That's only fool proof if the fool has created the specific userid ntop. Many people choose to run ntop under a general unprivledged service account or something else.
That's why there is a generic "<ntopuserid>". I'll add a note to create the id with minimal privledges... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of lapja Sent: Tuesday, July 02, 2002 6:59 PM To: [EMAIL PROTECTED] Subject: Re: [Ntop] Ntop RPM install it was the -P path that wasn't correct. I had created the files in /var/log as usual while the chkconfig file was trying to start ntop with :/daemon $prog -d -P /usr/share/ntop/ -u ntop -i eth0 -w 3000 -E I'd suggest tio change that line in 1STRUN: /usr/bin/ntop -P <your directory> -u <ntopuserid> -A into something a bit more foolprof: /usr/bin/ntop -P /usr/share/ntop/ -u ntop -A Power users would still now how to tweak it and beginers won't be tempted to get confused. As for the https, I did generate the certifciate but it still won't start. Probably I've messed somethig out with the certificate. And that Readme.SSL isn't much helpful. I agree with you Burton and I'd be happy to help to write a better doc but I need first to be able to understand what I am doing :) lapja it was ----- Original Message ----- From: "Burton M. Strauss III" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Cc: <[EMAIL PROTECTED]> Sent: Tuesday, July 02, 2002 4:08 PM Subject: RE: [Ntop] Ntop RPM install > Two possibilities... > > 1. Did you follow the 1STRUN.txt instructions to set the password... No?? > Gee, that's in the comments on the RPM... > > Description : > ntop is a network and traffic analyzer that provides a wealth of information > on > various networking hosts and protocols. ntop is primarily accessed via a > built-in > web interface. Optionally, data may be stored into a database for analysis > or > extracted from the web server in formats suitable for manipulation in perl > or php. > > Note that the command line version, intop, is largely unsupported. > > See docs/1STRUN.txt for the 1st time startup procedure! > > > 2. It looks like it's running -w 0 (i.e. disabled). Try running with -w > 3000 > > > Since the ntop.pem distributed with the software is self-signed, it's often > not appropriate for use, so it's not installed by default. See > docs/README.SSL > > > If the docs aren't clear enough or helpful, then contribute to the effort by > re-writing or expanding them. > -----Burton > > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of lapja > Sent: Tuesday, July 02, 2002 8:16 AM > To: [EMAIL PROTECTED] > Subject: [Ntop] Ntop RPM install > > > Ok call me lazy, I installed ntop rc2 from the RPM's at sourceforge. My > probleme is that it did not start the embedded http service. I tried many > times > > I started it correctly with -w 3000 swithc but it did not start. Then I > enabled also the SSL with '-W 3443'. And there it mumbled me something the > ntop certificate... Right! how many howtos I need to read to make it start > correctly ? > > correct me if I am wrong but if the ssl doesn't start the normal http > service should however start doesn't it ? > I remembered having it installed before from source and had none of these > problems > > Any help would be greatly appreciated ! > > lapja > > > here's the log: > > Jul 2 10:59:36 localhost ntop: sh: lsof: command not found > Jul 2 10:59:36 localhost ntop: Wait please: ntop is coming up... > Jul 2 10:59:36 localhost ntop: 02/Jul/2002 10:59:36 Initializing IP > services... > Jul 2 10:59:36 localhost ntop: 02/Jul/2002 10:59:36 Initializing SSL... > Jul 2 10:59:36 localhost ntop: 02/Jul/2002 10:59:36 Unable to find SSL > certificate 'ntop-cert.pem'. SSL support has been disabled > Jul 2 10:59:36 localhost ntop: 02/Jul/2002 10:59:36 Initializing GDBM... > Jul 2 10:59:36 localhost ntop: 02/Jul/2002 10:59:36 Bye bye: I'm becoming a > daemon... > Jul 2 10:59:36 localhost ntop[19305]: Initializing network devices... > Jul 2 10:59:36 localhost ntop[19305]: ntop v.2.0.99 MT (SSL) > [i686-pc-linux-gnu] (06/04/02 01:32:00 PM build) > Jul 2 10:59:36 localhost ntop[19305]: Listening on [eth0] > Jul 2 10:59:36 localhost ntop[19305]: Copyright 1998-2002 by Luca Deri > <[EMAIL PROTECTED]> > Jul 2 10:59:36 localhost ntop[19305]: Get the freshest ntop from > http://www.ntop.org/ > Jul 2 10:59:36 localhost ntop[19305]: Initializing... > Jul 2 10:59:36 localhost ntop[19305]: Loading plugins (if any)... > Jul 2 10:59:36 localhost ntop: ntop startup succeeded > Jul 2 10:59:36 localhost ntop[19305]: Searching plugins in > /usr/lib/ntop/plugins > Jul 2 10:59:37 localhost ntop[19305]: Welcome to LastSeenWatchPlugin. (C) > 1999 by Andrea Marangoni. > Jul 2 10:59:37 localhost ntop[19305]: Welcome to icmpWatchPlugin. (C) 1999 > by Luca Deri. > Jul 2 10:59:37 localhost kernel: device eth0 entered promiscuous mode > Jul 2 10:59:37 localhost ntop[19305]: Welcome to NetFlow. (C) 2002 by Luca > Deri. > Jul 2 10:59:37 localhost ntop[19305]: Welcome to nfsWatchPlugin. (C) 1999 > by Luca Deri. > Jul 2 10:59:37 localhost ntop[19305]: Welcome to PDAPlugin. (C) 2001-2002 > by L.Deri and W.Brock > Jul 2 10:59:37 localhost ntop[19305]: Welcome to sFlowPlugin. (C) 2002 by > Luca Deri. > Jul 2 10:59:37 localhost ntop[19305]: Resetting traffic statistics... > Jul 2 10:59:37 localhost ntop[19305]: Started thread (1026) for network > packet analyser. > Jul 2 10:59:37 localhost ntop[19305]: Started thread (2051) for idle hosts > detection. > Jul 2 10:59:37 localhost ntop[19305]: Started thread (3076) for DNS address > resolution. > Jul 2 10:59:37 localhost ntop[19305]: Started thread (4101) for address > purge. > Jul 2 10:59:37 localhost ntop[19305]: Initializing plugins (if any)... > Jul 2 10:59:37 localhost ntop[19305]: NetFlow export disabled > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://lists.ntop.org/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://lists.ntop.org/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://lists.ntop.org/mailman/listinfo/ntop
