RE: [Ntop-dev] ntop / netflow problem

Burton M. Strauss III Thu, 08 Jan 2004 12:42:51 -0800

2.2 is not supported. The 2.2c version has minimal support, but we're really focused on the cvs 2.2.98 for the upcoming 3.0 release. That's where the fixes are. Among others are counts in the netFlow plugin page showing what ntop received and what was processed/dropped.

Please give the cvs version a try and let us know.

-----Burton

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]On Behalf Of Engels PHAT
Sent: Thursday, January 08, 2004 7:18 AM
To: '[EMAIL PROTECTED]'
Subject: [Ntop-dev] ntop / netflow problem

Installed ntop v.2.2 on linux red hat 7.3 for collecting netwflow V5 data from cisco router!

We can collect data and can see protocol info like % per protocol, etc but we don't see any session info

ie source destination.

The router does send the info!

Below you'll find some detailled info about router output and ntop config."

Someone any idea?

Piet Engels

Oce Technologies

Netherlands

[EMAIL PROTECTED]

router

====================
pein139#sh ip flow export Flow export v1 is enabled for main cache
Exporting flows to 134.188.105.9 (9995) Exporting using source IP address 134.188.105.8 Version 1 flow records 21536 flows exported in 898 udp datagrams 0 flows failed due to lack of export packet 0 export packets were sent up to process level 0 export packets were dropped due to no fib 0 export packets were dropped due to adjacency issues 0 export packets were dropped due to fragmentation failures 0 export packets were dropped due to encapsulation fixup failures
pein139#

pein139#sh ip cache flow IP packet size distribution (39647 total packets):
1-32 64 96 128 160 192 224 256 288 320 352 384 416 448 480
.000 .653 .132 .012 .038 .017 .009 .006 .035 .004 .005 .007 .001 .000 .005
512 544 576 1024 1536 2048 2560 3072 3584 4096 4608 .001 .000 .016 .008 .040 .000 .000 .000 .000 .000 .000

IP Flow Switching Cache, 278544 bytes 220 active, 3876 inactive, 21935 added 378998 ager polls, 0 flow alloc failures Active flows timeout in 30 minutes Inactive flows timeout in 15 seconds last clearing of statistics never
Protocol Total Flows Packets Bytes Packets Active(Sec) Idle(Sec) -------- Flows /Sec /Flow /Pkt /Sec /Flow /Flow TCP-Telnet 18 0.0 27 68 0.0 18.8 9.3 TCP-FTP 2 0.0 14 70 0.0 1.3 1.4 TCP-FTPD 1 0.0 5 94 0.0 0.5 1.5 TCP-WWW 190 0.0 7 548 0.0 3.2 6.5 TCP-SMTP 398 0.0 15 320 0.0 3.1 4.5 TCP-other 17580 0.0 1 83 0.0 0.0 15.0 UDP-DNS 764 0.0 2 74 0.0 9.3 15.4 UDP-NTP 189 0.0 1 76 0.0 0.0 15.4 UDP-other 2030 0.0 2 212 0.0 2.1 15.4 ICMP 543 0.0 3 91 0.0 5.6 15.4 Total: 21715 0.0 1 154 0.0 0.8 14.8
SrcIf SrcIPaddress DstIf DstIPaddress Pr SrcP DstP Pkts Se0/0.1 10.61.9.244 Et0/0 134.188.26.126 11 008A 008A 1 Se0/0.1 160.120.2.32 Et0/0 134.188.105.175 01 0000 0000 2 Se0/0.1 10.61.9.244 Et0/0 134.188.25.200 11 008A 008A 1 Se0/0.1 10.61.9.244 Et0/0 134.188.25.253 11 008A 008A 1 Se0/0.1 10.61.9.244 Et0/0 134.188.25.254 11 008A 008A 1 Se0/0.1 10.61.9.244 Et0/0 134.188.25.59 11 008A 008A 1 Se0/0.1 10.61.9.244 Et0/0 134.188.25.120 11 008A 008A 1 Se0/0.1 10.61.8.234 Et0/0 134.188.254.40 06 0426 07DA

 ntop config

=================

ntop version.....2.2
Built on.....09/30/03 09:38:16 AM
OS.....i686-pc-linux-gnu
ntop Process Id.....9586
http Process Id.....9587


Command line

Started as..../opt/ntop/bin/ntop -i eth0 @/opt/ntop/etc/ntop.conf 

Resolved to..../opt/ntop/bin/ntop
            -i
            eth0
            --user
            ntop
            --db-file-path
            /var/ntop
            --interface
            eth0
            --use-syslog=local1
            --http-server
            0
            --https-server
            3001
            --local-subnets
            134.188.105.0/24
            --domain
            venlo-e.nl.oce.net.
            --reuse-rrd-graphics
            --daemon
            --enable-external-tools
            --large-network
            --no-mac
            --no-interface-merge
            --enable-external-tools
            

Command line parameters are:

-a | --access-log-path.....(default)   (nil)
-b | --disable-decoders.....(default)   No
-c | --sticky-hosts.....(default)   No
-d | --daemon.....Yes
-e | --max-table-rows.....(default)   128
-f | --traffic-dump-file.....(default)   (nil)
-g | --track-local-hosts.....(default)   Track all hosts
-o | --no-mac.....Don't trust MAC Addresses
-i | --interface   (effective).....eth0
-k | --filter-_expression_-in-extra-frame.....(default)   No
-l | --pcap-log.....(default)   (nil)
-m | --local-subnets   (effective).....
-n | --numeric-ip-addresses.....(default)   No
-p | --protocols.....(default)   internal list
-q | --create-suspicious-packets.....(default)   Disabled
-r | --refresh-time.....(default)   120
-s | --no-promiscuous.....(default)   No
-t | --trace-level.....(default)   3
-u | --user.....ntop (uid=101, gid=100)
-w | --http-server.....Inactive
-z | --disable-sessions.....(default)   No
-B | --filter-_expression_.....(default)   none
-D | --domain.....venlo-e.nl.oce.net.
-E | --enable-external-tools.....Yes
-F | --flow-spec.....(default)   none
-K | --enable-debug.....(default)   No
-L | --use-syslog.....local1
-M | --no-interface-merge   (effective).....(parameter -M set, Interfaces separate) No
-O | --pcap-file-path.....(default)   /opt/ntop/var/ntop
-P | --db-file-path...../var/ntop
-U | --mapper.....(default)   (nil)
-W | --https-server.....Active, all interfaces, port 3001
--throughput-chart-type.....(default)   Area
--ignore-sigpipe.....(default)   No
--ssl-watchdog.....(default)   No
--dynamic-purge-limits.....(default)   No
--reuse-rrd-graphics.....Yes
--p3p-cp.....(default)   none
--p3p-uri.....(default)   none
--disable-stopcap.....(default)   No


Note:    (effective)   means that this is the value after ntop has processed the parameter.
(default)   means this is the default value, usually (but not always) set by a #define in globals-defines.h.



Run time/Internal

External tool: lsof.....Yes
Web server (http://).....Not Active
SSL Web server URL.....https://any:3001
GDBM version.....This is GDBM version 1.8.0, as of May 19, 1999.
OpenSSL Version.....OpenSSL 0.9.6b [engine] 9 Jul 2001
zlib version.....1.1.4
Protocol Decoders.....Enabled
Fragment Handling.....Enabled
Tracking only local hosts.....No
# IP Protocols Being Monitored.....18
# Protocol slots.....950
# IP Ports Being Monitored.....58
# Ports slots.....116
# Handled SIGPIPE Errors.....0
# Handled HTTP Requests.....633
Devices (Network Interfaces).....2
Domain name (short).....
IP to country flag table (entries).....47455
Total Hash Collisions (Vendor/Special) (lookup).....0
Local Networks.....134.188.105.0/255.255.255.0 [device eth0]
          134.188.105.9/255.255.255.255 [device NetFlow-device]


Memory allocation - data segment

arena limit, getrlimit(RLIMIT_DATA, ...).....-1
Allocated blocks (ordblks).....2880
Allocated (arena).....35704832
Used (uordblks).....34658712
Free (fordblks).....1046120


Memory allocation - mmapped

Allocated blocks (hblks).....5
Allocated bytes (hblkhd).....2818048


Memory Usage

IPX/SAP Hash Size (bytes).....1897
IP to country flag table (bytes).....1454304 (1.4 MB)
Bytes per entry.....30.6
Current memory usage.....38522880
Base memory usage.....6198064
Hosts stored (active+cache).....27104 = (26937 + 167)
(very) Approximate memory per host.....1.2KB


Host Memory Cache

Limit.....#define MAX_HOSTS_CACHE_LEN 512
Current Size.....167
Maximum Size.....511
# Entries Reused.....4834


MAC/IPX Hash tables

IPX/SAP Hash Size (entries).....179
IPX/SAP Hash Collisions (load).....0
IPX/SAP Hash Collisions (use).....0


Packet queue

Queued to Process.....0
Maximum queue.....0


Host/Session counts - global

Purge idle hosts.....Enabled
Purged hosts.....5001
Maximum hosts to purge per cycle.....512
DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512
Terminated Sessions.....13,466

Host/Session counts - Device 0 (eth0)
Actual Hash Size.....28672
Stored hosts.....26935 [93 %]
Sessions.....111
Max Num. Sessions.....527

Host/Session counts - Device 1 (NetFlow-device)
Actual Hash Size.....32
Stored hosts.....2 [6 %]
Sessions.....0
Max Num. Sessions.....0


Address Resolution

DNS sniffed:

DNS Packets sniffed.....106469
  less 'requests'.....53612
  less 'failed'.....33756
  less 'reverse dns' (in-addr.arpa).....1813
DNS Packets processed.....17288
Stored in cache (includes aliases).....16443


IP to name - ipaddr2str():

Total calls.....31936
....OK.....1361
....Total not found.....30575
........Not found in cache.....30575
........Too old in cache.....0


Queued - dequeueAddress():

Total Queued.....30575
Not queued (duplicate).....0
Maximum Queued.....34
Current Queue.....0


Resolved - resolveAddress():

Addresses to resolve.....30575
....less 'Error: No cache database'.....0
....less 'Found in ntop cache'.....0
Gives: # gethost (DNS lookup) calls.....30575


DNS lookup calls:

DNS resolution attempts.....30575
....Success: Resolved.....333
....Failed.....30242
........HOST_NOT_FOUND.....30241
........NO_DATA.....0
........NO_RECOVERY.....0
........TRY_AGAIN (don't store).....1
........Other error (don't store).....0
DNS lookups stored in cache.....30574
Host addresses kept numeric.....30242


Vendor Lookup Table

Input lines read.....131
Records added total.....121
.....includes special records.....59
getVendorInfo() calls.....0
getSpecialVendorInfo() calls.....241
Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
Found 24bit (xx:xx:xx) match.....7
Found multicast bit set.....0
Found LAA (Locally assigned address) bit set.....0


Thread counts

Active.....8
Dequeue.....1
Children (active).....0

Reject duration (seconds).....300
It is now.....Thu Jan  8 13:54:43 2004


lsof data

Updating.....Yes
# Monitored Processes.....29
Directory (search) order

Data Files......<br>/opt/ntop/share/ntop<br>
Config Files......<br>/opt/ntop/etc/ntop<br>/etc<br>
Plugins....../plugins<br>/opt/ntop/lib/ntop/plugins<br>


Compile Time: ./configure

./configure parameters.....--prefix=/opt/ntop
Built on (Host).....i686-pc-linux-gnu
Built for (Target).....i686-pc-linux-gnu
compiler (cflags).....gcc -DLINUX -g -O2 -Wshadow -Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -fPIC -DHAVE_CONFIG_H
include path.....-I/opt/pkg/ntop/ntop-2.2/gdchart0.94c/zlib-1.1.4 -I/opt/pkg/ntop/ntop-2.2/gdchart0.94c -I/opt/pkg/ntop/ntop-2.2/gdchart0.94c/gd-1.8.3
system libraries.....-lxml2 -lglib -lpthread -lresolv -lnsl -lpng -lm -lssl -lcrypto -lpcap -lgdbm -ldl -lcrypt -lc -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c/zlib-1.1.4 -lz -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c -lgdchart -L/opt/pkg/ntop/ntop-2.2/gdchart0.94c/gd-1.8.3 -lgd
install path...../opt/ntop
GNU C (gcc) version.....2.96 20000731 (Red Hat Linux 7.3 2.96-113) (2.96.0)


Internationalization (i18n)

i18n enabled.....No


Compile Time: Debug settings in globals-defines.h

DEBUG.....no
ADDRESS_DEBUG.....no
DNS_DEBUG.....no
DNS_SNIFF_DEBUG.....no
FTP_DEBUG.....no
GDBM_DEBUG.....no
HASH_DEBUG.....no
HOST_FREE_DEBUG.....no
HTTP_DEBUG.....no
IDLE_PURGE_DEBUG.....no
MEMORY_DEBUG.....no
NETFLOW_DEBUG.....no
SEMAPHORE_DEBUG.....no
SESSION_TRACE_DEBUG.....no
SSLWATCHDOG_DEBUG.....no
STORAGE_DEBUG.....no
UNKNOWN_PACKET_DEBUG.....no


Compile Time: globals-define.h

PARM_PRINT_ALL_SESSIONS.....no
PARM_PRINT_RETRANSMISSION_DATA.....no
PARM_FORK_CHILD_PROCESS.....yes (normal)
CGI Scripts.....globals-defines.h: #define PARM_USE_CGI
Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */
Buggy gethostbyaddr() - use alternate implementation.....globals-defines.h: /* #define PARM_USE_HOST */
MAKE_ASYNC_ADDRESS_RESOLUTION.....yes
MAKE_WITH_SSLWATCHDOG.....yes
MAKE_WITH_SSLWATCHDOG_RUNTIME (derived).....yes
Bad IP Address table size.....globals-defines.h: #define MAX_NUM_BAD_IP_ADDRESSES 3
Minimum refresh interval (seconds).....#define PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15
Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64
Maximum # of routers (Local Subnet Routers report).....#define MAX_NUM_ROUTERS 512
Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32
Maximum # of processes for lsof report.....#define MAX_NUM_PROCESSES_READLSOFINFO 1024
Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS 1024
Allocated # of passive FTP sessions.....#define MAX_PASSIVE_FTP_SESSION_TRACKER 384
Inactive passive FTP session timeout (seconds).....#define PARM_PASSIVE_SESSION_MINIMUM_IDLE 60


Compile Time: Hash Table Sizes

Initial size.....#define CONST_HASH_INITIAL_SIZE 32
After 1st extend.....#define CONST_HASH_MINIMUM_SIZE 512
Intermediate increase factor.....#define CONST_HASH_INCREASE_FACTOR 2
Factor growth until.....#define CONST_HASH_FACTOR_MAXIMUM 4096
Then grow (linearly) by.....#define CONST_HASH_TERMINAL_INCREASE 4096


Compile Time: globals-define.h

Chart Format.....globals-report.h: #define CHART_FORMAT ".png"


Compile Time: config.h

CFG_ETHER_HEADER_HAS_EA.....no
CFG_MULTITHREADED.....yes
HAVE_ALARM.....yes
HAVE_ALLOCA.....yes
HAVE_ALLOCA_H.....yes
HAVE_ARPA_NAMESER_H.....yes
HAVE_BACKTRACE.....yes
HAVE_BZERO.....yes
HAVE_CTIME_R.....yes
HAVE_CURSES_H.....no
HAVE_DLFCN_H.....yes
HAVE_DL_H.....no
HAVE_DOPRNT.....no
HAVE_ENDPWENT.....yes
HAVE_ERRNO_H.....yes
HAVE_FACILITYNAMES.....yes
HAVE_FCNTL_H.....yes
HAVE_FORK.....yes
HAVE_GDBM_H.....yes
HAVE_GDCPIE_H.....yes
HAVE_GD_H.....yes
HAVE_GDOME_H.....no
HAVE_GETHOSTBYADDR.....yes
HAVE_GETHOSTBYADDR_R.....yes
HAVE_GETHOSTBYNAME.....yes
HAVE_GETHOSTNAME.....yes
HAVE_GETIPNODEBYADDR.....no
HAVE_GETPASS.....yes
HAVE_GETTIMEOFDAY.....yes
HAVE_GLIBCONFIG_H.....no
HAVE_GLIB_H.....no
HAVE_IF_H.....no
HAVE_IN6_ADDR.....yes
HAVE_INT16_T.....yes
HAVE_INT32_T.....yes
HAVE_INT64_T.....yes
HAVE_INT8_T.....yes
HAVE_INTTYPES_H.....yes
HAVE_LANGINFO_H.....yes
HAVE_LIBC.....yes
HAVE_LIBCRYPT.....yes
HAVE_LIBCRYPTO.....yes
HAVE_LIBDL.....yes
HAVE_LIBDLD.....no
HAVE_LIBGD.....yes
HAVE_LIBGDBM.....yes
HAVE_LIBGDOME.....no
HAVE_LIBGLIB.....yes
HAVE_LIBM.....yes
HAVE_LIBNSL.....yes
HAVE_LIBPCAP.....yes
HAVE_LIBPNG.....yes
HAVE_LIBPOSIX4.....no
HAVE_LIBPTHREAD.....yes
HAVE_LIBPTHREADS.....no
HAVE_LIBRESOLV.....yes
HAVE_LIBRT.....no
HAVE_LIBSOCKET.....no
HAVE_LIBSSL.....yes
HAVE_LIBWRAP.....no
HAVE_LIBXML2.....no
HAVE_LIBZ.....yes
HAVE_LIMITS_H.....yes
HAVE_LOCALE_H.....yes
HAVE_LOCALTIME_R.....yes
HAVE_LONG_DOUBLE.....no
HAVE_MATH_H.....yes
HAVE_MEMCHR.....yes
HAVE_MEMORY_H.....yes
HAVE_MEMSET.....yes
HAVE_NCURSES_H.....no
HAVE_NDIR_H.....no
HAVE_NETDB_H.....yes
HAVE_OPENSSL.....yes
HAVE_OPENSSL_CRYPTO_H.....yes
HAVE_OPENSSL_ERR_H.....yes
HAVE_OPENSSL_PEM_H.....yes
HAVE_OPENSSL_RSA_H.....yes
HAVE_OPENSSL_SSL_H.....yes
HAVE_OPENSSL_X509_H.....yes
HAVE_PCAP_FREECODE.....yes
HAVE_PCAP_H.....yes
HAVE_PCAP_OPEN_DEAD.....yes
HAVE_PNG_H.....yes
HAVE_PTHREAD_H.....yes
HAVE_PUTENV.....yes
HAVE_PWD_H.....yes
HAVE_READLINE.....no
HAVE_READLINE_READLINE_H.....no
HAVE_RE_COMP.....yes
HAVE_REGCOMP.....yes
HAVE_REGEX.....yes
HAVE_RRD.....yes
HAVE_RRD_H.....yes
HAVE_SCHED_H.....yes
HAVE_SCHED_YIELD.....yes
HAVE_SECURITY_PAM_APPL_H.....yes
HAVE_SELECT.....yes
HAVE_SEMAPHORE_H.....yes
HAVE_SETJMP_H.....yes
HAVE_SHADOW_H.....yes
HAVE_SIGNAL_H.....yes
HAVE_SNPRINTF.....yes
HAVE_SOCKET.....yes
HAVE_SQRT.....yes
HAVE_STDARG_H.....yes
HAVE_STDIO_H.....yes
HAVE_STDLIB_H.....yes
HAVE_STRCASECMP.....yes
HAVE_STRCHR.....yes
HAVE_STRCSPN.....yes
HAVE_STRDUP.....yes
HAVE_STRERROR.....yes
HAVE_STRFTIME.....yes
HAVE_STRING_H.....yes
HAVE_STRINGS_H.....yes
HAVE_STRNCASECMP.....yes
HAVE_STRPBRK.....yes
HAVE_STRRCHR.....yes
HAVE_STRSPN.....yes
HAVE_STRSTR.....yes
HAVE_STRTOK_R.....yes
HAVE_STRTOUL.....yes
HAVE_SYS_DIR_H.....no
HAVE_SYS_IOCTL_H.....yes
HAVE_SYS_LDR_H.....no
HAVE_SYS_NDIR_H.....no
HAVE_SYS_RESOURCE_H.....yes
HAVE_SYS_SCHED_H.....no
HAVE_SYS_SOCKIO_H.....no
HAVE_SYS_TIME_H.....yes
HAVE_SYS_TYPES_H.....yes
HAVE_SYS_UN_H.....yes
HAVE_TCPD_H.....yes
HAVE_TM_ZONE.....yes
HAVE_TZNAME.....no
HAVE_U_INT16_T.....yes
HAVE_U_INT32_T.....yes
HAVE_U_INT64_T.....yes
HAVE_UINT64_T.....no
HAVE_U_INT8_T.....yes
HAVE_UNAME.....yes
HAVE_UNISTD_H.....yes
HAVE_VFORK.....yes
HAVE_VFORK_H.....no
HAVE_VPRINTF.....yes
HAVE_WORKING_FORK.....yes
HAVE_WORKING_VFORK.....yes
HAVE_ZLIB_H.....yes
MAKE_MICRO_NTOP.....no
MAKE_WITH_FTPDATA_ASSUMED.....no
MAKE_WITH_GDCHART.....yes
MAKE_WITH_I18N.....no
MAKE_WITH_IGNORE_SIGPIPE.....no
MAKE_WITH_LARGERRDPOP.....no
MAKE_WITH_SSLV3_SUPPORT.....no
MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no
MAKE_WITH_ZLIB.....yes
__PROTOTYPES.....yes
PROTOTYPES.....yes
SETVBUF_REVERSED.....no
TIME_WITH_SYS_TIME.....yes
TM_IN_SYS_TIME.....no
CFG_CONFIGFILE_DIR - config file directory...../opt/ntop/etc/ntop
CFG_DATAFILE_DIR - data file directory...../opt/ntop/share/ntop
CFG_DBFILE_DIR - database file directory...../opt/ntop/var/ntop
CFG_PLUGIN_DIR - plugin file directory...../opt/ntop/lib/ntop/plugins
CFG_RUN_DIR - run file directory...../opt/ntop/var/ntop
CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes
CFG_xxxxxx_ENDIAN (Hardware Endian).....little


Compile Time: globals-defines.h

EMSGSIZE.....90
ETHERMTU.....1500
LEN_CMDLINE_BUFFER.....4096
LEN_FGETS_BUFFER.....512
LEN_GENERAL_WORK_BUFFER.....1024
LEN_MEDIUM_WORK_BUFFER.....64
LEN_SMALL_WORK_BUFFER.....16
LEN_TIME_STAMP_BUFFER.....2
MAKE_NTOP_PACKETSZ_DECLARATIONS.....no
MAKE_RMON_SUPPORT.....yes
MAKE_WITH_FORK_COPYONWRITE.....yes
MAKE_WITH_HTTPSIGTRAP.....no
MAKE_WITH_RRDSIGTRAP.....no
MAKE_WITH_SCHED_YIELD.....yes
MAKE_WITH_SEMAPHORES.....yes
MAKE_WITH_SYSLOG.....yes
MAKE_WITH_XMLDUMP.....no
MAX_ADDRESSES.....35
MAX_ALIASES.....35
MAX_ASSIGNED_IP_PORTS.....1024
MAXCDNAME.....255
MAX_DEVICE_NAME_LEN.....64
MAXDNAME.....1025
MAX_HASHDUMP_ENTRY.....65535
MAXHOSTNAMELEN.....64
MAX_HOSTS_CACHE_LEN.....512
MAX_IP_PORT.....65534
MAX_IPXSAP_NAME_HASH.....179
MAXLABEL.....63
MAX_LANGUAGES_REQUESTED.....4
MAX_LANGUAGES_SUPPORTED.....8
MAX_LASTSEEN_TABLE_SIZE.....4096
MAX_LEN_VENDOR_NAME.....64
MAX_NFS_NAME_HASH.....12288
MAX_NODE_TYPES.....8
MAX_NUM_BAD_IP_ADDRESSES.....3
MAX_NUM_CONTACTED_PEERS.....8
MAX_NUM_DEQUEUE_THREADS.....yes
MAX_NUM_DEVICES.....32
MAX_NUM_DHCP_MSG.....8
MAX_NUM_FIN.....4
MAX_NUM_IGNOREDFLOWS.....32
MAX_NUM_NETWORKS.....32
MAX_NUM_PROBES.....16
MAX_NUM_PROCESSES_READLSOFINFO.....1024
MAX_NUM_PROTOS.....64
MAX_NUM_PROTOS_SCREENS.....5
MAX_NUM_ROUTERS.....512
MAX_NUM_STORED_FLAGS.....4
MAX_PASSIVE_FTP_SESSION_TRACKER.....384
MAX_PER_DEVICE_HASH_LIST.....65535
MAX_SESSIONS_CACHE_LEN.....512
MAX_SSL_CONNECTIONS.....32
NAME_MAX.....255
NETDB_SUCCESS.....0
NS_CMPRSFLGS.....192
NS_MAXCDNAME.....255
PACKETSZ.....512
PARM_ENABLE_EXPERIMENTAL.....no
PARM_FORK_CHILD_PROCESS.....yes
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
PARM_PIPE_READ_TIMEOUT.....15
PARM_SESSION_PURGE_MINIMUM_IDLE.....600
PARM_SHOW_NTOP_HEARTBEAT.....no
PARM_SSLWATCHDOG_WAITWOKE_LIMIT.....5
PARM_USE_CGI.....yes
PARM_USE_COLOR.....no
PARM_USE_HOST.....no
PARM_USE_MACHASH_INVERT.....yes
PARM_USE_SESSIONS_CACHE.....no
PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
SLL_HDR_LEN.....16
THREAD_MODE.....MT (SSL)

RE: [Ntop-dev] ntop / netflow problem

Reply via email to