The log reports are still showing a fair number of 'unknown' Linuxes and
another oddball.

This week:

        source          OS      Cpu         kernel/rlse
        --------------- ------- ----------- ---------------
        61.62.136.xxx   Linux   i686        2.4.22-1.2149

Last week:

        source          OS      Cpu         kernel/rlse
        --------------- ------- ----------- ---------------
     11 209.194.105.xxx Linux   i586        2.4.18-3
      7 217.118.160.xxx Linux   i686        2.4.20
      6 68.106.127.xxx  Linux   i686        2.4.22-1.2149
      6 194.126.100.xxx Linux   i686        2.4.18
      5 217.118.162.xxx Linux   i686        2.4.18-14
      4 200.181.255.xxx Linux   i686        2.4.21-31301U90
      3 80.126.48.xxx   Linux   i686        2.4.24
      3 66.191.138.xxx  Linux   i686        2.4.20-28.9
      3 194.19.72.xxx   Linux   i686        2.4.24-grsec
      2 200.148.76.xxx  Unknown WinNT/2K/XP
      2 195.135.221.xxx Linux   unknown     2.6.0-1-default
      2 148.208.181.xxx Linux   i686        2.4.20-8
      2 134.59.152.xxx  Linux   i686        2.4.20-8
      2 131.183.1.xxx   Linux   i686        2.4.22-1.2149
      1 217.144.235.xxx Linux   i686        2.4.20-28.7
      1 213.66.184.xxx  Linux   i686        2.6.0
      1 213.185.212.xxx Linux   i686        2.4.20-28.9
      1 213.140.128.xxx Linux   i686        2.4.20
      1 211.148.214.xxx Linux   i686        2.4.20-8
      1 165.166.15.xxx  Linux   i686        2.4.22-1.2115
      1 140.111.157.xxx Linux   i686        2.4.20-8

If you recognize yourself, please - off list - let me know the details of
your configuration.

* Distribution
* Version

Plus: the reported data is generated at ./configure time from the
utils/linuxrelease script.  So if I'm not seeing you identified properly,
then that script needs to be tuned.  Please also look for and let me know
the contents of any 'release' or 'version' files in your /etc directory.



Oh, that WinNT user???  The log record looks like this:

200.148.76.xxx - - [23/Jan/2004:09:31:09 -0500] "GET /version.xml HTTP/1.0"
200 1601 www.burtonstrauss.com "-" "ntop/(null) host/WinNT/2K/XP config()
run() gdbm/1.7.3 zlib/1.1.4 access/http
interfaces(\\Device\\NPF_{44179773-B50E-4FC5-8CA9-74DACF0FFB52})" "-"

ntop/(null) is what's throwing me.

The record is from a block allocated to Latin American and Caribbean IP
address Regional Registry - it's a DSL user in Brazil
(200-148-76-xxx.dsl.telesp.net.br) - So if that's you, I'd really love to
know the details.

-----Burton


_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop-dev

Reply via email to