I forget where in the code this is. For sure check globals-defines.h, lots of good stuff there. Grep for "Address [address]" in the source dir. There's lots of stuff in util.c, but I don't recall if the resolution stuff is there or not. Could probably grep for DEBUG [Debug, debug, ebug] and find it that way as well.
________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Mark Gibbons Sent: Thursday, April 14, 2011 3:15 PM To: [email protected] Subject: Re: [Ntop] Custom Host Name compiled from svn source and tried 4.0 stable. I can easy recompile if there are some flags to set for more debug info ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: 14 April 2011 21:09 To: '[email protected]' Subject: Re: [Ntop] Custom Host Name Hmmm.... Did you compile or use a distro package? What version? May want to fetch current code and see if it works. Else, there are some debugs in the source one can enable, but I think it will need a recompile. It spews EVERYTHING involved (or not involved) in reverse lookups, or forward too I guess. ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Mark Gibbons Sent: Thursday, April 14, 2011 3:05 PM To: [email protected] Subject: Re: [Ntop] Custom Host Name My reverse dns is also broken - fails to resolve on fedora 6. nslookup on the local machine works fine but ntop does not. It used to work about 2 years ago but I have had this issue a long time now and have learnt to live with it. ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Gary Gatten Sent: 14 April 2011 20:27 To: '[email protected]' Subject: Re: [Ntop] Custom Host Name It should do lookups unless you disable them with "-n", or unless your local resolver or DNS is broken. Can you manually resolve stuff on that box? Generally speaking -o is required. It depends on your environment, but if you have routers and stuff ntop will associate all your hosts with the MAC address of the router - because it looks at layer 2 instead of later 3. That COULD be related to your resolution stuff, not sure.... G ________________________________ From: [email protected] [mailto:[email protected]] On Behalf Of Paul Smith Sent: Thursday, April 14, 2011 2:23 PM To: [email protected] Subject: Re: [Ntop] Custom Host Name I don't. Should I? I'm using ntop on an ubuntu-server 10.10 with two NICs and a port mirrored from the switch port that goes out to the firewall. I was hoping it would associate with the MAC to avoid situations where DHCP leases have ended and the IP addresses recycled. Is there a reason ntop doesn't just do an nslookup at least for local IP addresses? On Thu, Apr 14, 2011 at 2:11 PM, Gary Gatten <[email protected]<mailto:[email protected]>> wrote: Typically the IP address. Do you have "-o [--no-mac] in your startup args? From: Paul Smith [mailto:[email protected]<mailto:[email protected]>] Sent: Thursday, April 14, 2011 02:03 PM To: [email protected]<mailto:[email protected]> <[email protected]<mailto:[email protected]>> Subject: [Ntop] Custom Host Name I've had ntop running just inside our firewall for a few days now but it doesn't seem to be resolving any dns names. If I go through and add a few Custom Host Names will those names be associated with the hosts' IP address or the MAC address? "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." -- This message has been scanned for viruses and dangerous content by MailScanner<http://www.mailscanner.info/>, and is believed to be clean. "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." -- This message has been scanned for viruses and dangerous content by MailScanner<http://www.mailscanner.info/>, and is believed to be clean. <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
_______________________________________________ Ntop mailing list [email protected] http://listgateway.unipi.it/mailman/listinfo/ntop
