RE: [Ntop] What are the high/medium/log risk host flags based on?

[Burton M. Strauss III]

Title: What are the high/medium/log risk host flags based on?

Check the code - grep for Risk_high, you'll ultimately find it in reportUtils.c:

 

/* ******************************* */
/*
   Return codes:

 

   OK          0
   Warning     1
   Error       2!
*/

 

u_short isHostHealthy(HostTraffic *el) {
  u_char riskFactor = 0;

 

  if(hasWrongNetmask(el)) {
    if(riskFactor < 1) riskFactor = 1;
  }

 

  if(hasDuplicatedMac(el)) {
    if(riskFactor < 2) riskFactor = 2;
  }

 

  return(riskFactor);
}

 

-----Burton

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Eugene Spiker
Sent: Tuesday, January 08, 2002 11:32 AM
To: [EMAIL PROTECTED]
Subject: [Ntop] What are the high/medium/log risk host flags based on?

All,

I have been testing out the ntop program the last few days and so far I am very impressed. The symbols that appear next to some of the host names are self explanatory for the most part. What measurement are the small flags that indicate risk based on?

Thank you in advance for your assistance.

Eugene (Gene) Spiker