[Ntop-dev] ntop / netflow problem

[Engels PHAT]

Installed ntop v.2.2 on linux red hat 7.3 for collecting netwflow V5 data from cisco router!   We can collect data and can see protocol info like % per protocol, etc but we don't see any session info ie source destination.   The router does send the info!   Below you'll find some detailled info about router output and ntop config."   Someone any idea?   Piet Engels Oce Technologies Netherlands [EMAIL PROTECTED]   router ==================== pein139#sh ip flow export Flow export v1 is enabled for main cache Exporting flows to 134.188.105.9 (9995) Exporting using source IP address 134.188.105.8 Version 1 flow records 21536 flows exported in 898 udp datagrams 0 flows failed due to lack of export packet 0 export packets were sent up to process level 0 export packets were dropped due to no fib 0 export packets were dropped due to adjacency issues 0 export packets were dropped due to fragmentation failures 0 export packets were dropped due to encapsulation fixup failures pein139# pein139#sh ip cache flow IP packet size distribution (39647 total packets): 1-32   64   96  128  160  192  224  256  288  320  352  384  416  448 480 .000 .653 .132 .012 .038 .017 .009 .006 .035 .004 .005 .007 .001 .000 .005 512  544  576 1024 1536 2048 2560 3072 3584 4096 4608 .001 .000 .016 .008 .040 .000 .000 .000 .000 .000 .000 IP Flow Switching Cache, 278544 bytes 220 active, 3876 inactive, 21935 added 378998 ager polls, 0 flow alloc failures Active flows timeout in 30 minutes Inactive flows timeout in 15 seconds last clearing of statistics never Protocol         Total    Flows   Packets Bytes  Packets Active(Sec) Idle(Sec) --------         Flows     /Sec     /Flow  /Pkt     /Sec     /Flow /Flow TCP-Telnet          18      0.0        27    68      0.0      18.8 9.3 TCP-FTP              2      0.0        14    70      0.0       1.3 1.4 TCP-FTPD             1      0.0         5    94      0.0       0.5 1.5 TCP-WWW            190      0.0         7   548      0.0       3.2 6.5 TCP-SMTP           398      0.0        15   320      0.0       3.1 4.5 TCP-other        17580      0.0         1    83      0.0       0.0 15.0 UDP-DNS            764      0.0         2    74      0.0       9.3 15.4 UDP-NTP            189      0.0         1    76      0.0       0.0 15.4 UDP-other         2030      0.0         2   212      0.0       2.1 15.4 ICMP               543      0.0         3    91      0.0       5.6 15.4 Total:           21715      0.0         1   154      0.0       0.8 14.8 SrcIf         SrcIPaddress    DstIf         DstIPaddress    Pr SrcP DstP Pkts Se0/0.1       10.61.9.244     Et0/0         134.188.26.126  11 008A 008A 1 Se0/0.1       160.120.2.32    Et0/0         134.188.105.175 01 0000 0000 2 Se0/0.1       10.61.9.244     Et0/0         134.188.25.200  11 008A 008A 1 Se0/0.1       10.61.9.244     Et0/0         134.188.25.253  11 008A 008A 1 Se0/0.1       10.61.9.244     Et0/0         134.188.25.254  11 008A 008A 1 Se0/0.1       10.61.9.244     Et0/0         134.188.25.59   11 008A 008A 1 Se0/0.1       10.61.9.244     Et0/0         134.188.25.120  11 008A 008A 1 Se0/0.1       10.61.8.234     Et0/0         134.188.254.40  06 0426 07DA   ntop config ================= ntop version.....2.2 Built on.....09/30/03 09:38:16 AM OS.....i686-pc-linux-gnu ntop Process Id.....9586 http Process Id.....9587 Command line Started as..../opt/ntop/bin/ntop -i eth0 @/opt/ntop/etc/ntop.conf Resolved to..../opt/ntop/bin/ntop -i eth0 --user ntop --db-file-path /var/ntop --interface eth0 --use-syslog=local1 --http-server 0 --https-server 3001 --local-subnets 134.188.105.0/24 --domain venlo-e.nl.oce.net. --reuse-rrd-graphics --daemon --enable-external-tools --large-network --no-mac --no-interface-merge --enable-external-tools Command line parameters are: -a | --access-log-path.....(default) (nil) -b | --disable-decoders.....(default) No -c | --sticky-hosts.....(default) No -d | --daemon.....Yes -e | --max-table-rows.....(default) 128 -f | --traffic-dump-file.....(default) (nil) -g | --track-local-hosts.....(default) Track all hosts -o | --no-mac.....Don't trust MAC Addresses -i | --interface (effective).....eth0 -k | --filter-_expression_-in-extra-frame.....(default) No -l | --pcap-log.....(default) (nil) -m | --local-subnets (effective)..... -n | --numeric-ip-addresses.....(default) No -p | --protocols.....(default) internal list -q | --create-suspicious-packets.....(default) Disabled -r | --refresh-time.....(default) 120 -s | --no-promiscuous.....(default) No -t | --trace-level.....(default) 3 -u | --user.....ntop (uid=101, gid=100) -w | --http-server.....Inactive -z | --disable-sessions.....(default) No -B | --filter-_expression_.....(default) none -D | --domain.....venlo-e.nl.oce.net. -E | --enable-external-tools.....Yes -F | --flow-spec.....(default) none -K | --enable-debug.....(default) No -L | --use-syslog.....local1 -M | --no-interface-merge (effective).....(parameter -M set, Interfaces separate) No -O | --pcap-file-path.....(default) /opt/ntop/var/ntop -P | --db-file-path...../var/ntop -U | --mapper.....(default) (nil) -W | --https-server.....Active, all interfaces, port 3001 --throughput-chart-type.....(default) Area --ignore-sigpipe.....(default) No --ssl-watchdog.....(default) No --dynamic-purge-limits.....(default) No --reuse-rrd-graphics.....Yes --p3p-cp.....(default) none --p3p-uri.....(default) none --disable-stopcap.....(default) No Note: (effective) means that this is the value after ntop has processed the parameter. (default) means this is the default value, usually (but not always) set by a #define in globals-defines.h. Run time/Internal External tool: lsof.....Yes Web server (http://).....Not Active SSL Web server URL.....https://any:3001 GDBM version.....This is GDBM version 1.8.0, as of May 19, 1999. OpenSSL Version.....OpenSSL 0.9.6b [engine] 9 Jul 2001 zlib version.....1.1.4 Protocol Decoders.....Enabled Fragment Handling.....Enabled Tracking only local hosts.....No # IP Protocols Being Monitored.....18 # Protocol slots.....950 # IP Ports Being Monitored.....58 # Ports slots.....116 # Handled SIGPIPE Errors.....0 # Handled HTTP Requests.....633 Devices (Network Interfaces).....2 Domain name (short)..... IP to country flag table (entries).....47455 Total Hash Collisions (Vendor/Special) (lookup).....0 Local Networks.....134.188.105.0/255.255.255.0 [device eth0] 134.188.105.9/255.255.255.255 [device NetFlow-device] Memory allocation - data segment arena limit, getrlimit(RLIMIT_DATA, ...).....-1 Allocated blocks (ordblks).....2880 Allocated (arena).....35704832 Used (uordblks).....34658712 Free (fordblks).....1046120 Memory allocation - mmapped Allocated blocks (hblks).....5 Allocated bytes (hblkhd).....2818048 Memory Usage IPX/SAP Hash Size (bytes).....1897 IP to country flag table (bytes).....1454304 (1.4 MB) Bytes per entry.....30.6 Current memory usage.....38522880 Base memory usage.....6198064 Hosts stored (active+cache).....27104 = (26937 + 167) (very) Approximate memory per host.....1.2KB Host Memory Cache Limit.....#define MAX_HOSTS_CACHE_LEN 512 Current Size.....167 Maximum Size.....511 # Entries Reused.....4834 MAC/IPX Hash tables IPX/SAP Hash Size (entries).....179 IPX/SAP Hash Collisions (load).....0 IPX/SAP Hash Collisions (use).....0 Packet queue Queued to Process.....0 Maximum queue.....0 Host/Session counts - global Purge idle hosts.....Enabled Purged hosts.....5001 Maximum hosts to purge per cycle.....512 DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512 Terminated Sessions.....13,466 Host/Session counts - Device 0 (eth0) Actual Hash Size.....28672 Stored hosts.....26935 [93 %] Sessions.....111 Max Num. Sessions.....527 Host/Session counts - Device 1 (NetFlow-device) Actual Hash Size.....32 Stored hosts.....2 [6 %] Sessions.....0 Max Num. Sessions.....0 Address Resolution DNS sniffed: DNS Packets sniffed.....106469 less 'requests'.....53612 less 'failed'.....33756 less 'reverse dns' (in-addr.arpa).....1813 DNS Packets processed.....17288 Stored in cache (includes aliases).....16443 IP to name - ipaddr2str(): Total calls.....31936 ....OK.....1361 ....Total not found.....30575 ........Not found in cache.....30575 ........Too old in cache.....0 Queued - dequeueAddress(): Total Queued.....30575 Not queued (duplicate).....0 Maximum Queued.....34 Current Queue.....0 Resolved - resolveAddress(): Addresses to resolve.....30575 ....less 'Error: No cache database'.....0 ....less 'Found in ntop cache'.....0 Gives: # gethost (DNS lookup) calls.....30575 DNS lookup calls: DNS resolution attempts.....30575 ....Success: Resolved.....333 ....Failed.....30242 ........HOST_NOT_FOUND.....30241 ........NO_DATA.....0 ........NO_RECOVERY.....0 ........TRY_AGAIN (don't store).....1 ........Other error (don't store).....0 DNS lookups stored in cache.....30574 Host addresses kept numeric.....30242 Vendor Lookup Table Input lines read.....131 Records added total.....121 .....includes special records.....59 getVendorInfo() calls.....0 getSpecialVendorInfo() calls.....241 Found 48bit (xx:xx:xx:xx:xx:xx) match.....0 Found 24bit (xx:xx:xx) match.....7 Found multicast bit set.....0 Found LAA (Locally assigned address) bit set.....0 Thread counts Active.....8 Dequeue.....1 Children (active).....0 Reject duration (seconds).....300 It is now.....Thu Jan 8 13:54:43 2004 lsof data Updating.....Yes # Monitored Processes.....29 Directory (search) order Data Files......<br>/opt/ntop/share/ntop<br> Config Files......<br>/opt/ntop/etc/ntop<br>/etc<br> Plugins....../plugins<br>/opt/ntop/lib/ntop/plugins<br> Compile Time: ./configure ./configure parameters.....--prefix=/opt/ntop Built on (Host).....i686-pc-linux-gnu Built for (Target).....i686-pc-linux-gnu compiler (cflags).....gcc -DLINUX -g -O2 -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DHAVE_CONFIG_H include path.....-I/opt/pkg/ntop/ntop-2.2/gdchart0.94c/zlib-1.1.4 -I/opt/pkg/ntop/ntop-2.2/gdchart0.94c -I/opt/pkg/ntop/ntop-2.2/gdchart0.94c/gd-1.8.3 system libraries.....-lxml2 -lglib -lpthread -lresolv -lnsl -lpng -lm -lssl -lcrypto -lpcap -lgdbm -ldl -lcrypt -lc -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c/zlib-1.1.4 -lz -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c -lgdchart -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c/gd-1.8.3 -lgd install path...../opt/ntop GNU C (gcc) version.....2.96 20000731 (Red Hat Linux 7.3 2.96-113) (2.96.0) Internationalization (i18n) i18n enabled.....No Compile Time: Debug settings in globals-defines.h DEBUG.....no ADDRESS_DEBUG.....no DNS_DEBUG.....no DNS_SNIFF_DEBUG.....no FTP_DEBUG.....no GDBM_DEBUG.....no HASH_DEBUG.....no HOST_FREE_DEBUG.....no HTTP_DEBUG.....no IDLE_PURGE_DEBUG.....no MEMORY_DEBUG.....no NETFLOW_DEBUG.....no SEMAPHORE_DEBUG.....no SESSION_TRACE_DEBUG.....no SSLWATCHDOG_DEBUG.....no STORAGE_DEBUG.....no UNKNOWN_PACKET_DEBUG.....no Compile Time: globals-define.h PARM_PRINT_ALL_SESSIONS.....no PARM_PRINT_RETRANSMISSION_DATA.....no PARM_FORK_CHILD_PROCESS.....yes (normal) CGI Scripts.....globals-defines.h: #define PARM_USE_CGI Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */ Buggy gethostbyaddr() - use alternate implementation.....globals-defines.h: /* #define PARM_USE_HOST */ MAKE_ASYNC_ADDRESS_RESOLUTION.....yes MAKE_WITH_SSLWATCHDOG.....yes MAKE_WITH_SSLWATCHDOG_RUNTIME (derived).....yes Bad IP Address table size.....globals-defines.h: #define MAX_NUM_BAD_IP_ADDRESSES 3 Minimum refresh interval (seconds).....#define PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15 Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64 Maximum # of routers (Local Subnet Routers report).....#define MAX_NUM_ROUTERS 512 Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32 Maximum # of processes for lsof report.....#define MAX_NUM_PROCESSES_READLSOFINFO 1024 Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS 1024 Allocated # of passive FTP sessions.....#define MAX_PASSIVE_FTP_SESSION_TRACKER 384 Inactive passive FTP session timeout (seconds).....#define PARM_PASSIVE_SESSION_MINIMUM_IDLE 60 Compile Time: Hash Table Sizes Initial size.....#define CONST_HASH_INITIAL_SIZE 32 After 1st extend.....#define CONST_HASH_MINIMUM_SIZE 512 Intermediate increase factor.....#define CONST_HASH_INCREASE_FACTOR 2 Factor growth until.....#define CONST_HASH_FACTOR_MAXIMUM 4096 Then grow (linearly) by.....#define CONST_HASH_TERMINAL_INCREASE 4096 Compile Time: globals-define.h Chart Format.....globals-report.h: #define CHART_FORMAT ".png" Compile Time: config.h CFG_ETHER_HEADER_HAS_EA.....no CFG_MULTITHREADED.....yes HAVE_ALARM.....yes HAVE_ALLOCA.....yes HAVE_ALLOCA_H.....yes HAVE_ARPA_NAMESER_H.....yes HAVE_BACKTRACE.....yes HAVE_BZERO.....yes HAVE_CTIME_R.....yes HAVE_CURSES_H.....no HAVE_DLFCN_H.....yes HAVE_DL_H.....no HAVE_DOPRNT.....no HAVE_ENDPWENT.....yes HAVE_ERRNO_H.....yes HAVE_FACILITYNAMES.....yes HAVE_FCNTL_H.....yes HAVE_FORK.....yes HAVE_GDBM_H.....yes HAVE_GDCPIE_H.....yes HAVE_GD_H.....yes HAVE_GDOME_H.....no HAVE_GETHOSTBYADDR.....yes HAVE_GETHOSTBYADDR_R.....yes HAVE_GETHOSTBYNAME.....yes HAVE_GETHOSTNAME.....yes HAVE_GETIPNODEBYADDR.....no HAVE_GETPASS.....yes HAVE_GETTIMEOFDAY.....yes HAVE_GLIBCONFIG_H.....no HAVE_GLIB_H.....no HAVE_IF_H.....no HAVE_IN6_ADDR.....yes HAVE_INT16_T.....yes HAVE_INT32_T.....yes HAVE_INT64_T.....yes HAVE_INT8_T.....yes HAVE_INTTYPES_H.....yes HAVE_LANGINFO_H.....yes HAVE_LIBC.....yes HAVE_LIBCRYPT.....yes HAVE_LIBCRYPTO.....yes HAVE_LIBDL.....yes HAVE_LIBDLD.....no HAVE_LIBGD.....yes HAVE_LIBGDBM.....yes HAVE_LIBGDOME.....no HAVE_LIBGLIB.....yes HAVE_LIBM.....yes HAVE_LIBNSL.....yes HAVE_LIBPCAP.....yes HAVE_LIBPNG.....yes HAVE_LIBPOSIX4.....no HAVE_LIBPTHREAD.....yes HAVE_LIBPTHREADS.....no HAVE_LIBRESOLV.....yes HAVE_LIBRT.....no HAVE_LIBSOCKET.....no HAVE_LIBSSL.....yes HAVE_LIBWRAP.....no HAVE_LIBXML2.....no HAVE_LIBZ.....yes HAVE_LIMITS_H.....yes HAVE_LOCALE_H.....yes HAVE_LOCALTIME_R.....yes HAVE_LONG_DOUBLE.....no HAVE_MATH_H.....yes HAVE_MEMCHR.....yes HAVE_MEMORY_H.....yes HAVE_MEMSET.....yes HAVE_NCURSES_H.....no HAVE_NDIR_H.....no HAVE_NETDB_H.....yes HAVE_OPENSSL.....yes HAVE_OPENSSL_CRYPTO_H.....yes HAVE_OPENSSL_ERR_H.....yes HAVE_OPENSSL_PEM_H.....yes HAVE_OPENSSL_RSA_H.....yes HAVE_OPENSSL_SSL_H.....yes HAVE_OPENSSL_X509_H.....yes HAVE_PCAP_FREECODE.....yes HAVE_PCAP_H.....yes HAVE_PCAP_OPEN_DEAD.....yes HAVE_PNG_H.....yes HAVE_PTHREAD_H.....yes HAVE_PUTENV.....yes HAVE_PWD_H.....yes HAVE_READLINE.....no HAVE_READLINE_READLINE_H.....no HAVE_RE_COMP.....yes HAVE_REGCOMP.....yes HAVE_REGEX.....yes HAVE_RRD.....yes HAVE_RRD_H.....yes HAVE_SCHED_H.....yes HAVE_SCHED_YIELD.....yes HAVE_SECURITY_PAM_APPL_H.....yes HAVE_SELECT.....yes HAVE_SEMAPHORE_H.....yes HAVE_SETJMP_H.....yes HAVE_SHADOW_H.....yes HAVE_SIGNAL_H.....yes HAVE_SNPRINTF.....yes HAVE_SOCKET.....yes HAVE_SQRT.....yes HAVE_STDARG_H.....yes HAVE_STDIO_H.....yes HAVE_STDLIB_H.....yes HAVE_STRCASECMP.....yes HAVE_STRCHR.....yes HAVE_STRCSPN.....yes HAVE_STRDUP.....yes HAVE_STRERROR.....yes HAVE_STRFTIME.....yes HAVE_STRING_H.....yes HAVE_STRINGS_H.....yes HAVE_STRNCASECMP.....yes HAVE_STRPBRK.....yes HAVE_STRRCHR.....yes HAVE_STRSPN.....yes HAVE_STRSTR.....yes HAVE_STRTOK_R.....yes HAVE_STRTOUL.....yes HAVE_SYS_DIR_H.....no HAVE_SYS_IOCTL_H.....yes HAVE_SYS_LDR_H.....no HAVE_SYS_NDIR_H.....no HAVE_SYS_RESOURCE_H.....yes HAVE_SYS_SCHED_H.....no HAVE_SYS_SOCKIO_H.....no HAVE_SYS_TIME_H.....yes HAVE_SYS_TYPES_H.....yes HAVE_SYS_UN_H.....yes HAVE_TCPD_H.....yes HAVE_TM_ZONE.....yes HAVE_TZNAME.....no HAVE_U_INT16_T.....yes HAVE_U_INT32_T.....yes HAVE_U_INT64_T.....yes HAVE_UINT64_T.....no HAVE_U_INT8_T.....yes HAVE_UNAME.....yes HAVE_UNISTD_H.....yes HAVE_VFORK.....yes HAVE_VFORK_H.....no HAVE_VPRINTF.....yes HAVE_WORKING_FORK.....yes HAVE_WORKING_VFORK.....yes HAVE_ZLIB_H.....yes MAKE_MICRO_NTOP.....no MAKE_WITH_FTPDATA_ASSUMED.....no MAKE_WITH_GDCHART.....yes MAKE_WITH_I18N.....no MAKE_WITH_IGNORE_SIGPIPE.....no MAKE_WITH_LARGERRDPOP.....no MAKE_WITH_SSLV3_SUPPORT.....no MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no MAKE_WITH_ZLIB.....yes __PROTOTYPES.....yes PROTOTYPES.....yes SETVBUF_REVERSED.....no TIME_WITH_SYS_TIME.....yes TM_IN_SYS_TIME.....no CFG_CONFIGFILE_DIR - config file directory...../opt/ntop/etc/ntop CFG_DATAFILE_DIR - data file directory...../opt/ntop/share/ntop CFG_DBFILE_DIR - database file directory...../opt/ntop/var/ntop CFG_PLUGIN_DIR - plugin file directory...../opt/ntop/lib/ntop/plugins CFG_RUN_DIR - run file directory...../opt/ntop/var/ntop CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes CFG_xxxxxx_ENDIAN (Hardware Endian).....little Compile Time: globals-defines.h EMSGSIZE.....90 ETHERMTU.....1500 LEN_CMDLINE_BUFFER.....4096 LEN_FGETS_BUFFER.....512 LEN_GENERAL_WORK_BUFFER.....1024 LEN_MEDIUM_WORK_BUFFER.....64 LEN_SMALL_WORK_BUFFER.....16 LEN_TIME_STAMP_BUFFER.....2 MAKE_NTOP_PACKETSZ_DECLARATIONS.....no MAKE_RMON_SUPPORT.....yes MAKE_WITH_FORK_COPYONWRITE.....yes MAKE_WITH_HTTPSIGTRAP.....no MAKE_WITH_RRDSIGTRAP.....no MAKE_WITH_SCHED_YIELD.....yes MAKE_WITH_SEMAPHORES.....yes MAKE_WITH_SYSLOG.....yes MAKE_WITH_XMLDUMP.....no MAX_ADDRESSES.....35 MAX_ALIASES.....35 MAX_ASSIGNED_IP_PORTS.....1024 MAXCDNAME.....255 MAX_DEVICE_NAME_LEN.....64 MAXDNAME.....1025 MAX_HASHDUMP_ENTRY.....65535 MAXHOSTNAMELEN.....64 MAX_HOSTS_CACHE_LEN.....512 MAX_IP_PORT.....65534 MAX_IPXSAP_NAME_HASH.....179 MAXLABEL.....63 MAX_LANGUAGES_REQUESTED.....4 MAX_LANGUAGES_SUPPORTED.....8 MAX_LASTSEEN_TABLE_SIZE.....4096 MAX_LEN_VENDOR_NAME.....64 MAX_NFS_NAME_HASH.....12288 MAX_NODE_TYPES.....8 MAX_NUM_BAD_IP_ADDRESSES.....3 MAX_NUM_CONTACTED_PEERS.....8 MAX_NUM_DEQUEUE_THREADS.....yes MAX_NUM_DEVICES.....32 MAX_NUM_DHCP_MSG.....8 MAX_NUM_FIN.....4 MAX_NUM_IGNOREDFLOWS.....32 MAX_NUM_NETWORKS.....32 MAX_NUM_PROBES.....16 MAX_NUM_PROCESSES_READLSOFINFO.....1024 MAX_NUM_PROTOS.....64 MAX_NUM_PROTOS_SCREENS.....5 MAX_NUM_ROUTERS.....512 MAX_NUM_STORED_FLAGS.....4 MAX_PASSIVE_FTP_SESSION_TRACKER.....384 MAX_PER_DEVICE_HASH_LIST.....65535 MAX_SESSIONS_CACHE_LEN.....512 MAX_SSL_CONNECTIONS.....32 NAME_MAX.....255 NETDB_SUCCESS.....0 NS_CMPRSFLGS.....192 NS_MAXCDNAME.....255 PACKETSZ.....512 PARM_ENABLE_EXPERIMENTAL.....no PARM_FORK_CHILD_PROCESS.....yes PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15 PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60 PARM_PIPE_READ_TIMEOUT.....15 PARM_SESSION_PURGE_MINIMUM_IDLE.....600 PARM_SHOW_NTOP_HEARTBEAT.....no PARM_SSLWATCHDOG_WAITWOKE_LIMIT.....5 PARM_USE_CGI.....yes PARM_USE_COLOR.....no PARM_USE_HOST.....no PARM_USE_MACHASH_INVERT.....yes PARM_USE_SESSIONS_CACHE.....no PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300 SLL_HDR_LEN.....16 THREAD_MODE.....MT (SSL)