Hi,

no change. The result of the debug:

Tue Feb 24 21:36:19 2004  CMPFCTN_DEBUG: setResolvedName(0x085d9b60) 0  -> 5 Compaq 
Computer Corporation:41:30:76 - hash.c(1170)
Tue Feb 24 21:36:19 2004  CMPFCTN_DEBUG: setResolvedName(0x085d9b60) 5 Compaq Computer 
Corporation:41:30:76 -> 6 192.168.11.230 - pbuf.c(3216)
Tue Feb 24 21:36:59 2004  CMPFCTN_DEBUG: setResolvedName(0x085dd730) 0  -> 6 
192.168.11.100 - hash.c(1160)

but ntop shows an empty entry in the columns after getting the the following packets:

    No. Time        Source                Destination           Protocol Info
      1 0.000000    192.168.11.100         192.168.11.255         BROWSER  Local 
Master Announcement ENTE, Workstation, Server, Print Queue Server, Xenix Server, NT 
Workstation, NT Server, Master Browser
      2 0.000005    192.168.11.100         192.168.11.255         BROWSER  
Domain/Workgroup Announcement WORKGROUP, NT Workstation, Domain Enum

No debug output but wrong result. An empty entry in the 'host name' column.

Concerning 'edge case': the relevant packets are UDP packets and the normal
way in smaller Windows networks to make the name resolution. It's the NetBIOS
over TCP crap. Not my favorite but not unusual.

Cheers 

Markus


_________________________________

On Tuesday 24 February 2004 16:25, Burton M. Strauss III wrote:
> Luca's change overnight may also have fixed it - please check.
>
> -----Burton
>
> > -----Original Message-----
> > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
> > Burton M. Strauss III
> > Sent: Tuesday, February 24, 2004 7:21 AM
> > To: [EMAIL PROTECTED]
> > Subject: RE: [Ntop] New sorting routines in cvs - these are post 3.0pre1
> > - TEST NOW OR HOLD YOUR WATER
> >
> >
> > It's an edge case to me - I don't have a pure windows network to test on
> > - everything uses tcp/ip.
> >
> > There's nothing odd about being in any particular state for any amount of
> > time: Don't think of it has "hung".
> >
> > It's perfectly normal, based on what ntop sees.  Remember, it's unlikely
> > that ntop will be started just as everything on the network identifies
> > itself.  Rather it's going to learn about the more active hosts first and
> > the less active only when they send periodic announcements or respond to
> > device polls like some router/gateways perform.
> >
> >
> > I adjusted the debug message yesterday so only actual transitions are
> > reported, i.e. you won't see the 6->3
> > stuff because it never happens.  I'm assuming you didn't update your code
> > after that commit?? The time stamp on the ntop-dev message is Mon
> > 2/23/2004
> > 4:51 PM (US Central Time Zone).
> >
> > Can you check the generated HTML and see what's in the cell.  With that
> > commit, there should now be <!-- --> (HTML comments) showing how ntop
> > populated the cell.
> >
> > Thanks!
> >
> > -----Burton
> >

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to