The patch worked!
It turned this (invalid XML):
<hostSymIpAddress>Bridge Sp. Tree/OSI Route <IMG SRC="/card.gif"
ALT="Network Int</hostSymIpAddress>
into this (valid XML):
<hostSymIpAddress>Bridge Sp. Tree/OSI Route </hostSymIpAddress>
Which is EXACTLY what the problem was.
If you don't like the name, "Bridge Sp. Tree/OSI Route", that's a different
story.
That comes straight out of vendor.c:
static VendorInfo specialMacInfo[] = {
{ 0x01000C, "Cisco CDPD/VTP" },
{ 0x010010, "Hughes Lan" },
{ 0x01001D, "Cabletron" },
{ 0x01003C, "Auspex Systems" },
{ 0x01005E, "DoD Internet Multicast" },
{ 0x010081, "Synoptics" },
{ 0x012025, "Control Tech. Inc." },
{ 0x018024, "Kalpana Etherswitch" },
{ 0x0180C2, "Bridge Sp. Tree/OSI Route" },
{ 0x01DD00, "UngermannBass" },
{ 0x01DD01, "UngermannBass" },
{ 0x030000, "NetBios" },
{ 0x030040, "NetBios" },
{ 0x090002, "Vitalink" },
{ 0x090007, "AppleTalk" },
{ 0x090009, "HP Probe" },
{ 0x09000D, "ICL" },
{ 0x01000C, "Cisco CDPD/VTP" },
{ 0x010010, "Hughes Lan" },
{ 0x01001D, "Cabletron" },
{ 0x01003C, "Auspex Systems" },
{ 0x01005E, "DoD Internet Multicast" },
{ 0x010081, "Synoptics" },
{ 0x012025, "Control Tech. Inc." },
{ 0x018024, "Kalpana Etherswitch" },
{ 0x0180C2, "Bridge Sp. Tree/OSI Route" },
{ 0x01DD00, "UngermannBass" },
{ 0x01DD01, "UngermannBass" },
{ 0x030000, "NetBios" },
{ 0x030040, "NetBios" },
{ 0x090002, "Vitalink" },
{ 0x090007, "AppleTalk" },
{ 0x090009, "HP Probe" },
{ 0x09000D, "ICL" },
{ 0x09001E, "Apollo" },
{ 0x090026, "Vitalink" },
{ 0x09002B, "DEC" },
{ 0x090039, "Spider Systems" },
{ 0x09004C, "BICC" },
{ 0x09004E, "Novell IPX" },
{ 0x090056, "Stanford" },
{ 0x09006A, "TOP NetBIOS" },
{ 0x090077, "Retix" },
{ 0x09007C, "Vitalink" },
{ 0x090087, "Xyplex" },
{ 0x0D1E15, "HP" },
{ 0x333300, "IPv6" },
{ 0xAB0000, "DEC MOP/DECNET" },
{ 0xAB0003, "DEC LAT" },
{ 0xAB0004, "DEC VAX" },
{ 0xCF0000, "Ethernet CTP" },
{ 0xFFFF00, "Lantastic" },
{ 0xFFFF01, "Lantastic" },
{ 0xFFFFFF, "Ethernet Broadcast" },
{ 0x0, NULL }
};
And relates to the "special" or "artificial" MAC addresses. For example,
MAC addresses beginning { 01:80:C2 are reserved for Spanning tree bridging,
see the IEEE 802.1D standard at
http://standards.ieee.org/getieee802/download/802.1D-1998.pdf (table 7-9,
page 70) hence the name "Bridge Sp. Tree/OSI Route"
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf
Of Ricardo Jorge
Sent: Wednesday, July 03, 2002 4:18 PM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop-dev] XML dump files gets truncated from time to time
Em Ter, 2002-07-02 �s 17:23, Burton M. Strauss III escreveu:
Dear Burton !
I've applied the patch you sent me, but it doesn't fix / hurt my
system.
The problem is better explained here, where you can see that, when I
mean "truncated" the XML does not show the <hostNumIpAddress> and that
particular index starts with <hostSymIpAddress>, with an strange value.
Besides 3 indexes in the this XML file, all other index are correct.
This is a live system with a heavy traffic and about 80 index (hosts).
When this happens, if you try to get detailed info on this entry, even
the NTOP Web interface shows "truncated" info as you can see in the
attached PNG file, that is a screen shot of my system.
I hope this helps you better understand what I mean and if you want me
to make any aditional test, please, let me know how.
Thank you for your attention and this great software. Regards,
Ricardo Jorge
============================================================================
========================
<host-information>
<index>18</index>
<hostSymIpAddress>Bridge Sp. Tree/OSI Route </hostSymIpAddress>
<firstSeen>1024690920</firstSeen>
<lastSeen>1025729709</lastSeen>
<minTTL>0</minTTL>
<maxTTL>0</maxTTL>
<nodeType>0</nodeType>
<atNetwork>0</atNetwork>
<atNode>0</atNode>
<pktSent>0</pktSent>
<pktRcvd>19836</pktRcvd>
<pktDuplicatedAckSent>0</pktDuplicatedAckSent>
<pktDuplicatedAckRcvd>0</pktDuplicatedAckRcvd>
<pktBroadcastSent>0</pktBroadcastSent>
<bytesMulticastSent>0</bytesMulticastSent>
<pktMulticastSent>0</pktMulticastSent>
<bytesMulticastRcvd>0</bytesMulticastRcvd>
<pktMulticastRcvd>0</pktMulticastRcvd>
<bytesUnicastSent>0</bytesUnicastSent>
<pktUnicastSent>0</pktUnicastSent>
<bytesUnicastRcvd>0</bytesUnicastRcvd>
<pktUnicastRcvd>19836</pktUnicastRcvd>
<bytesSent>0</bytesSent>
<bytesSentLoc>0</bytesSentLoc>
<bytesSentRem>0</bytesSentRem>
<bytesRcvd>1269504</bytesRcvd>
<bytesRcvdLoc>0</bytesRcvdLoc>
<bytesRcvdFromRem>0</bytesRcvdFromRem>
<actualRcvdThpt>26.67</actualRcvdThpt>
<lastHourRcvdThpt>51.47</lastHourRcvdThpt>
<averageRcvdThpt>1619.37</averageRcvdThpt>
<peakRcvdThpt>72.39</peakRcvdThpt>
<actualSentThpt>0.00</actualSentThpt>
<lastHourSentThpt>0.00</lastHourSentThpt>
<averageSentThpt>0.00</averageSentThpt>
<peakSentThpt>0.00</peakSentThpt>
<actualRcvdPktThpt>0.42</actualRcvdPktThpt>
<averageRcvdPktThpt>25.30</averageRcvdPktThpt>
<peakRcvdPktThpt>1.13</peakRcvdPktThpt>
<actualSentPktThpt>0.00</actualSentPktThpt>
<averageSentPktThpt>0.00</averageSentPktThpt>
<ipBytesSent>0</ipBytesSent>
<ipBytesRcvd>0</ipBytesRcvd>
<tcpBytesSent>0</tcpBytesSent>
<tcpBytesRcvd>0</tcpBytesRcvd>
<udpBytesSent>0</udpBytesSent>
<udpBytesRcvd>0</udpBytesRcvd>
<icmpSent>0</icmpSent>
<icmpRcvd>0</icmpRcvd>
<tcpSentRem>0</tcpSentRem>
<udpSentLoc>0</udpSentLoc>
<udpSentRem>0</udpSentRem>
<ospfSent>0</ospfSent>
<igmpSent>0</igmpSent>
<tcpRcvdLoc>0</tcpRcvdLoc>
<tcpRcvdFromRem>0</tcpRcvdFromRem>
<udpRcvdLoc>0</udpRcvdLoc>
<udpRcvdFromRem>0</udpRcvdFromRem>
<ospfRcvd>0</ospfRcvd>
<igmpRcvd>0</igmpRcvd>
<tcpFragmentsSent>0</tcpFragmentsSent>
<tcpFragmentsRcvd>0</tcpFragmentsRcvd>
<udpFragmentsSent>0</udpFragmentsSent>
<udpFragmentsRcvd>0</udpFragmentsRcvd>
<icmpFragmentsSent>0</icmpFragmentsSent>
<icmpFragmentsRcvd>0</icmpFragmentsRcvd>
<stpSent>0</stpSent>
<stpRcvd>1269504</stpRcvd>
<ipxSent>0</ipxSent>
<ipxRcvd>0</ipxRcvd>
<osiSent>0</osiSent>
<osiRcvd>0</osiRcvd>
<dlcSent>0</dlcSent>
<dlcRcvd>0</dlcRcvd>
<arp_rarpSent>0</arp_rarpSent>
<arp_rarpRcvd>0</arp_rarpRcvd>
<arpReqPktsSent>0</arpReqPktsSent>
<arpReplyPktsSent>0</arpReplyPktsSent>
<arpReplyPktsRcvd>0</arpReplyPktsRcvd>
<decnetSent>0</decnetSent>
<decnetRcvd>0</decnetRcvd>
<appletalkSent>0</appletalkSent>
<appletalkRcvd>0</appletalkRcvd>
<netbiosSent>0</netbiosSent>
<netbiosRcvd>0</netbiosRcvd>
<qnxSent>0</qnxSent>
<qnxRcvd>0</qnxRcvd>
<otherSent>0</otherSent>
<otherRcvd>0</otherRcvd>
<IP>
<FTP>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</FTP>
<HTTP>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</HTTP>
<DNS>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</DNS>
<Telnet>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</Telnet>
<NBios-IP>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</NBios-IP>
<Mail>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</Mail>
<SNMP>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</SNMP>
<NEWS>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</NEWS>
<NFS>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</NFS>
<X11>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</X11>
<SSH>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</SSH>
<WBTS>
<sentLoc>0</sentLoc>
<sentRem>0</sentRem>
<rcvdLoc>0</rcvdLoc>
<rcvdFromRem>0</rcvdFromRem>
</WBTS>
</IP>
<ethAddressString>01:80:C2:00:00:00</ethAddressString>
</host-information>
--
Tridata Tecnologia Ltda.
Rua Machado Bittencourt, 190 Cj. 508
Vila Clementino - Sao Paulo - SP - 04044-000
Voice (55)-11-5575-0125
FAX (55)-11-5571-0893
_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://lists.ntop.org/mailman/listinfo/ntop-dev
