Re: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Tomas Charvat
what about -o ?


- Original Message - 
From: Ted Kaczmarek [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 12:33 PM
Subject: [Ntop] Bogus wrong netmask or bridging enabled


 Does ntop need to be told what size each subnet is? I am seeing 
 wrong network mask or bridging enabled for every machine in one
 broadcast domain that is a 24 bit 10.X.X.X. 
 
 Thanks,
 Ted
 ___
 Ntop mailing list
 [EMAIL PROTECTED]
 http://listgateway.unipi.it/mailman/listinfo/ntop

___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop


RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
ntop uses the interface information (e.g. ifconfig) to figure out the net
mask.

Beyond that, no clue since you've given no useable information - please see
How To ask for help in docs/FAQ.

-Burton


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tomas
Charvat
Sent: Monday, November 24, 2003 6:09 AM
To: [EMAIL PROTECTED]
Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled


what about -o ?


- Original Message -
From: Ted Kaczmarek [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Monday, November 24, 2003 12:33 PM
Subject: [Ntop] Bogus wrong netmask or bridging enabled


 Does ntop need to be told what size each subnet is? I am seeing
 wrong network mask or bridging enabled for every machine in one
 broadcast domain that is a 24 bit 10.X.X.X.

 Thanks,
 Ted

___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop


RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] Bogus wrong netmask or bridging enabled





It has the correct interface information in its config.
On he info.html is shows the Local Networks subnet mask as a /24.



Ted
On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote:
 ntop uses the interface information (e.g. ifconfig) to figure out the net
 mask.
 
 Beyond that, no clue since you've given no useable information - please see
 How To ask for help in docs/FAQ.
 
 -Burton
 
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tomas
 Charvat
 Sent: Monday, November 24, 2003 6:09 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled
 
 
 what about -o ?
 
 
 - Original Message -
 From: Ted Kaczmarek [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, November 24, 2003 12:33 PM
 Subject: [Ntop] Bogus wrong netmask or bridging enabled
 
 
  Does ntop need to be told what size each subnet is? I am seeing
  wrong network mask or bridging enabled for every machine in one
  broadcast domain that is a 24 bit 10.X.X.X.
 
  Thanks,
  Ted
 
 ___
 Ntop mailing list
 [EMAIL PROTECTED]
 http://listgateway.unipi.it/mailman/listinfo/ntop
DISCLAIMER
e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof.

E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission.

REGARDING PRIVACY AND CONFIDENTIALITY
Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications.





RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
And I'm supposed to guess at the actual log message?  And the
configuration??

I'm good, but not that good...

-Burton

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Kaczmarek, Thaddeus
Sent: Monday, November 24, 2003 7:59 AM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled


It has the correct interface information in its config.
On he info.html is shows the Local Networks subnet mask as a /24.


Ted
On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote:
 ntop uses the interface information (e.g. ifconfig) to figure out the net
 mask.

 Beyond that, no clue since you've given no useable information - please
see
 How To ask for help in docs/FAQ.

 -Burton


 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tomas
 Charvat
 Sent: Monday, November 24, 2003 6:09 AM
 To: [EMAIL PROTECTED]
 Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled


 what about -o ?


 - Original Message -
 From: Ted Kaczmarek [EMAIL PROTECTED]
 To: [EMAIL PROTECTED]
 Sent: Monday, November 24, 2003 12:33 PM
 Subject: [Ntop] Bogus wrong netmask or bridging enabled


  Does ntop need to be told what size each subnet is? I am seeing
  wrong network mask or bridging enabled for every machine in one
  broadcast domain that is a 24 bit 10.X.X.X.
 
  Thanks,
  Ted

 ___
 Ntop mailing list
 [EMAIL PROTECTED]
 http://listgateway.unipi.it/mailman/listinfo/ntop
DISCLAIMER
e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain legally privileged and/or
confidential information. If you are not the intended recipient of this
e-mail, you are hereby notified that any dissemination, distribution or
copying of this e-mail, and any attachments thereto, is strictly prohibited.
If you have received this e-mail in error, please immediately notify me and
permanently delete the original and any copy of any e-mail and any printout
thereof.
E-mail transmission cannot be guaranteed to be secure or error-free. The
sender therefore does not accept liability for any errors or omissions in
the contents of this message which arise as a result of e-mail transmission.
REGARDING PRIVACY AND CONFIDENTIALITY
Crown Financial Group may, at its discretion, monitor and review the content
of all e-mail communications.

___
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop


RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Kaczmarek, Thaddeus
Title: RE: [Ntop] Bogus wrong netmask or bridging enabled





Sorry, this wasn't a log message but from the Network Healthness.
It has the little yellow status flag next to the hostname. 
Now since enabling sFlow I can't seem to find the same screen anymore.
The ntop daemon is running on a 10.0.X.X/24 which is also running
opennms. Ifconfig and the ntop configuration screen both display proper
netmask and ifconfig displays proper broadcast, 255.255.255.0 and
10.0.X.255 respectively. I was seeing all the local flows before, and
every host had the little flag next to it and on the right side was the
note about the wrong netmask or bridging being enabled. I disabled sFlow
and restarted ntop and no longer am seeing that message.


Could that have been due to the fact that ntop was not running long
enough.


Very impressive work, what I see so far I am very impressed with.


You guys need to get yourselves a wish list like the opennms guys have.



Ted



On Mon, 2003-11-24 at 09:22, Burton M. Strauss III wrote:
 And I'm supposed to guess at the actual log message? And the
 configuration??
 
 I'm good, but not that good...
 
 -Burton
 
 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of
 Kaczmarek, Thaddeus
 Sent: Monday, November 24, 2003 7:59 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled
 
 
 It has the correct interface information in its config.
 On he info.html is shows the Local Networks subnet mask as a /24.
 
 
 Ted
 On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote:
  ntop uses the interface information (e.g. ifconfig) to figure out the net
  mask.
 
  Beyond that, no clue since you've given no useable information - please
 see
  How To ask for help in docs/FAQ.
 
  -Burton
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Tomas
  Charvat
  Sent: Monday, November 24, 2003 6:09 AM
  To: [EMAIL PROTECTED]
  Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled
 
 
  what about -o ?
 
 
  - Original Message -
  From: Ted Kaczmarek [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Monday, November 24, 2003 12:33 PM
  Subject: [Ntop] Bogus wrong netmask or bridging enabled
 
 
   Does ntop need to be told what size each subnet is? I am seeing
   wrong network mask or bridging enabled for every machine in one
   broadcast domain that is a 24 bit 10.X.X.X.
  
   Thanks,
   Ted
 
  ___
  Ntop mailing list
  [EMAIL PROTECTED]
  http://listgateway.unipi.it/mailman/listinfo/ntop
 DISCLAIMER
 e-mail, and any attachments thereto, is intended only for use by the
 addressee(s) named herein and may contain legally privileged and/or
 confidential information. If you are not the intended recipient of this
 e-mail, you are hereby notified that any dissemination, distribution or
 copying of this e-mail, and any attachments thereto, is strictly prohibited.
 If you have received this e-mail in error, please immediately notify me and
 permanently delete the original and any copy of any e-mail and any printout
 thereof.
 E-mail transmission cannot be guaranteed to be secure or error-free. The
 sender therefore does not accept liability for any errors or omissions in
 the contents of this message which arise as a result of e-mail transmission.
 REGARDING PRIVACY AND CONFIDENTIALITY
 Crown Financial Group may, at its discretion, monitor and review the content
 of all e-mail communications.
 
 ___
 Ntop mailing list
 [EMAIL PROTECTED]
 http://listgateway.unipi.it/mailman/listinfo/ntop
DISCLAIMER
e-mail, and any attachments thereto, is intended only for use by the addressee(s) named herein and may contain legally privileged and/or confidential information. If you are not the intended recipient of this e-mail, you are hereby notified that any dissemination, distribution or copying of this e-mail, and any attachments thereto, is strictly prohibited. If you have received this e-mail in error, please immediately notify me and permanently delete the original and any copy of any e-mail and any printout thereof.

E-mail transmission cannot be guaranteed to be secure or error-free. The sender therefore does not accept liability for any errors or omissions in the contents of this message which arise as a result of e-mail transmission.

REGARDING PRIVACY AND CONFIDENTIALITY
Crown Financial Group may, at its discretion, monitor and review the content of all e-mail communications.





RE: [Ntop] Bogus wrong netmask or bridging enabled

2003-11-24 Thread Burton M. Strauss III
WRT: Flags - there's some descriptive stuff in the back traffic for the list
and in docs/FAQ:

Q. What are High/Medium/Low risk flags
A. They are set in reportUtils.c based on fairly self-obvious functions:
  Medium: hasWrongNetmask()
  High: hasDuplicatedMac()
   Often seen if you are monitoring a backbone or common network (high)
   or if you have cloned MAC addresses for, say, a home Firewall box.


WRT: WishList - very funny.   There's two of us working on ntop and we do
what we want to meet our needs.  If somebody want's something done, there's
two alternatives:

1. DIY
2. $ponsor the development work

oh, and for trivial things, #3 sometimes works:

3. Ask nicely, be willing to test it and say thank you after the fact.


-Burton


-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Kaczmarek, Thaddeus
Sent: Monday, November 24, 2003 8:47 AM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled


Sorry, this wasn't a log message but from the Network Healthness.
It has the little yellow status flag next to the hostname.
Now since enabling sFlow I can't seem to find the same screen anymore.
The ntop daemon is running on a 10.0.X.X/24 which is also running
opennms. Ifconfig and the ntop configuration screen both display proper
netmask and ifconfig displays proper broadcast, 255.255.255.0 and
10.0.X.255 respectively. I was seeing all the local flows before, and
every host had the little flag next to it and on the right side was the
note about the wrong netmask or bridging being enabled. I disabled sFlow
and restarted ntop and no longer am seeing that message.
Could that have been due to the fact that ntop was not running long
enough.
Very impressive work, what I see so far I am very impressed with.
You guys need to get yourselves a wish list like the opennms guys have.


Ted


On Mon, 2003-11-24 at 09:22, Burton M. Strauss III wrote:
 And I'm supposed to guess at the actual log message?  And the
 configuration??

 I'm good, but not that good...

 -Burton

 -Original Message-
 From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
 Kaczmarek, Thaddeus
 Sent: Monday, November 24, 2003 7:59 AM
 To: [EMAIL PROTECTED]
 Subject: RE: [Ntop] Bogus wrong netmask or bridging enabled


 It has the correct interface information in its config.
 On he info.html is shows the Local Networks subnet mask as a /24.


 Ted
 On Mon, 2003-11-24 at 08:14, Burton M. Strauss III wrote:
  ntop uses the interface information (e.g. ifconfig) to figure out the
net
  mask.
 
  Beyond that, no clue since you've given no useable information - please
 see
  How To ask for help in docs/FAQ.
 
  -Burton
 
 
  -Original Message-
  From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Tomas
  Charvat
  Sent: Monday, November 24, 2003 6:09 AM
  To: [EMAIL PROTECTED]
  Subject: Re: [Ntop] Bogus wrong netmask or bridging enabled
 
 
  what about -o ?
 
 
  - Original Message -
  From: Ted Kaczmarek [EMAIL PROTECTED]
  To: [EMAIL PROTECTED]
  Sent: Monday, November 24, 2003 12:33 PM
  Subject: [Ntop] Bogus wrong netmask or bridging enabled
 
 
   Does ntop need to be told what size each subnet is? I am seeing
   wrong network mask or bridging enabled for every machine in one
   broadcast domain that is a 24 bit 10.X.X.X.
  
   Thanks,
   Ted
 
  ___
  Ntop mailing list
  [EMAIL PROTECTED]
  http://listgateway.unipi.it/mailman/listinfo/ntop
 DISCLAIMER
 e-mail, and any attachments thereto, is intended only for use by the
 addressee(s) named herein and may contain legally privileged and/or
 confidential information. If you are not the intended recipient of this
 e-mail, you are hereby notified that any dissemination, distribution or
 copying of this e-mail, and any attachments thereto, is strictly
prohibited.
 If you have received this e-mail in error, please immediately notify me
and
 permanently delete the original and any copy of any e-mail and any
printout
 thereof.
 E-mail transmission cannot be guaranteed to be secure or error-free. The
 sender therefore does not accept liability for any errors or omissions in
 the contents of this message which arise as a result of e-mail
transmission.
 REGARDING PRIVACY AND CONFIDENTIALITY
 Crown Financial Group may, at its discretion, monitor and review the
content
 of all e-mail communications.

 ___
 Ntop mailing list
 [EMAIL PROTECTED]
 http://listgateway.unipi.it/mailman/listinfo/ntop
DISCLAIMER
e-mail, and any attachments thereto, is intended only for use by the
addressee(s) named herein and may contain legally privileged and/or
confidential information. If you are not the intended recipient of this
e-mail, you are hereby notified that any dissemination, distribution or
copying of this e-mail, and any attachments thereto, is strictly prohibited.
If you have received this e-mail in error, please