Run it with --trace-level 4 (noisy) so you see the actual reject message from urlSecurity() in http.c (there's about 4 things that cause code=2)...
-----Burton ---------- Original Message ---------------------------------- From: Stanley Hopcroft <[EMAIL PROTECTED]> Reply-To: [EMAIL PROTECTED] Date: Mon, 5 Jan 2004 11:24:55 +1100 > > n t o p v e r s i o n '2.2.98' p r o b l e m r e p o r t > >From: S Hopcroft > >EMail: [EMAIL PROTECTED] > >Date: 2004-01-05 00:07:16 GMT > >Problem Report Id: PR_FBQ4QU > >---------------------------------------------------------------------------- >Summary > >Can't access any ntop web pages via a forwarded SSH connection (ie over >the TCP connection tunnelled through the SSH link to the ntop host using ><from proxy> ssh -g -L8080:tssyd:3000 [EMAIL PROTECTED] The browser tne >connects to the proxy host on port 8080. This is useful if access >control prevents direct access to ntop host; it used to work with ntop >2.2). > > > > > >OS(uname): sysname(FreeBSD) release(4.9-RELEASE-p1) version(FreeBSD >4.9-RELEASE-p1 #12: Tue) machine(i386) > >ntop from: CVS 2-Jan-2004 (rpm, source, ports, etc.) > >Hardware: CPU: i386/PII 233 MHz (i86, SPARC, etc.) > # Processors: 1 > Memory: 64 MB > >Packets >Received: 12736 >Processed: 12736 (immediately) >Queued: 0 >Lost: 0 (queue full) >Queue: Current: 0 Maximum: 0 > >Network: >Merged packet counts: > Received: 12736 > Ethernet: 12736 > Broadcast: 2 > Multicast: 122 > IP: 12568 > > Network Interface 0 fxp0 > Received (pcap): 35651 > Dropped (pcap): 0 > Mfg: Intel Model: Intel 82559ER Pro/100 Ethernet > NIC Speed: 10 Bus: PCI > Location: LAN via slow fT1 WAN > Bandwidth: fT1 (128 kbps) > # Hosts (machines): <= 50 (local) > >---------------------------------------------------------------------------- >Log extract > >Jan 5 10:28:38 tssyd ntop[72458]: **ERROR** URL security: >'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230) >Jan 5 10:29:19 tssyd ntop[72458]: **ERROR** Rejected request from >address 192.168.102.230 (it previously sent ntop a bad request) >Jan 5 10:30:05 tssyd ntop[72458]: **ERROR** Rejected request from >address 192.168.102.230 (it previously sent ntop a bad request) >Jan 5 10:36:21 tssyd ntop[72458]: clearing lockout for address >192.168.102.230 >Jan 5 10:36:21 tssyd ntop[72458]: **ERROR** URL security: >'http://tsitc/netsaint/' rejected (code=2)(client=192.168.102.230) >Jan 5 10:36:26 tssyd ntop[72458]: **ERROR** Rejected request from >address 192.168.102.230 (it previously sent ntop a bad request) >Jan 5 10:48:47 tssyd ntop[72739]: **ERROR** URL security: >'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230) >Jan 5 10:48:50 tssyd ntop[72739]: **ERROR** Rejected request from >address 192.168.102.230 (it previously sent ntop a bad request) >Jan 5 10:49:45 tssyd ntop[72739]: **ERROR** Rejected request from >address 192.168.102.230 (it previously sent ntop a bad request) >Jan 5 10:55:23 tssyd ntop[72739]: clearing lockout for address >192.168.102.230 >Jan 5 10:55:23 tssyd ntop[72739]: **ERROR** URL security: >'http://tsitc/netsaint/' rejected (code=2)(client=192.168.102.230) >Jan 5 11:10:30 tssyd ntop[72739]: clearing lockout for address >192.168.102.230 >Jan 5 11:10:38 tssyd ntop[72739]: **ERROR** URL security: >'http://tssyd:3000/' rejected (code=2)(client=192.168.102.230) > > > > > > >---------------------------------------------------------------------------- >Problem Description > >Attempts to access any Ntop web page over a TCP connection forwarded >over an SSH tunnel to the ntop host fail with > >1 No data in document error messages from browser > >2 URL security error messages logged by ntop. > >Notes > >1 Appears to be browser related since a manual GET / HTTP/1.0 over the >tunnel succeeds > >2 enabling -q and stopping ntop after a few browse attempts only >produces an empty pcap file in the -O path. > > > > >---------------------------------------------------------------------------- >ntop Configuration > > >ntop version.....2.2.98 >Configured on.....Jan 3 2004 16:02:35 >Built on.....Jan 3 2004 16:05:29 >OS.....i386-unknown-freebsd4.9 >ntop Process Id.....72739 >http Process Id.....72739 > > >Command line > >Started as..../usr/local/ntop/bin/ntop --skip-version-check >--disable-mutexextrainfo -o -c -u nobody -d -P /var/log/ntop -w 3000 -i >fxp0 -p >HTTP=http|https,DNS=domain,Ntop=3000,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn,Mail=lotusnote|pop2|pop3|kpop|smtp|imap,SNMP=snmp|snmptrap,Telnet=telnet,Cache=3128,BEA=7000-7010,SSH=ssh,SAP=3202,PSCAM=4754,Virus=2967,LPD=515,PCAny=5631|5632,FTP=ftp|49152-65536 > >-B ether host 00:60:47:1e:bb:aa -q -O /var/log/ntop > >Resolved to..../usr/local/ntop/bin/ntop > --skip-version-check > --disable-mutexextrainfo > -o > -c > -u > nobody > -d > -P > /var/log/ntop > -w > 3000 > -i > fxp0 > -p > >HTTP=http|https,DNS=domain,Ntop=3000,NBios-IP=netbios-ns|netbios-dgm|netbios-ssn,Mail=lotusnote|pop2|pop3|kpop|smtp|imap,SNMP=snmp|snmptrap,Telnet=telnet,Cache=3128,BEA=7000-7010,SSH=ssh,SAP=3202,PSCAM=4754,Virus=2967,LPD=515,PCAny=5631|5632,FTP=ftp|49152-65536 > -B > ether host 00:60:47:1e:bb:aa > -q > -O > /var/log/ntop > > >Command line parameters are: > >-a | --access-log-path.....(default) (nil) >-b | --disable-decoders.....(default) No >-c | --sticky-hosts.....Yes >-d | --daemon.....Yes >-e | --max-table-rows.....(default) 128 >-f | --traffic-dump-file.....(default) (nil) >-g | --track-local-hosts.....(default) Track all hosts >-o | --no-mac.....Don't trust MAC Addresses >-i | --interface (effective).....fxp0 >-j | --create-other-packets.....(default) Disabled >-k | --filter-expression-in-extra-frame.....(default) No >-l | --pcap-log.....(default) (nil) >-m | --local-subnets (effective)..... >-n | --numeric-ip-addresses.....(default) No >-p | --protocols.....HTTP >-q | --create-suspicious-packets.....Enabled >-r | --refresh-time.....(default) 120 >-s | --no-promiscuous.....(default) No >-t | --trace-level.....(default) 3 >-u | --user.....nobody (uid=65534, gid=65534) >-w | --http-server.....(default) Active, all interfaces, port 3000 >-z | --disable-sessions.....(default) No >-B | --filter-expression.....ether host 00:60:47:1e:bb:aa >-D | --domain.....aipo.gov.au >-F | --flow-spec.....(default) none >-K | --enable-debug.....(default) No >-L | --use-syslog.....daemon >-M | --no-interface-merge (effective).....(default) (Merging >Interfaces) Yes >-N | --wwn-map.....(default) (nil) >-O | --pcap-file-path...../var/log/ntop >-P | --db-file-path...../var/log/ntop >-Q | --spool-file-path...../var/log/ntop >-U | --mapper.....(default) (nil) >-W | --https-server.....Uninitialized >--ssl-watchdog.....(default) No >--p3p-cp.....(default) none >--p3p-uri.....(default) none >--disable-schedYield.....(default) No >--disable-stopcap.....(default) No >--log-extra.....(default) 0 >--disable-instantsessionpurge.....(default) No >--disable-mutexextrainfo.....Yes >--fc-only.....(default) No >--no-fc.....(default) No >--no-invalid-lun.....(default) No > > >Note: (effective) means that this is the value after ntop has >processed the parameter. >(default) means this is the default value, usually (but not always) >set by a #define in globals-defines.h. > > > >Run time/Internal > >Web server URL.....http://any:3000 >SSL Web server (https://).....Not Active >GDBM version.....This is GDBM version 1.8.0, as of May 19, 1999. >OpenSSL Version.....OpenSSL 0.9.7c 30 Sep 2003 >zlib version.....1.1.4 >Protocol Decoders.....Enabled >Fragment Handling.....Enabled >Tracking only local hosts.....No ># IP Protocols Being Monitored.....16 ># Protocol slots.....3950 ># IP Ports Being Monitored.....16418 ># IP Ports slots.....32836 ># Handled SIGPIPE Errors.....0 ># Handled HTTP Requests.....39 >WebServer Request Queue.....10 >Devices (Network Interfaces).....1 >Domain name (short).....au >IP to country flag table (entries).....49056 >Total Hash Collisions (Vendor/Special) (lookup).....0 >Local Networks.....192.168.102.0/255.255.255.0 [device fxp0] > > >Memory Usage > >IPX/SAP Hash Size (bytes).....1897 >IP to country flag table (bytes).....1496064 (1.4 MB) >Bytes per entry.....30.5 >IP to AS (Autonomous System) number table (bytes).....0 (0.0 MB) > > >Host Memory Cache > >Limit.....#define MAX_HOSTS_CACHE_LEN 512 >Current Size.....0 >Maximum Size.....0 ># Entries Reused.....0 > > >MAC/IPX Hash tables > >IPX/SAP Hash Size (entries).....179 >IPX/SAP Hash Collisions (load).....0 >IPX/SAP Hash Collisions (use).....0 > > >Packets > >Received.....12736 >Processed immediately.....12736 >Queued.....0 >Current queue.....0 >Maximum queue.....0 > > >Host/Session counts - global > >Purged hosts.....0 >Maximum hosts to purge per cycle.....512 >DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512 >Terminated Sessions.....730 > >Host/Session counts - Device 0 (fxp0) >Hash Bucket Size.....3.7 KB >Actual Hash Size.....16384 >Stored hosts.....40 >Bucket List Length.....[min 1][max 1][avg 1.0] >Max host lookup.....0 >Session Bucket Size.....260 >Sessions.....285 >Max Num. Sessions.....286 > > >Address Resolution > >DNS sniffed: > >DNS Packets sniffed.....262 > less 'requests'.....131 > less 'failed'.....17 > less 'reverse dns' (in-addr.arpa).....17 >DNS Packets processed.....97 >Stored in cache (includes aliases).....160 > > >IP to name - ipaddr2str(): > >Total calls.....39 >....OK.....11 >....Total not found.....28 >........Not found in cache.....1 >........Too old in cache.....26 > > >Queued - dequeueAddress(): > >Total Queued.....28 >Not queued (duplicate).....0 >Maximum Queued.....3 >Current Queue.....0 > > >Resolved - resolveAddress(): > >Addresses to resolve.....28 >....less 'Error: No cache database'.....0 >....less 'Found in ntop cache'.....0 >Gives: # gethost (DNS lookup) calls.....28 > > >DNS lookup calls: > >DNS resolution attempts.....28 >....Success: Resolved.....13 >....Failed.....15 >........HOST_NOT_FOUND.....15 >........NO_DATA.....0 >........NO_RECOVERY.....0 >........TRY_AGAIN (don't store).....0 >........Other error (don't store).....0 >DNS lookups stored in cache.....28 >Host addresses kept numeric.....15 > > >Vendor Lookup Table > >Input lines read.....0 >Records added total.....0 >.....includes special records.....0 >getVendorInfo() calls.....0 >getSpecialVendorInfo() calls.....19 >Found 48bit (xx:xx:xx:xx:xx:xx) match.....0 >Found 24bit (xx:xx:xx) match.....1 >Found multicast bit set.....0 >Found LAA (Locally assigned address) bit set.....0 > > >Thread counts > >Active.....6 >Dequeue.....1 >Children (active).....12 > > >IP Address reject list > > >Address ... Count ... Last Bad Access ... Lockout Expires > 192.168.102.230... 1... Mon Jan 5 10:55:23 2004... Mon Jan 5 >11:00:23 2004 > >Reject duration (seconds).....300 >It is now.....Mon Jan 5 11:07:16 2004 >Directory (search) order > >Data Files...... > /usr/local/ntop-2.2.98/share/ntop >Config Files...... > /usr/local/ntop-2.2.98/etc/ntop > /etc >Plugins....../plugins > /usr/local/ntop-2.2.98/lib/ntop/plugins > > >Compile Time: ./configure > >./configure parameters.....--disable-ssl --prefix=/usr/local/ntop-2.2.98 >--with-gd-include=/usr/local/include/gd >Built on (Host).....i386-unknown-freebsd4.9 >Built for(Target).....i386-unknown-freebsd4.9 >compiler (cflags).....gcc -g -O2 -I/usr/local/include -Wshadow >-Wpointer-arith -Wmissing-prototypes -Wmissing-declarations >-Wnested-externs -fPIC -DHAVE_CONFIG_H >include path.....-I/usr/local/include/gd >-I/usr/home/anwsmh/build/ntop_cvs_2_Jan_2004/ntop/myrrd >system libraries.....-L/usr/local/lib >-L/usr/home/anwsmh/build/ntop_cvs_2_Jan_2004/ntop/myrrd -lc_r -lc >-lcrypt -lssl -lcrypto -lpcap -lgdbm -lgd -lpng -lz -lmyrrd >install path...../usr/local/ntop-2.2.98 >GNU C (gcc) version.....2.95.4 20020320 [FreeBSD] (2.95.0) >uname data.....sysname(FreeBSD) release(4.9-RELEASE-p1) version(FreeBSD >4.9-RELEASE-p1 #12: Tue) machine(i386) > > >Internationalization (i18n) > >i18n enabled.....No > > >Compile Time: Debug settings in globals-defines.h > >DEBUG.....no >ADDRESS_DEBUG.....no >DNS_DEBUG.....no >DNS_SNIFF_DEBUG.....no >FTP_DEBUG.....no >GDBM_DEBUG.....no >HASH_DEBUG.....no >HOST_FREE_DEBUG.....no >HTTP_DEBUG.....no >IDLE_PURGE_DEBUG.....no >INITWEB_DEBUG.....no >MEMORY_DEBUG.....no >NETFLOW_DEBUG.....no >SEMAPHORE_DEBUG.....no >SESSION_TRACE_DEBUG.....no >SSLWATCHDOG_DEBUG.....no >STORAGE_DEBUG.....no >UNKNOWN_PACKET_DEBUG.....no > > >Compile Time: globals-define.h > >PARM_PRINT_ALL_SESSIONS.....no >PARM_PRINT_RETRANSMISSION_DATA.....no >PARM_FORK_CHILD_PROCESS.....yes (normal) >CGI Scripts.....globals-defines.h: #define PARM_USE_CGI >Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */ >Buggy gethostbyaddr() - use alternate >implementation.....globals-defines.h: /* #define PARM_USE_HOST */ >MAKE_ASYNC_ADDRESS_RESOLUTION.....yes >MAKE_WITH_SSLWATCHDOG.....yes >MAKE_WITH_SSLWATCHDOG_RUNTIME (derived).....yes >Bad IP Address table size.....globals-defines.h: #define >MAX_NUM_BAD_IP_ADDRESSES 3 >Minimum refresh interval (seconds).....#define >PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15 >Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64 >Maximum # of routers (Local Subnet Routers report).....#define >MAX_NUM_ROUTERS 512 >Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32 >Maximum # of virtual network interfaces (per device).....#define >MAX_NUM_DEVICES_VIRTUAL 7 >Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS >1024 >Allocated # of passive FTP sessions.....#define >MAX_PASSIVE_FTP_SESSION_TRACKER 384 >Inactive passive FTP session timeout (seconds).....#define >PARM_PASSIVE_SESSION_MINIMUM_IDLE 60 > > >Compile Time: Hash Table Sizes > >Size.....#define CONST_HASH_INITIAL_SIZE 16384 > > >Compile Time: globals-define.h > >Chart Format.....globals-report.h: #define CHART_FORMAT ".png" > > >Compile Time: config.h > >CFG_ETHER_HEADER_HAS_EA.....no >CFG_MULTITHREADED.....yes >HAVE_ALARM.....yes >HAVE_ALLOCA.....yes >HAVE_ALLOCA_H.....no >HAVE_ARPA_NAMESER_H.....yes >HAVE_BACKTRACE.....no >HAVE_BZERO.....yes >HAVE_CTIME_R.....yes >HAVE_DLFCN_H.....yes >HAVE_DL_H.....no >HAVE_DOPRNT.....no >HAVE_ENDPWENT.....yes >HAVE_ERRNO_H.....yes >HAVE_FACILITYNAMES.....yes >HAVE_FCNTL_H.....yes >HAVE_FORK.....yes >HAVE_GDBM_H.....yes >HAVE_GD_H.....yes >HAVE_GDOME_H.....no >HAVE_GETHOSTBYADDR.....yes >HAVE_GETHOSTBYADDR_R.....no >HAVE_GETHOSTBYNAME.....yes >HAVE_GETHOSTNAME.....yes >HAVE_GETIPNODEBYADDR.....yes >HAVE_GETPASS.....yes >HAVE_GETTIMEOFDAY.....yes >HAVE_GLIBCONFIG_H.....no >HAVE_GLIB_H.....no >HAVE_IF_H.....no >HAVE_IN6_ADDR.....yes >HAVE_INT16_T.....yes >HAVE_INT32_T.....yes >HAVE_INT64_T.....yes >HAVE_INT8_T.....yes >HAVE_INTTYPES_H.....yes >HAVE_LANGINFO_H.....yes >HAVE_LIBC.....yes >HAVE_LIBCRYPT.....yes >HAVE_LIBCRYPTO.....yes >HAVE_LIBDL.....no >HAVE_LIBDLD.....no >HAVE_LIBGD.....yes >HAVE_LIBGDBM.....yes >HAVE_LIBGDOME.....no >HAVE_LIBGLIB.....no >HAVE_LIBM.....no >HAVE_LIBNSL.....no >HAVE_LIBPCAP.....yes >HAVE_LIBPNG.....yes >HAVE_LIBPOSIX4.....no >HAVE_LIBPTHREAD.....no >HAVE_LIBPTHREADS.....no >HAVE_LIBRESOLV.....no >HAVE_LIBRT.....no >HAVE_LIBSOCKET.....no >HAVE_LIBSSL.....yes >HAVE_LIBWRAP.....no >HAVE_LIBXML2.....no >HAVE_LIBXNET.....no >HAVE_LIBZ.....yes >HAVE_LIMITS_H.....yes >HAVE_LINUX_IF_PPPOX_H.....no >HAVE_LOCALE_H.....yes >HAVE_LOCALTIME_R.....yes >HAVE_LONG_DOUBLE.....no >HAVE_MATH_H.....yes >HAVE_MEMCHR.....yes >HAVE_MEMORY_H.....yes >HAVE_MEMSET.....yes >HAVE_NDIR_H.....no >HAVE_NETDB_H.....yes >HAVE_OPENSSL.....yes >HAVE_OPENSSL_CRYPTO_H.....yes >HAVE_OPENSSL_ERR_H.....yes >HAVE_OPENSSL_PEM_H.....yes >HAVE_OPENSSL_RSA_H.....yes >HAVE_OPENSSL_SSL_H.....yes >HAVE_OPENSSL_X509_H.....yes >HAVE_PCAP_H.....yes >HAVE_PCAP_OPEN_DEAD.....yes >HAVE_PNG_H.....yes >HAVE_PTHREAD_ATFORK.....no >HAVE_PTHREAD_H.....yes >HAVE_PUTENV.....yes >HAVE_PWD_H.....yes >HAVE_RE_COMP.....no >HAVE_REGCOMP.....yes >HAVE_REGEX.....no >HAVE_SCHED_H.....yes >HAVE_SCHED_YIELD.....yes >HAVE_SECURITY_PAM_APPL_H.....yes >HAVE_SELECT.....yes >HAVE_SEMAPHORE_H.....yes >HAVE_SETJMP_H.....yes >HAVE_SHADOW_H.....no >HAVE_SIGNAL_H.....yes >HAVE_SNPRINTF.....yes >HAVE_SOCKET.....yes >HAVE_SQRT.....yes >HAVE_STDARG_H.....yes >HAVE_STDDEF_H.....yes >HAVE_STDIO_H.....yes >HAVE_STDLIB_H.....yes >HAVE_STRCASECMP.....yes >HAVE_STRCHR.....yes >HAVE_STRCSPN.....yes >HAVE_STRDUP.....yes >HAVE_STRERROR.....yes >HAVE_STRFTIME.....yes >HAVE_STRING_H.....yes >HAVE_STRINGS_H.....yes >HAVE_STRNCASECMP.....yes >HAVE_STRPBRK.....yes >HAVE_STRRCHR.....yes >HAVE_STRSPN.....yes >HAVE_STRSTR.....yes >HAVE_STRTOK_R.....yes >HAVE_STRTOUL.....yes >HAVE_SYS_DIR_H.....no >HAVE_SYS_IOCTL_H.....yes >HAVE_SYS_LDR_H.....no >HAVE_SYS_NDIR_H.....no >HAVE_SYS_RESOURCE_H.....yes >HAVE_SYS_SCHED_H.....no >HAVE_SYS_SOCKIO_H.....yes >HAVE_SYS_TIME_H.....yes >HAVE_SYS_TYPES_H.....yes >HAVE_SYS_UN_H.....yes >HAVE_TCPD_H.....yes >HAVE_TM_ZONE.....yes >HAVE_TZNAME.....no >HAVE_U_INT16_T.....yes >HAVE_U_INT32_T.....yes >HAVE_U_INT64_T.....yes >HAVE_UINT64_T.....yes >HAVE_U_INT8_T.....yes >HAVE_UNAME.....yes >HAVE_UNISTD_H.....yes >HAVE_VFORK.....yes >HAVE_VFORK_H.....no >HAVE_VPRINTF.....yes >HAVE_WORKING_FORK.....yes >HAVE_WORKING_VFORK.....yes >HAVE_ZLIB_H.....yes >MAKE_WITH_I18N.....no >MAKE_WITH_SSLV3_SUPPORT.....no >MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no >MAKE_WITH_XMLDUMP.....no >MAKE_WITH_ZLIB.....yes >__PROTOTYPES.....yes >PROTOTYPES.....yes >SETVBUF_REVERSED.....no >TIME_WITH_SYS_TIME.....yes >TM_IN_SYS_TIME.....no >CFG_CONFIGFILE_DIR - config file >directory...../usr/local/ntop-2.2.98/etc/ntop >CFG_DATAFILE_DIR - data file >directory...../usr/local/ntop-2.2.98/share/ntop >CFG_DBFILE_DIR - database file >directory...../usr/local/ntop-2.2.98/var/ntop >CFG_PLUGIN_DIR - plugin file >directory...../usr/local/ntop-2.2.98/lib/ntop/plugins >CFG_RUN_DIR - run file directory...../usr/local/ntop-2.2.98/var/ntop >CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes >CFG_xxxxxx_ENDIAN (Hardware Endian).....little >HAVE_FILEDESCRIPTORBUG.....yes > > >Compile Time: globals-defines.h > >EMSGSIZE.....40 >ETHERMTU.....1500 >LEN_CMDLINE_BUFFER.....4096 >LEN_FGETS_BUFFER.....512 >LEN_GENERAL_WORK_BUFFER.....1024 >LEN_MEDIUM_WORK_BUFFER.....128 >LEN_SMALL_WORK_BUFFER.....24 >LEN_TIME_STAMP_BUFFER.....2 >MAKE_NTOP_PACKETSZ_DECLARATIONS.....no >MAKE_RMON_SUPPORT.....yes >MAKE_WITH_FORK_COPYONWRITE.....no >MAKE_WITH_HTTPSIGTRAP.....no >MAKE_WITH_NETFLOWSIGTRAP.....no >MAKE_WITH_RRDSIGTRAP.....no >MAKE_WITH_SCHED_YIELD.....yes >MAKE_WITH_SEMAPHORES.....yes >MAKE_WITH_SSLWATCHDOG.....yes >MAKE_WITH_SSLWATCHDOG_RUNTIME.....yes >MAKE_WITH_SYSLOG.....yes >MAX_ADDRESSES.....35 >MAX_ALIASES.....35 >MAX_ASSIGNED_IP_PORTS.....1024 >MAXCDNAME.....255 >MAX_DEVICE_NAME_LEN.....64 >MAXDNAME.....1025 >MAX_HASHDUMP_ENTRY.....65535 >MAXHOSTNAMELEN.....256 >MAX_HOSTS_CACHE_LEN.....512 >MAX_IP_PORT.....65534 >MAXLABEL.....63 >MAX_LANGUAGES_REQUESTED.....4 >MAX_LANGUAGES_SUPPORTED.....8 >MAX_LASTSEEN_TABLE_SIZE.....4096 >MAX_LEN_VENDOR_NAME.....64 >MAX_NFS_NAME_HASH.....12288 >MAX_NODE_TYPES.....8 >MAX_NUM_BAD_IP_ADDRESSES.....3 >MAX_NUM_CONTACTED_PEERS.....8 >MAX_NUM_DEQUEUE_THREADS.....yes >MAX_NUM_DEVICES.....32 >MAX_NUM_DHCP_MSG.....8 >MAX_NUM_FIN.....4 >MAX_NUM_IGNOREDFLOWS.....32 >MAX_NUM_NETWORKS.....32 >MAX_NUM_PROBES.....16 >MAX_NUM_PROTOS.....64 >MAX_NUM_PROTOS_SCREENS.....5 >MAX_NUM_PURGED_SESSIONS.....512 >MAX_NUM_PWFILE_ENTRIES.....32 >MAX_NUM_ROUTERS.....512 >MAX_NUM_STORED_FLAGS.....4 >MAX_NUM_UNKNOWN_PROTOS.....5 >MAX_PASSIVE_FTP_SESSION_TRACKER.....384 >MAX_PER_DEVICE_HASH_LIST.....65535 >MAX_SESSIONS_CACHE_LEN.....512 >MAX_SSL_CONNECTIONS.....32 >NAME_MAX.....255 >NETDB_SUCCESS.....0 >NS_CMPRSFLGS.....192 >NS_MAXCDNAME.....255 >PACKETSZ.....512 >PARM_ENABLE_EXPERIMENTAL.....no >PARM_FORK_CHILD_PROCESS.....yes >PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15 >PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60 >PARM_SESSION_PURGE_MINIMUM_IDLE.....600 >PARM_SHOW_NTOP_HEARTBEAT.....no >PARM_SSLWATCHDOG_WAITWOKE_LIMIT.....5 >PARM_USE_CGI.....yes >PARM_USE_COLOR.....no >PARM_USE_HOST.....no >PARM_USE_MACHASH_INVERT.....yes >PARM_USE_SESSIONS_CACHE.....no >PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300 >THREAD_MODE.....MT (SSL) > > >PLUGINS: > >RRD: >RRD path...../var/log/ntop/rrd >New directory permissions.....0700 >New file umask.....0066 > > > > >-- >------------------------------------------------------------------------ >Stanley Hopcroft >------------------------------------------------------------------------ > >'...No man is an island, entire of itself; every man is a piece of the >continent, a part of the main. If a clod be washed away by the sea, >Europe is the less, as well as if a promontory were, as well as if a >manor of thy friend's or of thine own were. Any man's death diminishes >me, because I am involved in mankind; and therefore never send to know >for whom the bell tolls; it tolls for thee...' > >from Meditation 17, J Donne. >_______________________________________________ >Ntop-dev mailing list >[EMAIL PROTECTED] >http://listgateway.unipi.it/mailman/listinfo/ntop-dev > ____________________________________________________________ Free 20 MB Bannerless Domain Hosting, 1000 MB Data Transfer 10 Personalized POP and Web E-mail Accounts, and more. Get It Now At Doteasy.com http://www.doteasy.com/et/ _______________________________________________ Ntop-dev mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop-dev
