPlugin_la_SOURCES = icmpPlugin.c -libicmpPlugin_la_LDFLAGS = -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +libicmpPlugin_la_LDFLAGS = -shared -version-info 2 @DYN_FLAGS@ libsflowPlugin_la_SOURCES = sflowPlugin.c -libsflowPlugin_la_LDFLAGS = -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +libsflowPlugin_la_LDFLAGS = -shared -version-info 2 @DYN_FLAGS@ liblastSeenPlugin_la_SOURCES = lastSeenPlugin.c -liblastSeenPlugin_la_LDFLAGS = -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +liblastSeenPlugin_la_LDFLAGS = -shared -version-info 2 @DYN_FLAGS@ libnfsPlugin_la_SOURCES = nfsPlugin.c -libnfsPlugin_la_LDFLAGS = -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +libnfsPlugin_la_LDFLAGS = -shared -version-info 2 @DYN_FLAGS@ #librmonPlugin_la_SOURCES = rmonPlugin.c rmon.h -#librmonPlugin_la_LDFLAGS = @SNMPLIBS@ -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +#librmonPlugin_la_LDFLAGS = @SNMPLIBS@ -shared -version-info 2 @DYN_FLAGS@ #libwapPlugin_la_SOURCES = wapPlugin.c -#libwapPlugin_la_LDFLAGS = -shared -version-info @NTOP_VERSION_INFO@ @DYN_FLAGS@ +#libwapPlugin_la_LDFLAGS = -shared -version-info 2 @DYN_FLAGS@ @@ -79,5 +80,5 @@ cc -bundle -flat_namespace -undefined suppress -o .libs/libicmpPlugin.so@SO_VERSION_PATCH@ icmpPlugin.o -icmpPlugin.so: .libs/libicmpPlugin.so@SO_VERSION_PATCH@ +icmpPlugin.so$(EXEEXT): .libs/libicmpPlugin.so@SO_VERSION_PATCH@ @ln -s .libs/libicmpPlugin.so icmpPlugin.so @@ -85,5 +86,5 @@ cc -bundle -flat_namespace -undefined suppress -o .libs/libsflowPlugin.so@SO_VERSION_PATCH@ sflowPlugin.o -sflowPlugin.so: .libs/libsflowPlugin.so@SO_VERSION_PATCH@ +sflowPlugin.so$(EXEEXT): .libs/libsflowPlugin.so@SO_VERSION_PATCH@ @ln -s .libs/libsflowPlugin.so sflowPlugin.so @@ -91,5 +92,5 @@ cc -bundle -flat_namespace -undefined suppress -o .libs/liblastSeenPlugin.so@SO_VERSION_PATCH@ lastSeenPlugin.o -lastSeenPlugin.so: .libs/liblastSeenPlugin.so@SO_VERSION_PATCH@ +lastSeenPlugin.so$(EXEEXT): .libs/liblastSeenPlugin.so@SO_VERSION_PATCH@ @ln -s .libs/liblastSeenPlugin.so lastSeenPlugin.so @@ -97,5 +98,5 @@ cc -bundle -flat_namespace -undefined suppress -o .libs/libnfsPlugin.so@SO_VERSION_PATCH@ nfsPlugin.o
RE: [Ntop] FreeBSD 4.5R compile problems
Yeah, that's one way to do it... ugly, but it works... I personally patch the Makefiles. Someday I'll learn enough about automake/autoconf/make et al to fix it for real (ha!). As to the other problem... I guess updating to FreeBDS 5 isn't an option? ATOI(3) Linux Programmer's Manual ATOI(3) NAME atoi, atol, atoll, atoq - convert a string to an integer. SYNOPSIS #include stdlib.h int atoi(const char *nptr); long atol(const char *nptr); long long atoll(const char *nptr); long long atoq(const char *nptr); DESCRIPTION The atoi() function converts the initial portion of the string pointed to by nptr to int. The behaviour is the same as strtol(nptr, (char **)NULL, 10); except that atoi() does not detect errors. The atol() and atoll() functions behave the same as atoi(), except that they convert the initial portion of the string to their return type of long or long long. atoq() is an obsolete name for atoll(). RETURN VALUE The converted value. CONFORMING TO SVID 3, POSIX.1, BSD 4.3, ISO/IEC 9899. ISO/IEC 9899:1990 (C89) and POSIX.1 (1996 edition) include the functions atoi() and atol() only; C99 adds the function atoll(). NOTES The non-standard atoq() function is not present in libc 4.6.27 or glibc 2, but is present in libc5 and libc 4.7 (though only as an inline function in stdlib.h until libc 5.4.44). The atoll() function is present in glibc 2 since version 2.0.2, but not in libc4 or libc5. SEE ALSO atof(3), strtod(3), strtol(3), strtoul(3) GNU 2000-12-17ATOI(3) I don't know how your version will handle the long long, but you could create a #define for atoll... this might work... (or some similar hack)... I think you might lose some resolution/information if you exceed the size of a long... check limits.h #define atoll(a) (long long) strtol(a, (char **)NULL, 10); -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sean O'Neill Sent: Friday, February 15, 2002 10:28 AM To: [EMAIL PROTECTED] Subject: RE: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface K ... I cheated a bit and hacked libtool by changing the following #current=$2 current=0 This allowed the compile to continue - somewhat. Now I'm getting this: .libs/libntop.so: undefined reference to `atoll' gmake[2]: *** [ntop] Error 1 gmake[2]: Leaving directory `/tmp/ntop-current/ntop' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/ntop-current/ntop' gmake: *** [all-recursive-am] Error 2 According to http://people.freebsd.org/~mike/c99/, atoll() isn't in FreeBSD 4.x - its in FreeBSD 5.x. So maybe, for FreeBSD 4.x ntop should be using strtoll() in address.c ? At 09:58 AM 2/15/2002 -0600, Sean O'Neill wrote: I'm trying to compile snapshot 2-15-2002 but I'm getting the following error on FreeBSD 4.5R: # gmake gmake all-recursive gmake[1]: Entering directory `/tmp/ntop-current/ntop' Making all in . gmake[2]: Entering directory `/tmp/ntop-current/ntop' /bin/sh ./libtool --mode=link gcc -g -O2 -pipe -o libntop.la -rpath /usr/local/ntop/lib -version-info -release -export-dynamic address.lo dataFormat.lo event.lo globals-core.lo hash.lo initialize.lo leaks.lo logger.lo mysql.lo netflow.lo ntop.lo pbuf.lo protocols.lo plugin.lo qsort.lo regex.lo rules.lo sql.lo sessions.lo ssl.lo term.lo traffic.lo util.lo vendor.lo version.lo ntop_darwin.lo -lpcap -L/usr/local/lib -lgdbm -lc_r -lcrypt -lm -lz -L/tmp/ntop-current/gdchart0.94c -lgdchart -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3 -lgd -L/tmp/ntop-current/gdchart0.94c/gd-1.8.3/libpng-1.0.8 -lpng -L/tmp/ntop-current/gdchart0.94c/zlib-1.1.3 -lz -lssl -lcrypto libtool: link: CURRENT `-release' is not a nonnegative integer libtool: link: `-release' is not valid version information gmake[2]: *** [libntop.la] Error 1 gmake[2]: Leaving directory `/tmp/ntop-current/ntop' gmake[1]: *** [all-recursive] Error 1 gmake[1]: Leaving directory `/tmp/ntop-current/ntop' gmake: *** [all-recursive-am] Error 2 Any ideas how I can fix this and continue testing ? At 07:26 AM 2/15/2002 -0600, Burton M. Strauss III wrote: In my 04Feb2002 message about changes to ntop, I mentioned the zombie: 7. Some code that looks like it's work on the BSD zombie problem... grep for usedFork... then again... Have you tried one of the more recent snapshots? Feed back on whether it's fixed would be useful... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Sean O'Neill Sent: Thursday, February 14, 2002 9:31 AM To: [EMAIL PROTECTED] Subject: [Ntop] FreeBSD 4.5R and LOTS of ntop zombies when using web interface I noticed that in Jan 02 of the ntop archives that a couple of posts for FreeBSD 4.5 having ntop zombies showing up when using the web
RE: [Ntop] Error compiling NTOP on Win2K
The 1st error can be ignored - file doesn't exist, so it can't rm it... Anyway, in ntop after the 2.0 release (you don't tell us which version of the source you are using...), those missing routines were refactored out of pbuf.c into protocols.c, which I don't see in the list of .o files. I'm guessing the makefile needs to be updated, but it's in there in my version (04Jan2002): CSRC = ntop.c pbuf.c util.c http.c vendor.c report.c qsort.c \ globals-core.c globals-report.c address.c admin.c \ dataFormat.c emitter.c event.c graph.c hash.c \ initialize.c leaks.c logger.c main.c ntop_win32.c \ reportUtils.c traffic.c plugin.c webInterface.c term.c \ netflow.c sql.c rules.c plugins/icmpPlugin.c \ plugins/lastSeenPlugin.c plugins/nfsPlugin.c \ plugins/rmonPlugin.c plugins/wapPlugin.c regex.c \ protocols.c Next step: check your Makefile.mingw and source version... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Dilan Arumainathan Sent: Friday, February 15, 2002 11:28 AM To: [EMAIL PROTECTED] Subject: [Ntop] Error compiling NTOP on Win2K I am trying to compile NTOP under windows 2000 and am getting the following error. I have followed the instructions step by step and when I start compiling NTOP itself I get this error. I also noticed that the current release (stable) doesn't containe bpf.h that is supposed to have the necessary definitions for MINGW. Would appreciate any input. egex.c rm version.c rm: cannot remove `version.c': No such file or directory make: [version.c] Error 1 (ignored) echo char version[] = \1.1\; version.c echo char osName[] = \win2k\; version.c echo char author[] = \Luca Deri [EMAIL PROTECTED]\; version.c gcc -O -DHAVE_FCNTL_H=1 -DHAVE_PCAP_H=1 -DHAVE_STDARG_H=1 -I. -Ic:/mingw/inc lude -Ic:/wpdpack/include -Ic:/wpdpack/include/NET -I../gdchart0.94c -o version.o -c version.c gcc -O -Lc:/wpdpack/lib -Lc:/mingw/lib -L../gdchart0.94c -L../gdchart0.94c/z lib-1.1.3 -L../gdchart0.94c/gd-1.8.3 -L../gdchart0.94c/gd-1.8.3/libpng-1.0.8 -o ntop ntop.o pbuf.o util.o http.o vendor.o report.o qsort.o globals-core.o globals-report.o address.o admin.o dataFormat.o emitter.o event.o graph.o hash.o initialize.o leaks.o logger.o main.o ntop_win32.o reportUtils.o traffic.o plugin.o webInterface.o term.o netflow.o sql.o rules.o plugins/icmpPlugin.o plugins/lastSeenPlugin.o plugins/nfsPlugin.o plugins/rmonPlugin.o plugins/wapPlugin.o regex.o version.o -lgdbm -lwpcap -lgdchart -lgd -lpng -lz -lwsock32 pbuf.o(.text+0x2040):pbuf.c: undefined reference to `handleBootp' pbuf.o(.text+0x72cf):pbuf.c: undefined reference to `processDNSPacket' pbuf.o(.text+0x7673):pbuf.c: undefined reference to `handleNetbios' make: *** [ntop] Error 1g ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] Installation
What you see is what there is... you can look at http://www.ntop.org and http://snapshot.ntop.org and in the docs/ directory. Writing documentation would be a wonderful way to contribute to the ntop project! -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kaan G|ne~ Gelik Sent: Friday, February 15, 2002 2:50 PM To: [EMAIL PROTECTED] Subject: [Ntop] Installation Hi, I want to enable lsof, mySQL and nmap support for ntop. I installed them but, I could not be able to integrate them with ntop. Is there a detailed information for installation options? And where may I find further documentation? Regards, Kaan Gunes Celik [EMAIL PROTECTED] __ Do You Yahoo!? Got something to say? Say it better with Yahoo! Video Mail http://mail.yahoo.com ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] problem for launch ntop
Good evening I write because i have compiled and installed ntop on computer, i have to download the latest version of ntop, and i have download automaker-1.5.tar.gz. I have launch ./configure make make install But i have one problem for create the link for man page and when i launch ntop by this command ntop, i have on error after Gbdm, this error is no such file or directory in /usr/local/var When i verify this path is do not exist di you know this problem Thank you for your comment Rien de grand ne c'est accompli dans le monde sans passion - Alfred ENGEL ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] problem for launch ntop
Two solutions - Igor's: mkdir /usr/.../man/man1/intop will get you past the problem, however the intop.1 file will be in .../man1/intop/intop.1 and won't be found by man. That's pretty minor. You could also try regenerating the files with ./autogen.sh -1 (downloading the new automake isn't enough, the files generated by the old version still existing in the ntop directories) then ./configure make make install This should put intop.1 into the .../man1 directory where it belongs... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Igor Schein Sent: Friday, February 15, 2002 3:47 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] problem for launch ntop On Fri, Feb 15, 2002 at 10:35:30PM +0100, Laurent DIDIER wrote: Good evening I write because i have compiled and installed ntop on computer, i have to download the latest version of ntop, and i have download automaker-1.5.tar.gz. I have launch ./configure make make install But i have one problem for create the link for man page and when i launch ntop by this command ntop, i have on error after Gbdm, this error is no such file or directory in /usr/local/var If you mkdir first, make install will work fine. Igor ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] problem for launch NTOP
I have launch ./mkinstalldirs But the error continous this the copy of the different message /bin/sh ./mkinstalldirs /usr/local/bin /bin/sh ./libtool --mode=install /usr/bin/install -c ntop /usr/local/bin/ntop /usr/bin/install -c .libs/ntop /usr/local/bin/ntop /bin/sh ./mkinstalldirs /usr/local/bin /usr/bin/install -c ntop-config /usr/local/bin/ntop-config make install-man1 install-man8 make[3]: Entre dans le répertoire `/home/ntop-current/ntop' /bin/sh ./mkinstalldirs /usr/local/man/man1 /usr/bin/install -c -m 644 ./intop/intop.1 /usr/local/man/man1/intop/intop.1 /usr/bin/install: cannot create regular file `/usr/local/man/man1/intop/intop.1': Aucun fichier ou répertoire de ce type make[3]: *** [install-man1] Erreur 1 make[3]: Quitte le répertoire `/home/ntop-current/ntop' make[2]: *** [install-man] Erreur 2 make[2]: Quitte le répertoire `/home/ntop-current/ntop' make[1]: *** [install-am] Erreur 2 make[1]: Quitte le répertoire `/home/ntop-current/ntop' make: *** [install-recursive] Erreur 1 [root@ip-162-10 ntop]# vi mkinstalldirs [root@ip-162-10 ntop]# ntop Wait please: ntop is coming up... 15/Feb/2002 23:27:45 Initializing IP services... SSL is present but https is disabled: use -W https port for enabling it 15/Feb/2002 23:27:45 Initializing GDBM... 15/Feb/2002 23:27:45 Database '/usr/local/var/ntop/addressCache.db' open failed: File open error 15/Feb/2002 23:27:45 Possible solution: please use '-P directory' [root@ip-162-10 ntop]# I'm on Red-Hat linux 7.2 if this help you. Thank for your comment ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] a couple of questions
Yes it is - and if you read the message traffic, you would have seen the same report. But without the info, I would waste a lot of MY time on irrelevant issues. The key is the traffic mirroring. You need to use a more recent version and use the '--border-sniffer-mode' or '-j' option. This was added post 2.0 release to handle the special case of mirroring traffic on a switch (basically if you turn on mirroring, the traffic is the same at the TCP/IP level, but not at the Ethernet level - so the parameter stops ntop from using the mac addresses). There is also a traffic classification patch in the later releases, but that's for UDP. It won't help TCP. ntop does not do connection tracking like iproute2/netfilter does... It shouldn't be non-ip, but it may not be tagged as the ftp protocol. However, there are also a lot of post-2.0 changes in that area, and let's see what happens when you use the more recent code. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Igor Schein Sent: Friday, February 15, 2002 4:23 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] a couple of questions On Fri, Feb 15, 2002 at 04:21:24PM -0500, Igor Schein wrote: Hi, I'm using ntop-2.0 stable. It's listening on a firewall machine with 2 interfaces. First of all, I don't see all the hosts when I go to Data Rcvd - All protocols, even though I know they're there, because when I sort on host column alphabeticaly, it shows me hosts from a to n, and when I sort in reverse alphabetical, it shows me hosts from c to z. So there must be a limitation on the number of lines in the table for the web interface. How can I see all hosts at once? Second question is, when I do an active ftp from inside the firewall to the outside world, the traffic generated by file tranfers is considered as non-IP traffic. When I do a passive ftp, everything is accounted for correctly. Has anyone experienced that? Followup. The reason I was brief above is that I didn't want to give a lot of irrelevant info to scare people away, I thought the problem should be generic enough. I am running ntop-2.0 stable with no patches, which I compiled myself, on a single-CPU Linux machine with kernel 2.4.7, glibc-2.2.4, 32MB of RAM and 2 PCI NIC's, Intel Eepro 100 and 3Com 3c59x. I did default installation and am running ntop with no arguments. The traffic I am monitoring is being mirrored to one of the interfaces through Extreme Network switch from a firewall machine running Astaro Linux. That machine filters all traffic to a gateway Linux box, which is connected by a T1 line to the outside world. So the end result is I'm monitoring both internal and external interfaces of the firewall machine ( I'm not using -M flag ). I don't get any errors. I am hoping the above information is sufficient. Thanks Igor ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
RE: [Ntop] problem for launch NTOP
Once it fails, it won't install other files you need. Or the gdbm error could be that you forgot to stop the prior instance of ntop. Third possibility, the userid you are running under doesn't have rights to the existing files (I've had that when I manually ran as root, then tried to run a 2nd time as -u ntop). Check the .db files and delete if necessary... /usr/bin/install: cannot create regular file is most likely that you have created the wrong directory you need to have /usr/local/man/man1/intop created (use mkdir manually) so that it can copy the intop.1 file in there. Or follow my other suggestion and run ./autogen.sh -1 to recreate the make and configure files. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Laurent DIDIER Sent: Friday, February 15, 2002 4:34 PM To: [EMAIL PROTECTED] Subject: [Ntop] problem for launch NTOP I have launch ./mkinstalldirs But the error continous this the copy of the different message /bin/sh ./mkinstalldirs /usr/local/bin /bin/sh ./libtool --mode=install /usr/bin/install -c ntop /usr/local/bin/ntop /usr/bin/install -c .libs/ntop /usr/local/bin/ntop /bin/sh ./mkinstalldirs /usr/local/bin /usr/bin/install -c ntop-config /usr/local/bin/ntop-config make install-man1 install-man8 make[3]: Entre dans le répertoire `/home/ntop-current/ntop' /bin/sh ./mkinstalldirs /usr/local/man/man1 /usr/bin/install -c -m 644 ./intop/intop.1 /usr/local/man/man1/intop/intop.1 /usr/bin/install: cannot create regular file `/usr/local/man/man1/intop/intop.1': Aucun fichier ou répertoire de ce type make[3]: *** [install-man1] Erreur 1 make[3]: Quitte le répertoire `/home/ntop-current/ntop' make[2]: *** [install-man] Erreur 2 make[2]: Quitte le répertoire `/home/ntop-current/ntop' make[1]: *** [install-am] Erreur 2 make[1]: Quitte le répertoire `/home/ntop-current/ntop' make: *** [install-recursive] Erreur 1 [root@ip-162-10 ntop]# vi mkinstalldirs [root@ip-162-10 ntop]# ntop Wait please: ntop is coming up... 15/Feb/2002 23:27:45 Initializing IP services... SSL is present but https is disabled: use -W https port for enabling it 15/Feb/2002 23:27:45 Initializing GDBM... 15/Feb/2002 23:27:45 Database '/usr/local/var/ntop/addressCache.db' open failed: File open error 15/Feb/2002 23:27:45 Possible solution: please use '-P directory' [root@ip-162-10 ntop]# I'm on Red-Hat linux 7.2 if this help you. Thank for your comment ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop
[Ntop] Win2K:NTOP2.0: Starter questions
Now that I have got NTOP working under Win2K (Thanks Burton). A couple of things have got me looking for an answer. I was enjoying the nice metallic webpage with shaded clickable images etc. for a while and suddenly I have just a two frame document. Is this an option? I have tried running NTOP a few times and have noticed that NTOP will capture the traffic for a while and then silently go away. No errors are reported. Any ideas why? === Wait please: ntop is coming up... 15/Feb/2002 17:36:00 Initializing IP services... 15/Feb/2002 17:36:00 Initializing GDBM... 15/Feb/2002 17:36:00 Initializing network devices... 15/Feb/2002 17:36:00 Found interface [index=0] '\Device\Packet_{5018CC80-9D64-491B-AE94-EDE6AB45 1B25}' 15/Feb/2002 17:36:00 Found interface [index=1] '\Device\Packet_NdisWanIp' 15/Feb/2002 17:36:00 ntop v.2.0 MT [WinNT/2K/XP] (27/12/2001 build) 15/Feb/2002 17:36:00 Listening on [1B25}\Device\Packet_{5018CC80-9D64-491B-AE94-EDE6AB451B25}\De vice\Packet_{5018CC80-9D64-491B-AE94-EDE6AB451B25}\Device\Packet_{5018CC80-9D64-491B-AE94-EDE6AB 451B25}\Device\Packet_{5018CC80-9D64-4] 15/Feb/2002 17:36:00 Copyright 1998-2001 by Luca Deri [EMAIL PROTECTED] 15/Feb/2002 17:36:00 Get the freshest ntop from http://www.ntop.org/ 15/Feb/2002 17:36:00 Initializing... 15/Feb/2002 17:36:00 Loading plugins (if any)... 15/Feb/2002 17:36:00 Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri. 15/Feb/2002 17:36:00 Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri. 15/Feb/2002 17:36:00 Resetting traffic statistics... 15/Feb/2002 17:36:00 Started thread (520) for network packet analyser. 15/Feb/2002 17:36:00 Started thread (524) for host traffic statistics. 15/Feb/2002 17:36:00 Started thread (528) for throughput update. 15/Feb/2002 17:36:00 Started thread (532) for idle hosts detection. 15/Feb/2002 17:36:00 Started thread (536) for idle TCP sessions detection. 15/Feb/2002 17:36:00 Started thread (544) for DNS address resolution. 15/Feb/2002 17:36:00 Started thread (548) for address purge. 15/Feb/2002 17:36:00 Initializing plugins (if any)... 15/Feb/2002 17:36:00 Waiting for HTTP connections on 172.16.127.15 port 3000... 15/Feb/2002 17:36:00 Sniffying... 15/Feb/2002 17:36:00 Started thread (580) for network packet sniffing on \Device\Packet_{5018CC8 0-9D64-491B-AE94-EDE6AB451B25}. 15/Feb/2002 17:36:01 Extending hash: [old=32, new=48] 15/Feb/2002 17:36:03 Extending hash: [old=48, new=72] 15/Feb/2002 17:36:06 Extending hash: [old=72, new=108] 15/Feb/2002 17:36:17 Extending hash: [old=108, new=162] 15/Feb/2002 17:36:36 Extending hash: [old=162, new=242] 15/Feb/2002 17:36:43 Extending TCP hash [new size: 64] 15/Feb/2002 17:37:22 Extending TCP hash [new size: 128] 15/Feb/2002 17:37:30 Extending hash: [old=242, new=362] 15/Feb/2002 17:38:18 Extending TCP hash [new size: 256] 15/Feb/2002 17:39:58 Extending hash: [old=362, new=542] 15/Feb/2002 17:44:47 Extending hash: [old=542, new=812] 15/Feb/2002 17:51:06 Extending hash: [old=812, new=1218] c:\ntopprod ___ Ntop mailing list [EMAIL PROTECTED] http://listmanager.unipi.it/mailman/listinfo/ntop