Actually, it appears your resolver is NOT doing much of anything... DNS Packets sniffed.....457 ... DNS Packets processed.....2
So there's very little DNS activity on the network to be sniffed... DNS resolution attempts.....203 ....Success: Resolved.....10 ....Failed.....193 ........HOST_NOT_FOUND.....193 ... Host addresses kept numeric.....193 So most of the host addresses are being kept numeric. You need to figure out why ntop can't resolve the addresses and fix that. ntop looks like it's working fine... -----Burton -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Filippo Stefanelli Sent: Friday, May 30, 2003 8:57 AM To: [EMAIL PROTECTED] Subject: [Ntop] (no subject) Hi, thanks again burton, I try various things. I am pretty sure my resolver does his work well. I past here more details on my errors, it seem that only netbios and names of external IP address are reported correctly: Address Resolution DNS sniffed: DNS Packets sniffed.....457 less 'requests'.....228 less 'failed'.....218 less 'reverse dns' (in-addr.arpa).....9 DNS Packets processed.....2 Stored in cache (includes aliases).....2 IP to name - ipaddr2str(): Total calls.....208 ....OK.....5 ....Total not found.....203 ........Not found in cache.....203 ........Too old in cache.....0 Queued - dequeueAddress(): Total Queued.....203 Not queued (duplicate).....0 Maximum Queued.....8 Current Queue.....0 Resolved - resolveAddress(): Addresses to resolve.....203 ....less 'Error: No cache database'.....0 ....less 'Found in ntop cache'.....0 Gives: # gethost (DNS lookup) calls.....203 DNS lookup calls: DNS resolution attempts.....203 ....Success: Resolved.....10 ....Failed.....193 ........HOST_NOT_FOUND.....193 ........NO_DATA.....0 ........NO_RECOVERY.....0 ........TRY_AGAIN (don't store).....0 ........Other error (don't store).....0 DNS lookups stored in cache.....203 Host addresses kept numeric.....193 All failed are for host not found!!! I am on a linux box with redhat9. I have put in /etc/hosts the right info for the loopback and for the ip of the machine. I have in /etc/host.conf force the order to: bind,hosts I have put in /etc/resolv.conf the name of our dns that works with no problems and also the string domain with our internal domain. I don't know what to do. Filippo. _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
