I just committed a patch this morning that puts address resolution stats into info.html (Configuration page) and textinfo.html.
Address Resolution DNS responses sniffed.....61 Total Queued.....12 Current Queue.....0 Maximum Queued.....8 Total calls.....12 less 'Found in ntop cache'.....0 less 'Error: No cache database'.....0 Gives: # gethost (DNS lookup) calls.....12 Success: Resolved.....8 Error: HOST_NOT_FOUND.....4 Error: NO_DATA.....0 Error: NO_RECOVERY.....0 Error: TRY_AGAIN.....0 Error: Other error.....0 Host addresses kept numeric.....4 Note that the result of a dns lookup should be the same as the results of a nslookup/dig of the address from the ntop host. See if you're getting lots of TRY_AGAINs - I had that when my resolv.conf was messed up (pointing at a broken caching nameserver). -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Eric Greenwood Sent: Thursday, February 27, 2003 6:09 PM To: [EMAIL PROTECTED] Subject: [Ntop] Re: DNS and Netflow Burton, I too have issues with ntop not looking up names for Netflow hosts when the interface is switched. Only some hosts resolve , I suspect with packet sniffing, and yet they all can be resolved from the ntop host cmd line. I saw your note about address.c, but decoding that was beyond me. Is this a local interface issue ?? - anything I can do to help fix ??, as I would prefer all hosts to be resolved. Rgds Eric _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
