n t o p v e r s i o n '2.2.98' p r o b l e m r e p o r t
From: S Hopcroft
EMail: [EMAIL PROTECTED]
Date: 2004-01-05 00:07:16 GMT
Problem Report Id: PR_FBQ4QU
----------------------------------------------------------------------------
Summary
Can't access any ntop web pages via a forwarded SSH connection (ie over
the TCP connection tunnelled through the SSH link to the ntop host using
<from proxy> ssh -g -L8080:tssyd:3000 [EMAIL PROTECTED] The browser tne
connects to the proxy host on port 8080. This is useful if access
control prevents direct access to ntop host; it used to work with ntop
2.2).
OS(uname): sysname(FreeBSD) release(4.9-RELEASE-p1) version(FreeBSD
4.9-RELEASE-p1 #12: Tue) machine(i386)
ntop from: CVS 2-Jan-2004 (rpm, source, ports, etc.)
Hardware: CPU: i386/PII 233 MHz (i86, SPARC, etc.)
# Processors: 1
Memory: 64 MB
Packets
Received: 12736
Processed: 12736 (immediately)
Queued: 0
Lost: 0 (queue full)
Queue: Current: 0 Maximum: 0
Network:
Merged packet counts:
Received: 12736
Ethernet: 12736
Broadcast: 2
Multicast: 122
IP: 12568
Network Interface 0 fxp0
Received (pcap): 35651
Dropped (pcap): 0
Mfg: Intel Model: Intel 82559ER Pro/100 Ethernet
NIC Speed: 10 Bus: PCI
Location: LAN via slow fT1 WAN
Bandwidth: fT1 (128 kbps)
# Hosts (machines): <= 50 (local)
----------------------------------------------------------------------------
Log extract
Jan 5 10:28:38 tssyd ntop[72458]: **ERROR** URL security:
'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230)
Jan 5 10:29:19 tssyd ntop[72458]: **ERROR** Rejected request from
address 192.168.102.230 (it previously sent ntop a bad request)
Jan 5 10:30:05 tssyd ntop[72458]: **ERROR** Rejected request from
address 192.168.102.230 (it previously sent ntop a bad request)
Jan 5 10:36:21 tssyd ntop[72458]: clearing lockout for address
192.168.102.230
Jan 5 10:36:21 tssyd ntop[72458]: **ERROR** URL security:
'http://tsitc/netsaint/' rejected (code=2)(client=192.168.102.230)
Jan 5 10:36:26 tssyd ntop[72458]: **ERROR** Rejected request from
address 192.168.102.230 (it previously sent ntop a bad request)
Jan 5 10:48:47 tssyd ntop[72739]: **ERROR** URL security:
'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230)
Jan 5 10:48:50 tssyd ntop[72739]: **ERROR** Rejected request from
address 192.168.102.230 (it previously sent ntop a bad request)
Jan 5 10:49:45 tssyd ntop[72739]: **ERROR** Rejected request from
address 192.168.102.230 (it previously sent ntop a bad request)
Jan 5 10:55:23 tssyd ntop[72739]: clearing lockout for address
192.168.102.230
Jan 5 10:55:23 tssyd ntop[72739]: **ERROR** URL security:
'http://tsitc/netsaint/' rejected (code=2)(client=192.168.102.230)
Jan 5 11:10:30 tssyd ntop[72739]: clearing lockout for address
192.168.102.230
Jan 5 11:10:38 tssyd ntop[72739]: **ERROR** URL security:
'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230)
----------------------------------------------------------------------------
Problem Description
Attempts to access any Ntop web page over a TCP connection forwarded
over an SSH tunnel to the ntop host fail with
1 No data in document error messages from browser
2 URL security error messages logged by ntop.
Notes
1 Appears to be browser related since a manual GET / HTTP/1.0 over the
tunnel succeeds
2 enabling -q and stopping ntop after a few browse attempts only
produces an empty pcap file in the -O path.
----------------------------------------------------------------------------
ntop Configuration
ntop version.....2.2.98
Configured on.....Jan 3 2004 16:02:35
Built on.....Jan 3 2004 16:05:29
OS.....i386-unknown-freebsd4.9
ntop Process Id.....72739
http Process Id.....72739
Command line
Started as..../usr/local/ntop/bin/ntop --skip-version-check
--disable-mutexextrainfo -o -c -u nobody -d -P /var/log/ntop -w 3000 -i
fxp0 -p
HTTP=http|https,DNS=domain,Ntop=3000,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn,Mail=lotusnote|pop2|pop3|kpop|smtp|imap,SNMP=snmp|snmptrap,Telnet=telnet,Cache=3128,BEA=7000-7010,SSH=ssh,SAP=3202,PSCAM=4754,Virus=2967,LPD=515,PCAny=5631|5632,FTP=ftp|49152-65536
-B ether host 00:60:47:1e:bb:aa -q -O /var/log/ntop
Resolved to..../usr/local/ntop/bin/ntop
--skip-version-check
--disable-mutexextrainfo
-o
-c
-u
nobody
-d
-P
/var/log/ntop
-w
3000
-i
fxp0
-p
HTTP=http|https,DNS=domain,Ntop=3000,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn,Mail=lotusnote|pop2|pop3|kpop|smtp|imap,SNMP=snmp|snmptrap,Telnet=telnet,Cache=3128,BEA=7000-7010,SSH=ssh,SAP=3202,PSCAM=4754,Virus=2967,LPD=515,PCAny=5631|5632,FTP=ftp|49152-65536
-B
ether host 00:60:47:1e:bb:aa
-q
-O
/var/log/ntop
Command line parameters are:
-a | --access-log-path.....(default) (nil)
-b | --disable-decoders.....(default) No
-c | --sticky-hosts.....Yes
-d | --daemon.....Yes
-e | --max-table-rows.....(default) 128
-f | --traffic-dump-file.....(default) (nil)
-g | --track-local-hosts.....(default) Track all hosts
-o | --no-mac.....Don't trust MAC Addresses
-i | --interface (effective).....fxp0
-j | --create-other-packets.....(default) Disabled
-k | --filter-expression-in-extra-frame.....(default) No
-l | --pcap-log.....(default) (nil)
-m | --local-subnets (effective).....
-n | --numeric-ip-addresses.....(default) No
-p | --protocols.....HTTP
-q | --create-suspicious-packets.....Enabled
-r | --refresh-time.....(default) 120
-s | --no-promiscuous.....(default) No
-t | --trace-level.....(default) 3
-u | --user.....nobody (uid=65534, gid=65534)
-w | --http-server.....(default) Active, all interfaces, port 3000
-z | --disable-sessions.....(default) No
-B | --filter-expression.....ether host 00:60:47:1e:bb:aa
-D | --domain.....aipo.gov.au
-F | --flow-spec.....(default) none
-K | --enable-debug.....(default) No
-L | --use-syslog.....daemon
-M | --no-interface-merge (effective).....(default) (Merging
Interfaces) Yes
-N | --wwn-map.....(default) (nil)
-O | --pcap-file-path...../var/log/ntop
-P | --db-file-path...../var/log/ntop
-Q | --spool-file-path...../var/log/ntop
-U | --mapper.....(default) (nil)
-W | --https-server.....Uninitialized
--ssl-watchdog.....(default) No
--p3p-cp.....(default) none
--p3p-uri.....(default) none
--disable-schedYield.....(default) No
--disable-stopcap.....(default) No
--log-extra.....(default) 0
--disable-instantsessionpurge.....(default) No
--disable-mutexextrainfo.....Yes
--fc-only.....(default) No
--no-fc.....(default) No
--no-invalid-lun.....(default) No
Note: (effective) means that this is the value after ntop has
processed the parameter.
(default) means this is the default value, usually (but not always)
set by a #define in globals-defines.h.
Run time/Internal
Web server URL.....http://any:3000
SSL Web server (https://).....Not Active
GDBM version.....This is GDBM version 1.8.0, as of May 19, 1999.
OpenSSL Version.....OpenSSL 0.9.7c 30 Sep 2003
zlib version.....1.1.4
Protocol Decoders.....Enabled
Fragment Handling.....Enabled
Tracking only local hosts.....No
# IP Protocols Being Monitored.....16
# Protocol slots.....3950
# IP Ports Being Monitored.....16418
# IP Ports slots.....32836
# Handled SIGPIPE Errors.....0
# Handled HTTP Requests.....39
WebServer Request Queue.....10
Devices (Network Interfaces).....1
Domain name (short).....au
IP to country flag table (entries).....49056
Total Hash Collisions (Vendor/Special) (lookup).....0
Local Networks.....192.168.102.0/255.255.255.0 [device fxp0]
Memory Usage
IPX/SAP Hash Size (bytes).....1897
IP to country flag table (bytes).....1496064 (1.4 MB)
Bytes per entry.....30.5
IP to AS (Autonomous System) number table (bytes).....0 (0.0 MB)
Host Memory Cache
Limit.....#define MAX_HOSTS_CACHE_LEN 512
Current Size.....0
Maximum Size.....0
# Entries Reused.....0
MAC/IPX Hash tables
IPX/SAP Hash Size (entries).....179
IPX/SAP Hash Collisions (load).....0
IPX/SAP Hash Collisions (use).....0
Packets
Received.....12736
Processed immediately.....12736
Queued.....0
Current queue.....0
Maximum queue.....0
Host/Session counts - global
Purged hosts.....0
Maximum hosts to purge per cycle.....512
DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512
Terminated Sessions.....730
Host/Session counts - Device 0 (fxp0)
Hash Bucket Size.....3.7 KB
Actual Hash Size.....16384
Stored hosts.....40
Bucket List Length.....[min 1][max 1][avg 1.0]
Max host lookup.....0
Session Bucket Size.....260
Sessions.....285
Max Num. Sessions.....286
Address Resolution
DNS sniffed:
DNS Packets sniffed.....262
less 'requests'.....131
less 'failed'.....17
less 'reverse dns' (in-addr.arpa).....17
DNS Packets processed.....97
Stored in cache (includes aliases).....160
IP to name - ipaddr2str():
Total calls.....39
....OK.....11
....Total not found.....28
........Not found in cache.....1
........Too old in cache.....26
Queued - dequeueAddress():
Total Queued.....28
Not queued (duplicate).....0
Maximum Queued.....3
Current Queue.....0
Resolved - resolveAddress():
Addresses to resolve.....28
....less 'Error: No cache database'.....0
....less 'Found in ntop cache'.....0
Gives: # gethost (DNS lookup) calls.....28
DNS lookup calls:
DNS resolution attempts.....28
....Success: Resolved.....13
....Failed.....15
........HOST_NOT_FOUND.....15
........NO_DATA.....0
........NO_RECOVERY.....0
........TRY_AGAIN (don't store).....0
........Other error (don't store).....0
DNS lookups stored in cache.....28
Host addresses kept numeric.....15
Vendor Lookup Table
Input lines read.....0
Records added total.....0
.....includes special records.....0
getVendorInfo() calls.....0
getSpecialVendorInfo() calls.....19
Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
Found 24bit (xx:xx:xx) match.....1
Found multicast bit set.....0
Found LAA (Locally assigned address) bit set.....0
Thread counts
Active.....6
Dequeue.....1
Children (active).....12
IP Address reject list
Address ... Count ... Last Bad Access ... Lockout Expires
192.168.102.230... 1... Mon Jan 5 10:55:23 2004... Mon Jan 5
11:00:23 2004
Reject duration (seconds).....300
It is now.....Mon Jan 5 11:07:16 2004
Directory (search) order
Data Files......
/usr/local/ntop-2.2.98/share/ntop
Config Files......
/usr/local/ntop-2.2.98/etc/ntop
/etc
Plugins....../plugins
/usr/local/ntop-2.2.98/lib/ntop/plugins
Compile Time: ./configure
./configure parameters.....--disable-ssl --prefix=/usr/local/ntop-2.2.98
--with-gd-include=/usr/local/include/gd
Built on (Host).....i386-unknown-freebsd4.9
Built for(Target).....i386-unknown-freebsd4.9
compiler (cflags).....gcc -g -O2 -I/usr/local/include -Wshadow
-Wpointer-arith -Wmissing-prototypes -Wmissing-declarations
-Wnested-externs -fPIC -DHAVE_CONFIG_H
include path.....-I/usr/local/include/gd
-I/usr/home/anwsmh/build/ntop_cvs_2_Jan_2004/ntop/myrrd
system libraries.....-L/usr/local/lib
-L/usr/home/anwsmh/build/ntop_cvs_2_Jan_2004/ntop/myrrd -lc_r -lc
-lcrypt -lssl -lcrypto -lpcap -lgdbm -lgd -lpng -lz -lmyrrd
install path...../usr/local/ntop-2.2.98
GNU C (gcc) version.....2.95.4 20020320 [FreeBSD] (2.95.0)
uname data.....sysname(FreeBSD) release(4.9-RELEASE-p1) version(FreeBSD
4.9-RELEASE-p1 #12: Tue) machine(i386)
Internationalization (i18n)
i18n enabled.....No
Compile Time: Debug settings in globals-defines.h
DEBUG.....no
ADDRESS_DEBUG.....no
DNS_DEBUG.....no
DNS_SNIFF_DEBUG.....no
FTP_DEBUG.....no
GDBM_DEBUG.....no
HASH_DEBUG.....no
HOST_FREE_DEBUG.....no
HTTP_DEBUG.....no
IDLE_PURGE_DEBUG.....no
INITWEB_DEBUG.....no
MEMORY_DEBUG.....no
NETFLOW_DEBUG.....no
SEMAPHORE_DEBUG.....no
SESSION_TRACE_DEBUG.....no
SSLWATCHDOG_DEBUG.....no
STORAGE_DEBUG.....no
UNKNOWN_PACKET_DEBUG.....no
Compile Time: globals-define.h
PARM_PRINT_ALL_SESSIONS.....no
PARM_PRINT_RETRANSMISSION_DATA.....no
PARM_FORK_CHILD_PROCESS.....yes (normal)
CGI Scripts.....globals-defines.h: #define PARM_USE_CGI
Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */
Buggy gethostbyaddr() - use alternate
implementation.....globals-defines.h: /* #define PARM_USE_HOST */
MAKE_ASYNC_ADDRESS_RESOLUTION.....yes
MAKE_WITH_SSLWATCHDOG.....yes
MAKE_WITH_SSLWATCHDOG_RUNTIME (derived).....yes
Bad IP Address table size.....globals-defines.h: #define
MAX_NUM_BAD_IP_ADDRESSES 3
Minimum refresh interval (seconds).....#define
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15
Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64
Maximum # of routers (Local Subnet Routers report).....#define
MAX_NUM_ROUTERS 512
Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32
Maximum # of virtual network interfaces (per device).....#define
MAX_NUM_DEVICES_VIRTUAL 7
Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS
1024
Allocated # of passive FTP sessions.....#define
MAX_PASSIVE_FTP_SESSION_TRACKER 384
Inactive passive FTP session timeout (seconds).....#define
PARM_PASSIVE_SESSION_MINIMUM_IDLE 60
Compile Time: Hash Table Sizes
Size.....#define CONST_HASH_INITIAL_SIZE 16384
Compile Time: globals-define.h
Chart Format.....globals-report.h: #define CHART_FORMAT ".png"
Compile Time: config.h
CFG_ETHER_HEADER_HAS_EA.....no
CFG_MULTITHREADED.....yes
HAVE_ALARM.....yes
HAVE_ALLOCA.....yes
HAVE_ALLOCA_H.....no
HAVE_ARPA_NAMESER_H.....yes
HAVE_BACKTRACE.....no
HAVE_BZERO.....yes
HAVE_CTIME_R.....yes
HAVE_DLFCN_H.....yes
HAVE_DL_H.....no
HAVE_DOPRNT.....no
HAVE_ENDPWENT.....yes
HAVE_ERRNO_H.....yes
HAVE_FACILITYNAMES.....yes
HAVE_FCNTL_H.....yes
HAVE_FORK.....yes
HAVE_GDBM_H.....yes
HAVE_GD_H.....yes
HAVE_GDOME_H.....no
HAVE_GETHOSTBYADDR.....yes
HAVE_GETHOSTBYADDR_R.....no
HAVE_GETHOSTBYNAME.....yes
HAVE_GETHOSTNAME.....yes
HAVE_GETIPNODEBYADDR.....yes
HAVE_GETPASS.....yes
HAVE_GETTIMEOFDAY.....yes
HAVE_GLIBCONFIG_H.....no
HAVE_GLIB_H.....no
HAVE_IF_H.....no
HAVE_IN6_ADDR.....yes
HAVE_INT16_T.....yes
HAVE_INT32_T.....yes
HAVE_INT64_T.....yes
HAVE_INT8_T.....yes
HAVE_INTTYPES_H.....yes
HAVE_LANGINFO_H.....yes
HAVE_LIBC.....yes
HAVE_LIBCRYPT.....yes
HAVE_LIBCRYPTO.....yes
HAVE_LIBDL.....no
HAVE_LIBDLD.....no
HAVE_LIBGD.....yes
HAVE_LIBGDBM.....yes
HAVE_LIBGDOME.....no
HAVE_LIBGLIB.....no
HAVE_LIBM.....no
HAVE_LIBNSL.....no
HAVE_LIBPCAP.....yes
HAVE_LIBPNG.....yes
HAVE_LIBPOSIX4.....no
HAVE_LIBPTHREAD.....no
HAVE_LIBPTHREADS.....no
HAVE_LIBRESOLV.....no
HAVE_LIBRT.....no
HAVE_LIBSOCKET.....no
HAVE_LIBSSL.....yes
HAVE_LIBWRAP.....no
HAVE_LIBXML2.....no
HAVE_LIBXNET.....no
HAVE_LIBZ.....yes
HAVE_LIMITS_H.....yes
HAVE_LINUX_IF_PPPOX_H.....no
HAVE_LOCALE_H.....yes
HAVE_LOCALTIME_R.....yes
HAVE_LONG_DOUBLE.....no
HAVE_MATH_H.....yes
HAVE_MEMCHR.....yes
HAVE_MEMORY_H.....yes
HAVE_MEMSET.....yes
HAVE_NDIR_H.....no
HAVE_NETDB_H.....yes
HAVE_OPENSSL.....yes
HAVE_OPENSSL_CRYPTO_H.....yes
HAVE_OPENSSL_ERR_H.....yes
HAVE_OPENSSL_PEM_H.....yes
HAVE_OPENSSL_RSA_H.....yes
HAVE_OPENSSL_SSL_H.....yes
HAVE_OPENSSL_X509_H.....yes
HAVE_PCAP_H.....yes
HAVE_PCAP_OPEN_DEAD.....yes
HAVE_PNG_H.....yes
HAVE_PTHREAD_ATFORK.....no
HAVE_PTHREAD_H.....yes
HAVE_PUTENV.....yes
HAVE_PWD_H.....yes
HAVE_RE_COMP.....no
HAVE_REGCOMP.....yes
HAVE_REGEX.....no
HAVE_SCHED_H.....yes
HAVE_SCHED_YIELD.....yes
HAVE_SECURITY_PAM_APPL_H.....yes
HAVE_SELECT.....yes
HAVE_SEMAPHORE_H.....yes
HAVE_SETJMP_H.....yes
HAVE_SHADOW_H.....no
HAVE_SIGNAL_H.....yes
HAVE_SNPRINTF.....yes
HAVE_SOCKET.....yes
HAVE_SQRT.....yes
HAVE_STDARG_H.....yes
HAVE_STDDEF_H.....yes
HAVE_STDIO_H.....yes
HAVE_STDLIB_H.....yes
HAVE_STRCASECMP.....yes
HAVE_STRCHR.....yes
HAVE_STRCSPN.....yes
HAVE_STRDUP.....yes
HAVE_STRERROR.....yes
HAVE_STRFTIME.....yes
HAVE_STRING_H.....yes
HAVE_STRINGS_H.....yes
HAVE_STRNCASECMP.....yes
HAVE_STRPBRK.....yes
HAVE_STRRCHR.....yes
HAVE_STRSPN.....yes
HAVE_STRSTR.....yes
HAVE_STRTOK_R.....yes
HAVE_STRTOUL.....yes
HAVE_SYS_DIR_H.....no
HAVE_SYS_IOCTL_H.....yes
HAVE_SYS_LDR_H.....no
HAVE_SYS_NDIR_H.....no
HAVE_SYS_RESOURCE_H.....yes
HAVE_SYS_SCHED_H.....no
HAVE_SYS_SOCKIO_H.....yes
HAVE_SYS_TIME_H.....yes
HAVE_SYS_TYPES_H.....yes
HAVE_SYS_UN_H.....yes
HAVE_TCPD_H.....yes
HAVE_TM_ZONE.....yes
HAVE_TZNAME.....no
HAVE_U_INT16_T.....yes
HAVE_U_INT32_T.....yes
HAVE_U_INT64_T.....yes
HAVE_UINT64_T.....yes
HAVE_U_INT8_T.....yes
HAVE_UNAME.....yes
HAVE_UNISTD_H.....yes
HAVE_VFORK.....yes
HAVE_VFORK_H.....no
HAVE_VPRINTF.....yes
HAVE_WORKING_FORK.....yes
HAVE_WORKING_VFORK.....yes
HAVE_ZLIB_H.....yes
MAKE_WITH_I18N.....no
MAKE_WITH_SSLV3_SUPPORT.....no
MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no
MAKE_WITH_XMLDUMP.....no
MAKE_WITH_ZLIB.....yes
__PROTOTYPES.....yes
PROTOTYPES.....yes
SETVBUF_REVERSED.....no
TIME_WITH_SYS_TIME.....yes
TM_IN_SYS_TIME.....no
CFG_CONFIGFILE_DIR - config file
directory...../usr/local/ntop-2.2.98/etc/ntop
CFG_DATAFILE_DIR - data file
directory...../usr/local/ntop-2.2.98/share/ntop
CFG_DBFILE_DIR - database file
directory...../usr/local/ntop-2.2.98/var/ntop
CFG_PLUGIN_DIR - plugin file
directory...../usr/local/ntop-2.2.98/lib/ntop/plugins
CFG_RUN_DIR - run file directory...../usr/local/ntop-2.2.98/var/ntop
CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes
CFG_xxxxxx_ENDIAN (Hardware Endian).....little
HAVE_FILEDESCRIPTORBUG.....yes
Compile Time: globals-defines.h
EMSGSIZE.....40
ETHERMTU.....1500
LEN_CMDLINE_BUFFER.....4096
LEN_FGETS_BUFFER.....512
LEN_GENERAL_WORK_BUFFER.....1024
LEN_MEDIUM_WORK_BUFFER.....128
LEN_SMALL_WORK_BUFFER.....24
LEN_TIME_STAMP_BUFFER.....2
MAKE_NTOP_PACKETSZ_DECLARATIONS.....no
MAKE_RMON_SUPPORT.....yes
MAKE_WITH_FORK_COPYONWRITE.....no
MAKE_WITH_HTTPSIGTRAP.....no
MAKE_WITH_NETFLOWSIGTRAP.....no
MAKE_WITH_RRDSIGTRAP.....no
MAKE_WITH_SCHED_YIELD.....yes
MAKE_WITH_SEMAPHORES.....yes
MAKE_WITH_SSLWATCHDOG.....yes
MAKE_WITH_SSLWATCHDOG_RUNTIME.....yes
MAKE_WITH_SYSLOG.....yes
MAX_ADDRESSES.....35
MAX_ALIASES.....35
MAX_ASSIGNED_IP_PORTS.....1024
MAXCDNAME.....255
MAX_DEVICE_NAME_LEN.....64
MAXDNAME.....1025
MAX_HASHDUMP_ENTRY.....65535
MAXHOSTNAMELEN.....256
MAX_HOSTS_CACHE_LEN.....512
MAX_IP_PORT.....65534
MAXLABEL.....63
MAX_LANGUAGES_REQUESTED.....4
MAX_LANGUAGES_SUPPORTED.....8
MAX_LASTSEEN_TABLE_SIZE.....4096
MAX_LEN_VENDOR_NAME.....64
MAX_NFS_NAME_HASH.....12288
MAX_NODE_TYPES.....8
MAX_NUM_BAD_IP_ADDRESSES.....3
MAX_NUM_CONTACTED_PEERS.....8
MAX_NUM_DEQUEUE_THREADS.....yes
MAX_NUM_DEVICES.....32
MAX_NUM_DHCP_MSG.....8
MAX_NUM_FIN.....4
MAX_NUM_IGNOREDFLOWS.....32
MAX_NUM_NETWORKS.....32
MAX_NUM_PROBES.....16
MAX_NUM_PROTOS.....64
MAX_NUM_PROTOS_SCREENS.....5
MAX_NUM_PURGED_SESSIONS.....512
MAX_NUM_PWFILE_ENTRIES.....32
MAX_NUM_ROUTERS.....512
MAX_NUM_STORED_FLAGS.....4
MAX_NUM_UNKNOWN_PROTOS.....5
MAX_PASSIVE_FTP_SESSION_TRACKER.....384
MAX_PER_DEVICE_HASH_LIST.....65535
MAX_SESSIONS_CACHE_LEN.....512
MAX_SSL_CONNECTIONS.....32
NAME_MAX.....255
NETDB_SUCCESS.....0
NS_CMPRSFLGS.....192
NS_MAXCDNAME.....255
PACKETSZ.....512
PARM_ENABLE_EXPERIMENTAL.....no
PARM_FORK_CHILD_PROCESS.....yes
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
PARM_SESSION_PURGE_MINIMUM_IDLE.....600
PARM_SHOW_NTOP_HEARTBEAT.....no
PARM_SSLWATCHDOG_WAITWOKE_LIMIT.....5
PARM_USE_CGI.....yes
PARM_USE_COLOR.....no
PARM_USE_HOST.....no
PARM_USE_MACHASH_INVERT.....yes
PARM_USE_SESSIONS_CACHE.....no
PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
THREAD_MODE.....MT (SSL)
PLUGINS:
RRD:
RRD path...../var/log/ntop/rrd
New directory permissions.....0700
New file umask.....0066
--
------------------------------------------------------------------------
Stanley Hopcroft
------------------------------------------------------------------------
'...No man is an island, entire of itself; every man is a piece of the
continent, a part of the main. If a clod be washed away by the sea,
Europe is the less, as well as if a promontory were, as well as if a
manor of thy friend's or of thine own were. Any man's death diminishes
me, because I am involved in mankind; and therefore never send to know
for whom the bell tolls; it tolls for thee...'
from Meditation 17, J Donne.
_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev
