Good luck with the security weenies... ntop stores data in internal structures. Very little is logged to syslog - more could be if you want to enable it.
As to promiscuous mode, what is the problem - other than having an interface in promiscuous mode is a signature of a sniffer and security folks look for unauthorized sniffers? ntop needs promiscuous mode so that it sees the full range of traffic. Any similar product will do the same thing. If the security people think traffic on the wire is secure, they're wrong! Face facts - just about every Windows user, except for 2K/XP Pro (and then only if TBTP have especially locked them down)can install the windows version of tcpdump... If it's a checklist item, just gen up a form to "authorize" it, have the boss and VP/CIO sign it and give it to them. The latest released version is 2.0 with a 2.0.1 also available. Neither of them are recommended as there was a potential, unlikely, security issue. Current development is 2.0.99, working towards a 2.1 release candidate. -----Burton -----Original Message----- From: Javid Abdul-AJAVID1 [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 16, 2002 8:50 AM To: '[EMAIL PROTECTED]'; '[EMAIL PROTECTED]' Subject: RE: [Ntop] NTOP website not displaying host info Is there security hole in ntop whats the latest version on ntop Our security guy tells me that i shouldnt be running ntop , since running interface in promiscuous mode for 24X7 is bad idea also where does ntop stores the date, does it log? I really apprecate if somebody answeres this, as i liked the tool lot but i need to convice our security guys with above questions. thanks again Abdul -----Original Message----- From: Burton M. Strauss III [mailto:[EMAIL PROTECTED]] Sent: Thursday, May 16, 2002 8:16 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: RE: [Ntop] NTOP website not displaying host info 1. Try a more recent snapshot. At that point, I was recommending 22Apr. At present, I'm recommending 12 or 13 May 2002. 2. Lose the attitude. If you want to improve ntop then offer help - if it's out of date, submit an update for the FAQ. We would love to have it. If you - as a business - expect commercial level support, then pay for it... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Chris Nicola Sent: Wednesday, May 15, 2002 6:34 PM To: [EMAIL PROTECTED] Subject: [Ntop] NTOP website not displaying host info I have installed 2.0.99 from April 15th. The install did not go amazingly well. As I mentioned before I ran into the version-info problem documented in the (incredibly out of date) FAQ. While I don't know why this is still a problem, as it was first noticed in December, it seems to be haunting me. Now that it is installed and working it is not displaying all of the host info pages. Some will come up and other will be just be blank (white). Either way it does load a page. Everytime I start it up different hosts will be affected. Any ideas? Thanks, Chris _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
