Re: [Ntop] Solaris 8 9 Ntop 2.2.96

2003-11-24 Thread Leonardo Valcamonici
Hi all. I've downloaded the latest CVS snapshot and compiled the beast on my Solaris 8 Sparc machine. Everything goes fine (after setting -liconv in configureextra/SOLARIS8 ...), but ntop dies with a segmentation fault after a while. I'ts not a pbuf.c/bus error matter, because I've seen Mike's

[Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Ted Kaczmarek
Does ntop need to be told what size each subnet is? I am seeing wrong network mask or bridging enabled for every machine in one broadcast domain that is a 24 bit 10.X.X.X. Thanks, Ted ___ Ntop mailing list [EMAIL PROTECTED]

Re: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Tomas Charvat
what about -o ? - Original Message - From: Ted Kaczmarek [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, November 24, 2003 12:33 PM Subject: [Ntop] Bogus wrong netmask or bridging enabled Does ntop need to be told what size each subnet is? I am seeing wrong network mask or

RE: [Ntop] Newbie Question sFlow Active No

2003-11-24 Thread Burton M. Strauss III
Set the parms and then enable it... click on the plugin name then the active status respectively -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Ted Kaczmarek Sent: Sunday, November 23, 2003 6:22 PM To: [EMAIL PROTECTED] Subject: [Ntop]

RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
ntop uses the interface information (e.g. ifconfig) to figure out the net mask. Beyond that, no clue since you've given no useable information - please see How To ask for help in docs/FAQ. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tomas

RE: [Ntop] Network Traffic from an application

2003-11-24 Thread Burton M. Strauss III
You would have to write a 'protocol analyzer' - see the examples for dhcp, ftp, http, etc. in pbuf.c To do that, you'll need to know the format of the chat packets (so you can figure out which chat is which). The virtual host stuff in http is probably a useful model. If you want to sponsor the

RE: [Ntop] Newbie Question sFlow Active No

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] Newbie Question sFlow Active No I never clicked on it :-) Ted On Mon, 2003-11-24 at 08:04, Burton M. Strauss III wrote: Set the parms and then enable it... click on the plugin name then the active status respectively -Burton -Original Message- From:

RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] Bogus wrong netmask or bridging enabled It has the correct interface information in its config. On he info.html is shows the Local Networks subnet mask as a /24. Ted On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote: ntop uses the interface information (e.g.

RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
And I'm supposed to guess at the actual log message? And the configuration?? I'm good, but not that good... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kaczmarek, Thaddeus Sent: Monday, November 24, 2003 7:59 AM To: [EMAIL PROTECTED]

RE: [Ntop] Newbie Question sFlow Active No

2003-11-24 Thread Burton M. Strauss III
Dope slap... In the cvs, the legends on that screen have been improved so it's clearer what to do... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Kaczmarek, Thaddeus Sent: Monday, November 24, 2003 7:55 AM To: [EMAIL PROTECTED] Subject: RE:

RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] Bogus wrong netmask or bridging enabled Sorry, this wasn't a log message but from the Network Healthness. It has the little yellow status flag next to the hostname. Now since enabling sFlow I can't seem to find the same screen anymore. The ntop daemon is running on a

[Ntop] Feeling stupid - meaning of flags/icons/symbols

2003-11-24 Thread papaia
Have looked almost everywhere: www.ntop.org, www.ntopsupport.com, gmane.org searches ... I am at a loss here: does anyone have a link/pointer for the RTFM about the meaning of all symbols/icons/flags that show up in the ntop web pages, by the hosts? I can understand the router and printer ones,

Re: [Ntop] Feeling stupid - meaning of flags/icons/symbols

2003-11-24 Thread Kaczmarek, Thaddeus
Title: Re: [Ntop] Feeling stupid - meaning of flags/icons/symbols You try clicking on them? Ted On Mon, 2003-11-24 at 08:40, papaia wrote: Have looked almost everywhere: www.ntop.org, www.ntopsupport.com, gmane.org searches ... I am at a loss here: does anyone have a link/pointer for the

RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
WRT: Flags - there's some descriptive stuff in the back traffic for the list and in docs/FAQ: Q. What are High/Medium/Low risk flags A. They are set in reportUtils.c based on fairly self-obvious functions: Medium: hasWrongNetmask() High: hasDuplicatedMac() Often seen if you are

RE: [Ntop] Feeling stupid - meaning of flags/icons/symbols

2003-11-24 Thread Burton M. Strauss III
What exists is where you've looked, plus docs/FAQ. Want more? Read the source. Then, when you figure it out, do a write-up for inclusion in the FAQ and send it to me... -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of papaia Sent: Monday,

[Ntop] Re: Feeling stupid - meaning of flags/icons/symbols

2003-11-24 Thread papaia
Yes, of course ... konqueror is the browser, if that matters ... On Mon, 24 Nov 2003 11:54:59 -0500, Kaczmarek, Thaddeus wrote: You try clicking on them? Ted On Mon, 2003-11-24 at 08:40, papaia wrote: Have looked almost everywhere: www.ntop.org, www.ntopsupport.com, gmane.org searches ... I

[Ntop] New to NTOP and list

2003-11-24 Thread Jennifer Fountain
Hi Guys, I am new to using NTOP and trying to install this on redhat 9.0. Problem is - not sure where to begin. Can someone point me to a installations document that tells me what the prereq installs are, etc? Any info would be greatly appreciated.

Re: [Ntop] New to NTOP and list

2003-11-24 Thread Mike Tremaine
Download the lastest CVS. Read howto here http://www.ntop.org/download.html Then once you have the cvs tree cd into ntop/docs/ and you'll find most of the documentation you'll need. Reading the back traffic at http://lists.ntop.org/pipermail/ntop/ and look for Redhat 9 issues. (Also you can

RE: [Ntop] New to NTOP and list

2003-11-24 Thread Burton M. Strauss III
Read the files in docs/ maybe - esp. BUILD-NTOP.txt and FAQ. -Burton -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Jennifer Fountain Sent: Monday, November 24, 2003 1:26 PM To: [EMAIL PROTECTED] Subject: [Ntop] New to NTOP and list Hi Guys, I am new

RE: [Ntop] New to NTOP and list

2003-11-24 Thread Burton M. Strauss III
Title: Re: [Ntop] New to NTOP and list Bad idea. That's version 2.2, which is unsupported. There's an rpm for 2.2c at SourceForge, but there's a heck of a difference between 2.2c and 2.2.9x (the cvs version)... -Burton -Original Message-From: [EMAIL PROTECTED]

RE: [Ntop] New to NTOP and list

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] New to NTOP and list Guess I will be building the rpm then :-) Is cvs known to consistently build? Ted On Mon, 2003-11-24 at 15:21, Burton M. Strauss III wrote: Bad idea. That's version 2.2, which is unsupported. There's an rpm for 2.2c at SourceForge, but there's a

RE: [Ntop] New to NTOP and list

2003-11-24 Thread Burton M. Strauss III
Title: RE: [Ntop] New to NTOP and list Well, it's a development version, so it's always possible for things to break, but both Luca and I test things pretty carefully before committing them. Since we both work in Linux, that's pretty safe. Luca does a lot with Mac OS X too, so that's ok.

RE: [Ntop] High CPU use 2.2.96

2003-11-24 Thread Steven Rudolph
Let me update the condition. After running this for 1 day the few seconds turned into more like 5 minutes+ for web page queries. Occasionally it is quick like it used to be. My top capture after running all weekend: last pid: 4077; load averages: 1.70, 1.74, 1.74 37 processes: 35 sleeping,

RE: [Ntop] High CPU use 2.2.96

2003-11-24 Thread Burton M. Strauss III
Swap will kill you... Memory: 2048M real, 1354M free, 314M swap in use, 1357M swap free If that's ntop, then every time it has to walk the tables (i.e. purge), it's going to have to page it all in. No clue why it would be paged out with that much free, but it could be peak usage issues. Still,

[Ntop] Redhat 9 build errors with todays snap

2003-11-24 Thread Kaczmarek, Thaddeus
Title: Redhat 9 build errors with todays snap gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I/usr/src/redhat/BUILD/ntop-current/ntop/myrrd -DLINUX -I/usr/local/include -I/usr/src/redhat/BUILD/ntop-curre nt/ntop/myrrd -O2 -g -pipe -march=i386 -mcpu=i686 -I/usr/local/include -Wshadow -Wpointer-arith

[Ntop] NTOP 2.2 and FREEBSD 5.1

2003-11-24 Thread Jet Bagadion
has anyone build ntop 2.2 on freebsd 5.1? is it recommended on 5.1 or should i use 4.9 or lower version? would appreciate your tips on running ntop on freebsd. thanks a lot. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard

[Ntop] Ntop -C1 question

2003-11-24 Thread Kevin
I'm running 2.2.96 (latest CVS), I'm using it as a netflow collector for our border router, Is it possible to track each internal host, but then consolidate the remote machines As class C's like when you run ntop with -C1? Kevin, Honeycomb Internet Services

Re: [Ntop] Ntop -C1 question

2003-11-24 Thread Burton Strauss
How about the Flow Aggregation Policy parameter in the netFlow plugin? -Burton -- Original Message -- From: Kevin [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date: Mon, 24 Nov 2003 18:49:18 -0600 I'm running 2.2.96 (latest CVS), I'm using it as a

Re: [Ntop] Redhat 9 build errors with todays snap

2003-11-24 Thread Burton Strauss
Read the news posted on snapshot Read the back traffic from this list about snapshot I've said it in 36pt bold RED DO NOT USE THE SNAPSHOTS! -Burton -- Original Message -- From: Kaczmarek, Thaddeus [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Date:

[Ntop-dev] Cannot run ntop as a daemon

2003-11-24 Thread dhobner
Why can't I run ntop as a daemon? Here is some of the output found in /var/log/messages: ntop -u root -d Nov 24 13:41:53 ntclabsvr1 ntop[15269]: Note: Reporting device initally set to 0 [eth0] (merged) Nov 24 13:41:53 ntclabsvr1 ntop[15269]: WEB: Initializing web server Nov 24 13:41:53