n t o p v e r s i o n '3.0pre1' p r o b l e m r e p o r t
From: Bill Richardson
EMail: [EMAIL PROTECTED]
Date: Fri Feb 20 13:44:03 2004
Problem Report Id: PR_QDA9WTB
----------------------------------------------------------------------------
Summary
OS(uname): Redhat AS 2.1 sysname(Linux) release(2.4.9-e.38smp) version(#1
SMP Wed Feb 11 00:09:01 EST 2004) machine(i686)
ntop from: source
Hardware: CPU: i686 2 Gig
# Processors: 2
Memory: 1000 MB
Packets
Received: 143343813
Processed: 143343813 (immediately)
Queued: 0
Lost: 0 (queue full)
Queue: Current: 0 Maximum: 0
Network:
Merged packet counts:
Received: 143343813
Ethernet: 143343813
IP: 143338972
Network Interface 0 eth0
Received (pcap): 143343813
Dropped (pcap): 0
Mfg: ____________________ Model: ____________________
NIC Speed: 10/100/1000/Other Bus: PCI ISA USB Firewire Other
Location: Public Internet / LAN / WAN
Bandwidth: Dialup DSL/CableModem fT1 T1 10Mbps T3 100Mbps+
# Hosts (machines): __________
----------------------------------------------------------------------------
Log extract
Thu Feb 19 11:33:35 2004 CHKVER: * benefits both the users and developers
of ntop. *
Thu Feb 19 11:33:35 2004 CHKVER: *
*
Thu Feb 19 11:33:35 2004 NETFLOW: Welcome to NetFlow.(C) 2002-04 by Luca
Deri
Thu Feb 19 11:33:35 2004 CHKVER: * Review the man ntop page for more
information. *
Thu Feb 19 11:33:35 2004 NFS: Welcome to nfsWatchPlugin. (C) 1999-2004 by
Luca Deri
Thu Feb 19 11:33:35 2004 CHKVER: *
*
Thu Feb 19 11:33:35 2004 PDA: Welcome to PDAPlugin. (C) 2001-2004 by L.Deri
and W.Brock
Thu Feb 19 11:33:35 2004 CHKVER:
**********************PRIVACY**NOTICE**********************
Thu Feb 19 11:33:35 2004 SFLOW: Welcome to sFlowPlugin. (C) 2002-04 by Luca
Deri
Thu Feb 19 11:33:35 2004 RRD: Welcome to rrdPlugin. (C) 2002-04 by Luca
Deri.
Thu Feb 19 11:33:35 2004 XML: Welcome to xmldump plugin. (C) 2003-2004 by
Burton Strauss
Thu Feb 19 11:33:35 2004 Calling plugin start functions (if any)
Thu Feb 19 11:33:35 2004 RRD: Welcome to the RRD plugin
Thu Feb 19 11:33:35 2004 RRD: Mask for new directories is 0700
Thu Feb 19 11:33:35 2004 RRD: Mask for new files is 0066
Thu Feb 19 11:33:35 2004 THREADMGMT: rrd thread (0) started
Thu Feb 19 11:33:35 2004 RRD: Started thread (49159) for data collection.
Thu Feb 19 11:33:35 2004 SSL is present but https is disabled: use -W
<https port> for enabling it
Thu Feb 19 11:33:35 2004 Note: Reporting device initally set to 0 [eth0]
(merged)
Thu Feb 19 11:33:35 2004 INITWEB: Initializing web server
Thu Feb 19 11:33:35 2004 INITWEB: Initializing tcp/ip socket connections
for web server
Thu Feb 19 11:33:35 2004 INITWEB: Initialized socket, port 3000, address
(any)
Thu Feb 19 11:33:35 2004 INITWEB: Waiting for HTTP connections on port 3000
Thu Feb 19 11:33:35 2004 INITWEB: Starting web server
Thu Feb 19 11:33:35 2004 THREADMGMT: web connections thread (28976)
started...
Thu Feb 19 11:33:35 2004 Note: SIGPIPE handler set (ignore)
Thu Feb 19 11:33:35 2004 WEB: ntop's web server is now processing requests
Thu Feb 19 11:33:35 2004 THREADMGMT: Started thread (57352) for web server
Thu Feb 19 11:33:35 2004 THREADMGMT: pcap dispatch thread running...
Thu Feb 19 11:33:35 2004 THREADMGMT: Started thread (65545) for network
packet sniffing on eth0
Thu Feb 19 11:34:07 2004 RRD: Locking mutex (may block for a little while)
Thu Feb 19 11:34:07 2004 RRD: Locked mutex, continuing shutdown
Thu Feb 19 11:34:07 2004 RRD: killThread() succeeded
Thu Feb 19 11:34:07 2004 RRD: Thanks for using the rrdPlugin
Thu Feb 19 11:34:07 2004 RRD: Done
Thu Feb 19 11:34:07 2004 RRD: Welcome to the RRD plugin
Thu Feb 19 11:34:07 2004 RRD: Started thread (73738) for data collection.
Thu Feb 19 11:34:07 2004 THREADMGMT: rrd thread (73738) started
Thu Feb 19 11:34:07 2004 RRD: Mask for new directories is 0700
Thu Feb 19 11:34:07 2004 RRD: Mask for new files is 0066
Fri Feb 20 07:40:47 2004 RRD: Locking mutex (may block for a little while)
Fri Feb 20 07:40:47 2004 RRD: Locked mutex, continuing shutdown
Fri Feb 20 07:40:47 2004 RRD: killThread() succeeded
Fri Feb 20 07:40:47 2004 RRD: Thanks for using the rrdPlugin
Fri Feb 20 07:40:47 2004 RRD: Done
Fri Feb 20 07:40:47 2004 RRD: Welcome to the RRD plugin
Fri Feb 20 07:40:47 2004 THREADMGMT: rrd thread (73738) started
Fri Feb 20 07:40:47 2004 RRD: Started thread (81931) for data collection.
Fri Feb 20 07:40:47 2004 RRD: Mask for new directories is 0700
Fri Feb 20 07:40:47 2004 RRD: Mask for new files is 0066
----------------------------------------------------------------------------
Problem Description
Part 1)
RRD Domain Graphing reports wrong. The domain graphs will show peaks that
are 100 times more than what was really happening as compared to the ntop
"Host Traffic Stats"
For example: If I pick a domain that say I see 2 hosts in and compare the
total IP traffic "RRD" it may say 10 GB for 24 hours for the 2 hosts
combined. I then take the same two hosts on ntop "Info About" and add the
totals I see the right figure of 20 MB total for 24 hours.
Has anyone else see this?
Thanks and this new ntop works like a champ! No more crashes...
Part 1) -Burtons response
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: RE: [Ntop] RRD bug on Domain Graphing (PR QDA9WTB)
Date: Fri, 20 Feb 2004 11:19:41 -0600
Reply-To: [EMAIL PROTECTED]
This is a multi-part message in MIME format.
------=_NextPart_000_010D_01C3F7A3.6F854240
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 7bit
I'm missing what you are seeing...
The graph and count both come from the rrd data. See the attached gif.
Let's dump the data to be sure:
# rrdtool fetch IP_SSHRcvdBytes.rrd AVERAGE | grep -v nan | grep -v
'0.0000000000e+00'
counter
1077260700: 6.4453333333e+02
1077261000: 3.0293066667e+02
So both the graph and dump show two data points, one for 644.533 bytes/sec
and one for 302.93 byte/sec. Remember, those represent 300s intervals, so
the total is 283,xxx bytes or 277KB which is what ntop shows.
Now it's possible for the rrd graph to include MORE data than the other
pages - those show just what ntop has in it's tables (i.e. current run)
while rrd is a database and shows all the history.
I notice you're not running with sticky-hosts. Is it possible that the
older data has been purged?
Say you have a host that does a huge xfer at say 7pm and again at 6am. But
nothing in the interim. When you check the data at 6:01 am, you'll see the
data from 6am, but not 7pm as 'that' host would have been purged as idle in
the interim.
But when you check the RRDs you'll definitely see the two peaks.
On the information about the host page, check the first and last seen data -
make sure it covers the SAME interval as the rrd does.
-----Burton
Part 2) Did some more testing.
I currently filter what host networks "Local Networks" that RRD will graph.
I added one more network (ie: x.xyz.com) to include an external one for a
test to compare host/domain graphs. Everything coming from this
network/domain is represented via a single IP address (NAT) So when I look
at for example x.xyz.com domain I only see one ip address.
Now when I compare the Host RRD graph to the Domain RRD graph for x.xyz.com
all should be the say right? Well there is a big difference.
The host day graph shows a total bytesRcvd of 680 MB
The domain day graph has a total bytesRcvd of 15.5 GB
Looks like domain graphing is broke?
Part 2) Burtons response
Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
From: "Burton M. Strauss III" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: RE: [Ntop] RRD bug on Domain Graphing (PR QDA9WTB)
Date: Thu, 26 Feb 2004 11:06:05 -0600
Reply-To: [EMAIL PROTECTED]
Nice of you to generate a PR and then delete all of the information...
Let's start really, really, really simple - WHICH VERSION OF NTOP IS
THIS????
Other questions:
What are you talking about? The numeric value to the right of the graph?
The values in the graphs themselves???
Are you sure this is the same data - same scale?
What do you see when you dump the rrds? (You may need to install a full
version of rrdtools - myrrd doesn't create rrdtool). Are they both populated
for the same periods? Too many unknown or NaN values???
-----Burton
Part 3)
Well if you really need the PR info everytime.....
Yes the numeric values are from the right of the graphs. And clearly when
comparing the graphs its like night and day.
Here are the dumps
rrdtool fetch bytesRcvd.rrd AVERAGE |grep -v nan |grep -v '0.0000000000e+00'
counter
Domain Host
1077802500 2.57E+03 1077802500 4.81E+01
1077802800 1.44E+03 1077802800 7.27E+01
1077803100 9.00E+01 1077803100 1.77E+01
1077803400 4.35E+03 1077804300 4.89E+01
1077804600 7.03E+03 1077804600 4.76E+01
1077804900 4.53E+03 1077804900 1.78E+01
1077805200 1.10E+04 1077805200 4.01E+03
1077806400 3.52E+03 1077806400 7.63E+01
1077806700 5.39E+03 1077807600 6.09E+01
1077807900 1.87E+04 1077807900 3.32E+01
1077808200 8.54E+03 1077808200 2.73E+01
1077808500 8.81E+03 1077808500 6.24E+02
1077808800 9.11E+03 1077808800 7.37E+02
1077809100 2.11E+04 1077809100 7.60E+02
1077809400 2.84E+04 1077809400 1.03E+03
1077809700 1.99E+04 1077809700 1.26E+03
1077810000 2.58E+04 1077810000 3.02E+03
1077810300 2.36E+04 1077810300 2.05E+03
1077810600 2.54E+04 1077810600 4.43E+03
1077810900 1.66E+04 1077810900 2.44E+03
1077811200 1.19E+04 1077811200 1.53E+03
1077811500 1.11E+04 1077811500 1.12E+03
1077811800 2.12E+04 1077811800 1.57E+03
1077812100 1.69E+04 1077812100 1.41E+03
1077812400 1.91E+04 1077812400 3.44E+03
1077812700 2.13E+04 1077812700 3.47E+03
1077813000 2.14E+04 1077813000 3.46E+03
1077813300 2.09E+04 1077813300 5.12E+03
1077813600 2.09E+04 1077813600 5.12E+03
1077813900 1.91E+04 1077813900 2.24E+03
1077814200 1.49E+04 1077814200 1.09E+03
1077814500 1.46E+04 1077814500 1.02E+03
1077814800 3.04E+04 1077814800 3.12E+03
1077815100 3.04E+04 1077815100 3.12E+03
1077815400 1.09E+04 1077815400 2.57E+03
1077815700 1.09E+04 1077815700 2.57E+03
1077816000 2.73E+04 1077816000 1.53E+03
1077816300 1.72E+04 1077816300 1.71E+03
1077816600 1.98E+04 1077816600 1.14E+03
1077816900 1.41E+04 1077816900 7.52E+02
1077817200 1.65E+04 1077817200 1.61E+03
1077817500 2.04E+04 1077817500 1.53E+03
1077817800 2.50E+04 1077817800 2.60E+03
1077818100 1.88E+04 1077818100 1.41E+03
1077818400 1.64E+04 1077818400 7.81E+02
1077818700 2.57E+04 1077818700 1.31E+03
1077819000 1.85E+04 1077819000 8.56E+02
1077819300 2.61E+04 1077819300 6.81E+02
1077819600 2.34E+04 1077819600 1.46E+03
1077819900 2.42E+04 1077819900 1.44E+03
1077820200 2.55E+04 1077820200 4.00E+03
1077820500 4.94E+04 1077820500 7.48E+02
1077820800 3.20E+05 1077820800 6.51E+02
1077821100 3.15E+04 1077821100 2.95E+03
1077821400 1.18E+04 1077821400 1.93E+03
1077821700 1.89E+04 1077821700 3.51E+03
1077822000 1.84E+04 1077822000 1.33E+03
1077822300 1.19E+04 1077822300 3.01E+03
1077822600 8.19E+03 1077822600 2.90E+03
1077822900 5.18E+03 1077822900 1.17E+03
1077823200 8.92E+03 1077823200 1.09E+03
1077823500 1.80E+04 1077823500 6.22E+03
1077823800 8.67E+03 1077823800 1.65E+03
1077824100 1.11E+04 1077824100 2.07E+03
1077824400 2.26E+04 1077824400 2.04E+03
1077824700 2.35E+04 1077824700 1.75E+03
1077825000 3.09E+04 1077825000 6.68E+02
1077825300 3.14E+04 1077825300 1.46E+03
1077825600 1.72E+04 1077825600 3.83E+02
1077825900 1.79E+04 1077825900 8.49E+02
1077826200 2.22E+04 1077826200 1.30E+03
1077826500 2.53E+04 1077826500 1.58E+03
1077826800 1.61E+04 1077826800 2.95E+03
1077827100 1.94E+04 1077827100 4.50E+03
1077827400 2.04E+04 1077827400 4.30E+03
1077827700 1.52E+04 1077827700 3.63E+03
1077828000 1.49E+04 1077828000 3.59E+03
1077828300 1.07E+04 1077828300 2.73E+03
1077828600 7.11E+03 1077828600 6.49E+02
1077828900 9.54E+03 1077828900 1.20E+02
1077829200 7.48E+03 1077829200 8.44E+02
1077829500 1.07E+04 1077829500 5.23E+02
1077829800 9.53E+03 1077829800 5.55E+02
1077830100 1.73E+04 1077830100 1.60E+03
1077830400 1.83E+04 1077830400 1.27E+03
1077830700 1.56E+04 1077830700 6.12E+02
1077831000 2.28E+04 1077831000 3.63E+02
1077831300 2.26E+04 1077831300 7.51E+02
1077831600 4.65E+04 1077831600 1.67E+03
1077831900 3.05E+04 1077831900 1.82E+03
1077832200 2.62E+04 1077832200 8.30E+02
1077832500 2.47E+04 1077832500 3.01E+03
1077832800 2.67E+04 1077832800 3.85E+03
1077833100 2.61E+04 1077833100 4.85E+03
1077833400 2.24E+04 1077833400 4.06E+03
1077833700 2.66E+04 1077833700 8.33E+03
1077834000 1.67E+04 1077834000 3.04E+03
1077834300 1.59E+04 1077834300 3.30E+03
1077834600 1.92E+04 1077834600 2.82E+03
1077834900 1.61E+04 1077834900 2.74E+03
1077835200 3.20E+04 1077835200 3.88E+03
1077835500 6.93E+04 1077835500 1.09E+04
1077835800 2.03E+04 1077835800 4.44E+03
1077836100 1.63E+04 1077836100 1.15E+03
1077836400 2.14E+04 1077836400 1.80E+03
1077836700 2.54E+04 1077836700 2.84E+03
1077837000 1.98E+04 1077837000 1.41E+03
1077837300 2.03E+04 1077837300 9.74E+02
1077837600 1.55E+04 1077837600 2.52E+02
1077837900 1.52E+04 1077837900 2.13E+02
1077838200 3.72E+04 1077838200 2.57E+03
1077838500 2.01E+04 1077838500 2.99E+03
1077838800 3.04E+04 1077838800 1.85E+03
1077839100 3.11E+04 1077839100 1.78E+03
1077839400 1.59E+04 1077839400 6.57E+03
1077839700 1.72E+04 1077839700 2.79E+03
1077840000 2.04E+04 1077840000 1.37E+03
1077840300 1.58E+04 1077840300 2.77E+03
1077840600 1.34E+04 1077840600 4.75E+03
1077840900 4.35E+04 1077840900 1.62E+03
1077841200 1.98E+04 1077841200 1.70E+03
1077841500 6.44E+03 1077841500 3.08E+02
1077841800 5.02E+03 1077841800 1.61E+02
1077842100 6.01E+03 1077842100 1.86E+02
1077842400 1.11E+04 1077842400 1.90E+03
1077842700 9.36E+03 1077842700 1.58E+03
1077843000 4.31E+03 1077843000 2.68E+02
1077843300 6.04E+03 1077843300 1.70E+02
1077843600 4.03E+03 1077843600 1.40E+02
1077843900 4.30E+03 1077843900 4.20E+02
1077844200 3.12E+03 1077844200 2.17E+03
1077844500 3.10E+03 1077844500 1.25E+03
1077844800 3.27E+03 1077844800 1.99E+02
1077845100 2.68E+03 1077845100 4.21E+01
1077845400 2.42E+02 1077845400 1.27E+01
1077845700 9.91E+02 1077845700 8.83E+02
1077846000 2.48E+02 1077846000 2.43E+02
1077846300 5.18E+02 1077846300 2.26E+02
1077847800 1.02E+03 1077847800 2.86E+02
1077848100 5.92E+03 1077848100 9.56E+02
1077848400 2.72E+03 1077848400 1.32E+03
1077848700 5.70E+03 1077848700 1.55E+02
1077849000 1.02E+04 1077849000 1.73E+03
1077849300 3.82E+03 1077849300 2.56E+03
1077849600 4.93E+03 1077849600 2.58E+02
1077849900 1.79E+03 1077849900 5.36E+01
1077850200 1.54E+03 1077850200 1.27E+02
1077850500 3.87E+03 1077850500 9.20E+01
1077850800 3.16E+03 1077850800 1.08E+02
1077851100 2.16E+03 1077851100 1.14E+02
1077851400 4.03E+02 1077851400 7.39E+01
1077851700 1.49E+03 1077851700 9.00E+01
1077852000 1.32E+03 1077852000 6.57E+01
1077852300 2.66E+03 1077852300 7.70E+00
1077853200 2.07E+03 1077853200 6.72E+02
1077854100 1.22E+03 1077854100 2.97E+02
1077854400 4.43E+03 1077854400 7.51E+01
1077854700 1.12E+04 1077854700 6.32E+03
1077855000 8.09E+03 1077855000 6.96E+02
1077855300 5.41E+03 1077855300 5.41E+02
1077855600 6.82E+03 1077855600 3.33E+02
1077856800 4.70E+03 1077856800 1.01E+02
1077857100 2.22E+03 1077866100 2.04E+01
1077857400 8.51E+02 1077866400 5.24E+01
1077857700 8.36E+02 1077866700 2.75E+01
1077858000 3.48E+03 1077867000 4.82E+00
1077858300 2.30E+03 1077867300 2.46E+01
1077858600 3.71E+03 1077867600 1.93E+01
1077858900 2.30E+03 1077867900 2.97E+01
1077859200 2.04E+03 1077868200 3.03E+01
1077868500 1.57E+02 1077868500 7.97E+01
1077868800 1.03E+02 1077868800 5.67E+01
1077869100 1.48E+03 1077869100 3.33E+01
1077869400 2.08E+02 1077869400 3.67E+01
1077873000 6.55E+02 1077873000 1.51E+01
1077876600 9.53E+02 1077876600 1.55E+01
1077878400 4.18E+03 1077878400 1.09E+03
1077878700 1.48E+03 1077878700 1.64E+02
1077879000 1.45E+02 1077879000 6.14E+01
1077879300 6.75E+01 1077879300 5.88E+01
1077880200 2.64E+04 1077880200 2.72E+04
1077880500 2.76E+04 1077880500 2.75E+04
1077880800 3.28E+04 1077880800 3.28E+04
1077881100 1.40E+04 1077881100 1.39E+04
1077883800 1.19E+03 1077883800 1.91E+01
1077884100 1.24E+03 1077884100 1.91E+01
1077884400 2.01E+03 1077884400 3.64E+00
1077884700 1.94E+03 1077884700 4.49E+00
1077885000 3.81E+03 1077885000 3.68E+00
1077885300 4.37E+03 1077885300 1.95E+01
1077885600 2.48E+02 1077885600 4.29E+00
1077885900 6.69E+02 1077885900 4.47E+00
1077886200 2.66E+02 1077886200 3.68E+00
1077886500 6.33E+01 1077886500 4.95E+01
1077886800 6.69E+00 1077886800 6.63E+00
1077887100 2.34E+02 1077887100 4.09E+00
1077887400 4.95E+02 1077887400 1.92E+01
1077887700 2.71E+02 1077887700 4.50E+00
1077888000 2.57E+02 1077888000 3.63E+00
1077888300 3.52E+02 1077888300 3.08E+00
----------------------------------------------------------------------------
ntop Configuration
ntop version.....3.0pre1
Configured on.....Feb 17 2004 14:50:33
Built on.....Feb 17 2004 14:52:26
OS.....i686-pc-linux-gnu
ntop Process Id.....28966
http Process Id.....28976
Command line
Started as..../usr/local/bin/ntop -i eth0 -d -P /var/ntop -u ntop -p
/usr/local/bin/proto.list -o -D afpc.randolph.af.mil -m 136.149.0.0/16
--skip-version-check -B port 8080 or not net 131.44
Resolved to..../usr/local/bin/ntop
-i
eth0
-d
-P
/var/ntop
-u
ntop
-p
/usr/local/bin/proto.list
-o
-D
afpc.randolph.af.mil
-m
136.149.0.0/16
--skip-version-check
-B
port 8080 or not net 131.44
Command line parameters are:
-a | --access-log-file.....(default) (nil)
-b | --disable-decoders.....(default) No
-c | --sticky-hosts.....(default) No
-d | --daemon.....Yes
-e | --max-table-rows.....(default) 128
-f | --traffic-dump-file.....(default) (nil)
-g | --track-local-hosts.....(default) Track all hosts
-o | --no-mac.....Don't trust MAC Addresses
-i | --interface (effective).....eth0
-j | --create-other-packets.....(default) Disabled
-k | --filter-expression-in-extra-frame.....(default) No
-l | --pcap-log.....(default) (nil)
-m | --local-subnets (effective).....136.149.0.0/16
-n | --numeric-ip-addresses.....(default) No
-p | --protocols...../usr/local/bin/proto.list
-q | --create-suspicious-packets.....(default) Disabled
-r | --refresh-time.....(default) 120
-s | --no-promiscuous.....(default) No
-t | --trace-level.....(default) 3
-u | --user.....ntop (uid=503, gid=500)
-w | --http-server.....(default) Active, all interfaces, port 3000
-z | --disable-sessions.....(default) No
-B | --filter-expression.....port 8080 or not net 131.44
-D | --domain.....afpc.randolph.af.mil
-F | --flow-spec.....(default) none
-K | --enable-debug.....(default) No
-L | --use-syslog.....daemon
-M | --no-interface-merge (effective).....(default) (Merging Interfaces)
Yes
-N | --wwn-map.....(default) (nil)
-O | --pcap-file-path.....(default) /usr/local/var/ntop
-P | --db-file-path...../var/ntop
-Q | --spool-file-path...../var/ntop
-U | --mapper.....(default) (nil)
-W | --https-server.....Uninitialized
--disable-schedYield.....(default) No
--disable-instantsessionpurge.....(default) No
--disable-mutexextrainfo.....(default) No
--disable-stopcap.....(default) No
--fc-only.....(default) No
--log-extra.....(default) 0
--no-fc.....(default) No
--no-invalid-lun.....(default) No
--p3p-cp.....(default) none
--p3p-uri.....(default) none
--ssl-watchdog.....(default) No
--w3c.....(default) No
Note: (effective) means that this is the value after ntop has processed
the parameter.
(default) means this is the default value, usually (but not always) set by
a #define in globals-defines.h.
Run time/Internal
Web server URL.....http://any:3000
SSL Web server (https://).....Not <https://).....Not> Active
GDBM version.....This is GDBM version 1.8.0, as of May 19, 1999.
OpenSSL Version.....OpenSSL 0.9.6b [engine] 9 Jul 2001
zlib version.....1.1.4
gd version (guess).....1.8.4
Protocol Decoders.....Enabled
Fragment Handling.....Enabled
Tracking only local hosts.....No
# IP Protocols Being Monitored.....32
# Protocol slots.....880
# IP Ports Being Monitored.....43
# IP Ports slots.....86
WebServer Request Queue.....10
Devices (Network Interfaces).....1
Domain name (short).....mil
IP to country flag table (entries).....52395
Total Hash Collisions (Vendor/Special) (lookup).....0
ntop Web Server
Item..................http://...................https://# Handled
Requests.....2268.....-
# Successful requests (200).....2260.....-
# Bad (We don't want to talk with you) requests.....0.....-
# Invalid requests - 401 DENIED.....7.....-
# Invalid requests - 403 FORBIDDEN.....0.....-
# Invalid requests - 404 NOT FOUND.....0.....-
# Handled SIGPIPE Errors.....0
Memory allocation - data segment
arena limit, getrlimit(RLIMIT_DATA, ...).....-1
Allocated blocks (ordblks).....4449
Allocated (arena).....56066048
Used (uordblks).....8754304
Free (fordblks).....47311744
Memory allocation - mmapped
Allocated blocks (hblks).....4
Allocated bytes (hblkhd).....5017600
Memory Usage
IPX/SAP Hash Size (bytes).....1897
IP to country flag table (bytes).....1614732 (1.5 MB)
Bytes per entry.....30.8
IP to AS (Autonomous System) number table (bytes).....0 (0.0 MB)
Current memory usage.....61083648
Base memory usage.....7886644
Hosts stored (active+cache).....2154 = (2154 + 0)
(very) Approximate memory per host.....24.2KB
Host Memory Cache
Limit.....#define MAX_HOSTS_CACHE_LEN 512
Current Size.....0
Maximum Size.....0
# Entries Reused.....0
MAC/IPX Hash tables
IPX/SAP Hash Size (entries).....179
IPX/SAP Hash Collisions (load).....0
IPX/SAP Hash Collisions (use).....0
Packets
Received.....143343813
Processed immediately.....143343813
Queued.....0
Current queue.....0
Maximum queue.....0
Host/Session counts - global
Purged hosts.....48439
Maximum hosts to purge per cycle.....512
DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512
Terminated Sessions.....5,680,761
Host/Session counts - Device 0 (eth0)
Hash Bucket Size.....3.8 KB
Actual Hash Size.....16384
Stored hosts.....2154
Bucket List Length.....[min 1][max 3][avg 1.1]
Max host lookup.....4
Session Bucket Size.....260
Sessions.....47,850
Max Num. Sessions.....51,603
Address Resolution
DNS Sniffed:
DNS Packets sniffed.....798
less 'requests'.....678
less 'failed'.....0
less 'reverse dns' (in-addr.arpa).....78
DNS Packets processed.....42
Stored in cache (includes aliases).....0
IP to name - ipaddr2str():
Total calls.....50592
....OK.....0
....Total not found.....50592
........Not found in cache.....50592
........Too old in cache.....0
Queued - dequeueAddress():
Total Queued.....50592
Not queued (duplicate).....0
Maximum Queued.....849
Current Queue.....13
Resolved - resolveAddress():
Addresses to resolve.....50580
....less 'Error: No cache database'.....0
....less 'Found in ntop cache'.....5834
Gives: # gethost (DNS lookup) calls.....44746
DNS Lookup Calls:
DNS resolution attempts.....44746
....Success: Resolved.....39866
....Failed.....4879
........HOST_NOT_FOUND.....3980
........NO_DATA.....2
........NO_RECOVERY.....0
........TRY_AGAIN (don't store).....897
........Other error (don't store).....0
DNS lookups stored in cache.....43848
Host addresses kept numeric.....4879
Vendor Lookup Table
Input lines read.....0
Records added total.....0
.....includes special records.....0
getVendorInfo() calls.....0
getSpecialVendorInfo() calls.....6094
Found 48bit (xx:xx:xx:xx:xx:xx) match.....0
Found 24bit (xx:xx:xx) match.....6094
Found multicast bit set.....0
Found LAA (Locally assigned address) bit set.....0
Thread counts
Active.....8
Dequeue.....1
Children (active).....615
Directory (search) order
Data Files......
/usr/local/share/ntop
Config Files......
/usr/local/etc/ntop
/etc
Plugins....../plugins
/usr/local/lib/ntop/plugins
Compile Time: ./configure
./configure parameters.....
Built on (Host).....i686-pc-linux-gnu
Built for(Target).....i686-pc-linux-gnu
compiler (cflags).....gcc -g -O2 -I/usr/local/include -Wshadow
-Wpointer-arith -Wmissing-prototypes -Wmissing-declarations -Wnested-externs
-fPIC -DHAVE_CONFIG_H
include path.....-I/home/bill/ntop3.0pre/ntop-3.0pre1/myrrd
system libraries.....-L/usr/local/lib
-L/home/bill/ntop3.0pre/ntop-3.0pre1/myrrd -lglib -lpthread -lresolv -lnsl
-lcrypt -lc -lssl -lcrypto -lpcap -lgdbm -lgd -lpng -lz -lmyrrd
install path...../usr/local
GNU C (gcc) version.....2.96 20000731 (Red Hat Linux 7.2 2.96-124.7.2)
(2.96.0)
uname data.....sysname(Linux) release(2.4.9-e.38smp) version(#1 SMP Wed Feb
11 00:09:01 EST 2004) machine(i686)
Internationalization (i18n)
i18n enabled.....No
Compile Time: Debug settings in globals-defines.h
DEBUG.....no
ADDRESS_DEBUG.....no
DNS_DEBUG.....no
DNS_SNIFF_DEBUG.....no
FC_DEBUG.....no
FINGERPRINT_DEBUG.....no
FTP_DEBUG.....no
GDBM_DEBUG.....no
HASH_DEBUG.....no
HOST_FREE_DEBUG.....no
HTTP_DEBUG.....no
IDLE_PURGE_DEBUG.....no
INITWEB_DEBUG.....no
MEMORY_DEBUG.....no
NETFLOW_DEBUG.....no
SEMAPHORE_DEBUG.....no
SESSION_TRACE_DEBUG.....no
SSLWATCHDOG_DEBUG.....no
STORAGE_DEBUG.....no
UNKNOWN_PACKET_DEBUG.....no
URL_DEBUG.....no
Compile Time: globals-define.h
PARM_PRINT_ALL_SESSIONS.....no
PARM_FORK_CHILD_PROCESS.....yes (normal)
CGI Scripts.....globals-defines.h: #define PARM_USE_CGI
Alternate row colors.....globals-defines.h: /* #define PARM_USE_COLOR */
Buggy gethostbyaddr() - use alternate implementation.....globals-defines.h:
/* #define PARM_USE_HOST */
MAKE_ASYNC_ADDRESS_RESOLUTION.....yes
MAKE_WITH_SSLWATCHDOG.....yes
MAKE_WITH_SSLWATCHDOG_RUNTIME (derived).....yes
Bad IP Address table size.....globals-defines.h: #define
MAX_NUM_BAD_IP_ADDRESSES 3
Minimum refresh interval (seconds).....#define
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME 15
Maximum # of Protocols to show in graphs.....#define MAX_NUM_PROTOS 64
Maximum # of routers (Local Subnet Routers report).....#define
MAX_NUM_ROUTERS 512
Maximum # of network interface devices.....#define MAX_NUM_DEVICES 32
Maximum # of virtual network interfaces (per device).....#define
MAX_NUM_DEVICES_VIRTUAL 7
Maximum network size (hosts per interface).....#define MAX_SUBNET_HOSTS 1024
Allocated # of passive FTP sessions.....#define
MAX_PASSIVE_FTP_SESSION_TRACKER 384
Inactive passive FTP session timeout (seconds).....#define
PARM_PASSIVE_SESSION_MINIMUM_IDLE 60
Compile Time: Hash Table Sizes
Size.....#define CONST_HASH_INITIAL_SIZE 16384
Compile Time: globals-define.h
Chart Format.....globals-report.h: #define CHART_FORMAT ".png"
Compile Time: config.h
CFG_ETHER_HEADER_HAS_EA.....no
CFG_MULTITHREADED.....yes
CFG_NEED_INET_ATON.....no
HAVE_ALARM.....yes
HAVE_ALLOCA.....yes
HAVE_ALLOCA_H.....yes
HAVE_ARPA_INET_H.....yes
HAVE_ARPA_NAMESER_H.....yes
HAVE_BACKTRACE.....yes
HAVE_BZERO.....yes
HAVE_CRYPT_H.....yes
HAVE_CTIME_R.....yes
HAVE_DIRENT_H.....yes
HAVE_DLFCN_H.....yes
HAVE_DL_H.....no
HAVE_DOPRNT.....no
HAVE_ENDPWENT.....yes
HAVE_ERRNO_H.....yes
HAVE_FACILITYNAMES.....yes
HAVE_FCNTL_H.....yes
HAVE_FLOAT_H.....yes
HAVE_FORK.....yes
HAVE_GDBM_H.....yes
HAVE_GD_H.....yes
HAVE_GDOME_H.....no
HAVE_GETHOSTBYADDR.....yes
HAVE_GETHOSTBYADDR_R.....yes
HAVE_GETHOSTBYNAME.....yes
HAVE_GETHOSTNAME.....yes
HAVE_GETIPNODEBYADDR.....no
HAVE_GETOPT_H.....yes
HAVE_GETPASS.....yes
HAVE_GETTIMEOFDAY.....yes
HAVE_GLIBCONFIG_H.....no
HAVE_GLIB_H.....no
HAVE_ICMP6_H.....no
HAVE_IF_H.....no
HAVE_IFLIST_SYSCTL.....no
HAVE_IN6_ADDR.....yes
HAVE_INET_NTOA.....yes
HAVE_INT16_T.....yes
HAVE_INT32_T.....yes
HAVE_INT64_T.....yes
HAVE_INT8_T.....yes
HAVE_INTTYPES_H.....yes
HAVE_IP6_H.....no
HAVE_LANGINFO_H.....yes
HAVE_LIBC.....yes
HAVE_LIBC_R.....no
HAVE_LIBCRYPT.....yes
HAVE_LIBCRYPTO.....yes
HAVE_LIBDL.....no
HAVE_LIBDLD.....no
HAVE_LIBGD.....yes
HAVE_LIBGDBM.....yes
HAVE_LIBGDOME.....no
HAVE_LIBGLIB.....yes
HAVE_LIBM.....no
HAVE_LIBNSL.....yes
HAVE_LIBPCAP.....yes
HAVE_LIBPNG.....yes
HAVE_LIBPOSIX4.....no
HAVE_LIBPTHREAD.....yes
HAVE_LIBPTHREADS.....no
HAVE_LIBRESOLV.....yes
HAVE_LIBRT.....no
HAVE_LIBSOCKET.....no
HAVE_LIBSSL.....yes
HAVE_LIBWRAP.....no
HAVE_LIBXML2.....no
HAVE_LIBXNET.....no
HAVE_LIBZ.....yes
HAVE_LIMITS_H.....yes
HAVE_LINUX_IF_PPPOX_H.....yes
HAVE_LOCALE_H.....yes
HAVE_LOCALTIME_R.....yes
HAVE_LONG_DOUBLE.....no
HAVE_MALLINFO_MALLOC_H.....yes
HAVE_MALLOC_H.....yes
HAVE_MATH_H.....yes
HAVE_MEMCHR.....yes
HAVE_MEMORY_H.....yes
HAVE_MEMSET.....yes
HAVE_NDIR_H.....no
HAVE_NET_BPF_H.....yes
HAVE_NETDB_H.....yes
HAVE_NET_ETHERNET_H.....yes
HAVE_NET_IF_DL_H.....no
HAVE_NET_IF_H.....yes
HAVE_NETINET_IF_ETHER_H.....yes
HAVE_NETINET_IN_H.....yes
HAVE_NETINET_IN_SYSTM_H.....yes
HAVE_NETINET_IP_H.....yes
HAVE_NETINET_TCP_H.....yes
HAVE_NETINET_UDP_H.....yes
HAVE_NET_PPP_DEFS_H.....yes
HAVE_NET_ROUTE_H.....yes
HAVE_OPENSSL.....yes
HAVE_OPENSSL_CRYPTO_H.....yes
HAVE_OPENSSL_ERR_H.....yes
HAVE_OPENSSL_PEM_H.....yes
HAVE_OPENSSL_RSA_H.....yes
HAVE_OPENSSL_SSL_H.....yes
HAVE_OPENSSL_X509_H.....yes
HAVE_PCAP_BPF_H.....no
HAVE_PCAP_H.....yes
HAVE_PCAP_OPEN_DEAD.....yes
HAVE_PNG_H.....yes
HAVE_PTHREAD_ATFORK.....yes
HAVE_PTHREAD_H.....yes
HAVE_PUTENV.....yes
HAVE_PWD_H.....yes
HAVE_RE_COMP.....yes
HAVE_REGCOMP.....yes
HAVE_REGEX.....yes
HAVE_SCHED_H.....yes
HAVE_SCHED_YIELD.....yes
HAVE_SECURITY_PAM_APPL_H.....yes
HAVE_SELECT.....yes
HAVE_SEMAPHORE_H.....yes
HAVE_SETJMP_H.....yes
HAVE_SHADOW_H.....yes
HAVE_SIGNAL_H.....yes
HAVE_SNPRINTF.....yes
HAVE_SOCKET.....yes
HAVE_SQRT.....yes
HAVE_STAT_EMPTY_STRING_BUG.....no
HAVE_STDARG_H.....yes
HAVE_STDDEF_H.....yes
HAVE_STDINT_H.....yes
HAVE_STDIO_H.....yes
HAVE_STDLIB_H.....yes
HAVE_STRCASECMP.....yes
HAVE_STRCHR.....yes
HAVE_STRCSPN.....yes
HAVE_STRDUP.....yes
HAVE_STRERROR.....yes
HAVE_STRFTIME.....yes
HAVE_STRING_H.....yes
HAVE_STRINGS_H.....yes
HAVE_STRNCASECMP.....yes
HAVE_STRPBRK.....yes
HAVE_STRRCHR.....yes
HAVE_STRSPN.....yes
HAVE_STRSTR.....yes
HAVE_STRTOK_R.....yes
HAVE_STRTOUL.....yes
HAVE_STRUCT_TM_TM_ZONE.....yes
HAVE_SYSCTL.....yes
HAVE_SYS_DIR_H.....no
HAVE_SYS_IOCTL_H.....yes
HAVE_SYS_LDR_H.....no
HAVE_SYSLOG_H.....yes
HAVE_SYS_NDIR_H.....no
HAVE_SYS_PARAM_H.....yes
HAVE_SYS_RESOURCE_H.....yes
HAVE_SYS_SCHED_H.....no
HAVE_SYS_SELECT_H.....yes
HAVE_SYS_SOCKET_H.....yes
HAVE_SYS_SOCKIO_H.....no
HAVE_SYS_STAT_H.....yes
HAVE_SYS_SYSCTL_H.....yes
HAVE_SYS_SYSLOG_H.....yes
HAVE_SYS_TIME_H.....yes
HAVE_SYS_TYPES_H.....yes
HAVE_SYS_UN_H.....yes
HAVE_SYS_UTSNAME_H.....yes
HAVE_SYS_WAIT_H.....yes
HAVE_TCPD_H.....yes
HAVE_TM_ZONE.....yes
HAVE_TZNAME.....no
HAVE_U_INT16_T.....yes
HAVE_U_INT32_T.....yes
HAVE_U_INT64_T.....yes
HAVE_UINT64_T.....no
HAVE_U_INT8_T.....yes
HAVE_UNAME.....yes
HAVE_UNISTD_H.....yes
HAVE_VFORK.....yes
HAVE_VFORK_H.....no
HAVE_VPRINTF.....yes
HAVE_WORKING_FORK.....yes
HAVE_WORKING_VFORK.....yes
HAVE_ZLIB_H.....yes
INET6.....yes
LSTAT_FOLLOWS_SLASHED_SYMLINK.....yes
MAKE_STATIC_PLUGIN.....no
MAKE_WITH_I18N.....no
MAKE_WITH_SSLV3_SUPPORT.....no
MAKE_WITH_SSLWATCHDOG_COMPILETIME.....no
MAKE_WITH_ZLIB.....yes
SETVBUF_REVERSED.....no
STDC_HEADERS.....yes
TIME_WITH_SYS_TIME.....yes
TM_IN_SYS_TIME.....no
CFG_CONFIGFILE_DIR - config file directory...../usr/local/etc/ntop
CFG_DATAFILE_DIR - data file directory...../usr/local/share/ntop
CFG_DBFILE_DIR - database file directory...../usr/local/var/ntop
CFG_PLUGIN_DIR - plugin file directory...../usr/local/lib/ntop/plugins
CFG_RUN_DIR - run file directory...../usr/local/var/ntop
CFG_NEED_GETDOMAINNAME (getdomainname(2) function).....yes
CFG_xxxxxx_ENDIAN (Hardware Endian).....little
HAVE_FILEDESCRIPTORBUG.....no
Compile Time: globals-defines.h
CONST_ACTIVE_TCP_SESSIONS_HTML.....NetNetstat.html
CONST_ADD_URLS_HTML.....addURLs.html
CONST_ADD_USERS_HTML.....addUsers.html
CONST_ASLIST_FILE.....AS-list.txt
CONST_AS_LIST_HTML.....asList.html
CONST_BROADCAST_ENTRY.....2
CONST_CGI_HEADER.....ntop-bin/
CONST_CHANGE_FILTER_HTML.....changeFilter.html
CONST_COLOR_1.....#CCCCFF
CONST_COLOR_2.....#FFCCCC
CONST_CONST_PCTG_LOW_COLOR.....BGCOLOR=#C6EEF7
CONST_CONST_PCTG_MID_COLOR.....BGCOLOR=#C6EFC8
CONST_CREDITS_HTML.....Credits.html
CONST_CRYPT_SALT.....99
CONST_DAEMONNAME.....ntop
CONST_DELETE_URL.....deleteURL
CONST_DELETE_USER.....deleteUser
CONST_DNSCACHE_LIFETIME.....86400
CONST_DNSCACHE_PERMITTED_AGE.....900
CONST_DO_ADD_URL.....doAddURL
CONST_DO_ADD_USER.....doAddUser
CONST_DOMAIN_STATS_HTML.....domainStats.html
CONST_DOUBLE_TWO_MSL_TIMEOUT.....240
CONST_DUMP_DATA_HTML.....dumpData.html
CONST_DUMP_HOSTS_INDEXES_HTML.....dumpDataIndexes.html
CONST_DUMP_NTOP_FLOWS_HTML.....dumpFlows.html
CONST_DUMP_NTOP_HOSTS_MATRIX_HTML.....dumpHostsMatrix.html
CONST_DUMP_NTOP_XML.....dump.xml
CONST_DUMP_TRAFFIC_DATA_HTML.....dumpTrafficData.html
CONST_FAVICON_ICO.....favicon.ico
CONST_FC_ACTIVITY_HTML.....fcActivity.html
CONST_FC_DATA_HTML.....fcData.html
CONST_FC_HOSTS_INFO_HTML.....fcHostsInfo.html
CONST_FC_SESSIONS_HTML.....fcSessions.html
CONST_FC_THPT_HTML.....fcThpt.html
CONST_FC_TRAFFIC_HTML.....fcShowStats.html
CONST_FILEDESCRIPTORBUG_COUNT.....3
CONST_FILTER_INFO_HTML.....filterInfo.html
CONST_FTPDATA.....20
CONST_GRE_PROTOCOL_TYPE.....47
CONST_HANDLEADDRESSLISTS_MAIN.....0
CONST_HANDLEADDRESSLISTS_NETFLOW.....2
CONST_HANDLEADDRESSLISTS_RRD.....yes
CONST_HASH_INITIAL_SIZE.....16384
CONST_HOME_HTML.....home.html
CONST_HOME_UNDERSCORE_HTML.....home_.html
CONST_HOST_HTML.....host.html
CONST_HOSTS_INFO_HTML.....hostsInfo.html
CONST_HOSTS_LOCAL_INFO_HTML.....localHostsInfo.html
CONST_HTTP_ACCEPT_ALL.....*/*
CONST_IMG_ARROW_DOWN.....<img src="/arrow_down.gif" border="0"
alt="Descending order, click to reverse">
CONST_IMG_ARROW_UP.....<img src="/arrow_up.gif" border="0" alt="Ascending
order, click to reverse">
CONST_IMG_BRIDGE.....<img src="/bridge.gif" border="0" alt="Bridge">
CONST_IMG_DHCP_CLIENT.....<img src="/bulb.gif" border="0" alt="DHCP Client">
CONST_IMG_DHCP_SERVER.....<img src="/antenna.gif" border="0" alt="DHCP
Server">
CONST_IMG_DIRECTORY_SERVER.....(nil)
CONST_IMG_DNS_SERVER.....<img src="/dns.gif" border="0" alt="DNS">
CONST_IMG_FC_VEN_BROCADE.....<img src="/brocade.gif" border="0" alt="Brocade
Communications Systems, Inc.">
CONST_IMG_FC_VEN_EMC.....<img src="/emc.gif" border="0" alt="EMC
Corporation">
CONST_IMG_FC_VEN_EMULEX.....<img src="/emulex.gif" border="0" alt="Emulex
Corporation">
CONST_IMG_FC_VEN_JNI.....<img src="/jni.gif" border="0" alt="JNI
Corporation">
CONST_IMG_FC_VEN_SEAGATE.....<img src="/seagate.gif" border="0" alt="Seagate
Technology">
CONST_IMG_FIBRECHANNEL_SWITCH.....<img src="/switch.gif" border="0"
alt="FibreChannel Switch">
CONST_IMG_FTP_SERVER.....(nil)
CONST_IMG_HAS_P2P.....<img src="/p2p.gif" border="0" alt="P2P Server">
CONST_IMG_HAS_USERS.....<img src="/users.gif" border="0" alt="Users">
CONST_IMG_HIGH_RISK.....<img src="/Risk_high.gif" border="0" alt="High
Risk">
CONST_IMG_HTTP_SERVER.....<img src="/web.gif" border="0" alt="HTTP Server">
CONST_IMG_IMAP_SERVER.....(nil)
CONST_IMG_LOCK.....<img src="/lock.png" alt="secured URL" border="0">
CONST_IMG_LOW_RISK.....<img src="/Risk_low.gif" border="0" alt="Low Risk">
CONST_IMG_MEDIUM_RISK.....<img src="/Risk_medium.gif" border="0" alt="Medium
Risk">
CONST_IMG_MULTIHOMED.....<img src="/multihomed.gif"" border="0"
alt="Multihomed">
CONST_IMG_NIC_CARD.....<img src="/card.gif" border="0" alt="Network Card">
CONST_IMG_NTP_SERVER.....<img src="/clock.gif" border="0" alt="NTP Server">
CONST_IMG_OS_AIX.....<img alt="OS: AIX" align="middle"
src="/statsicons/os/aix.gif">
CONST_IMG_OS_BERKELEY.....<img alt="OS: BSD Unix" align="middle"
src="/statsicons/os/bsd.gif">
CONST_IMG_OS_BSD.....<img alt="OS: BSD Unix" align="middle"
src="/statsicons/os/bsd.gif">
CONST_IMG_OS_CISCO.....<img alt="OS: Cisco" align="middle"
src="/statsicons/os/cisco.gif">
CONST_IMG_OS_HP_JETDIRET.....<img alt="OS: HP/JetDirect" align="middle"
src="/statsicons/os/hp.gif">
CONST_IMG_OS_HP_UX.....<img alt="OS: HP-UX" align="middle"
src="/statsicons/os/hp.gif">
CONST_IMG_OS_IRIX.....<img alt="OS: Irix" align="middle"
src="/statsicons/os/irix.gif">
CONST_IMG_OS_LINUX.....<img alt="OS: Linux" align="middle"
src="/statsicons/os/linux.gif">
CONST_IMG_OS_MAC.....<img alt="OS: Apple Mac" align="middle"
src="/statsicons/os/mac.gif">
CONST_IMG_OS_NOVELL.....<img alt="OS: Novell" align="middle"
src="/statsicons/os/novell.gif">
CONST_IMG_OS_SOLARIS.....<img alt="OS: Solaris" align="middle"
src="/statsicons/os/sun.gif">
CONST_IMG_OS_SUNOS.....<img alt="OS: SunOS" align="middle"
src="/statsicons/os/sun.gif">
CONST_IMG_OS_UNIX.....<img alt="OS: BSD Unix" align="middle"
src="/statsicons/os/bsd.gif">
CONST_IMG_OS_WINDOWS.....<img alt="OS: Windows" align="middle"
src="/statsicons/os/windows.gif">
CONST_PCAPNONBLOCKING_SLEEP_TIME.....30000000
CONST_IMG_POP_SERVER.....(nil)
CONST_IMG_PRINTER.....<img src="/printer.gif" border="0" alt="Printer">
CONST_IMG_ROUTER.....<img src="/router.gif" border="0" alt="Router">
CONST_IMG_SCSI_DISK.....<img src="/disk.gif" border="0" alt="SCSI Block
Device (disk)">
CONST_IMG_SCSI_INITIATOR.....<img src="/initiator.gif" border="0" alt="SCSI
Initiator">
CONST_IMG_SMTP_SERVER.....<img src="/mail.gif" border="0" alt="Mail (SMTP)">
CONST_INDEX_HTML.....index.html
CONST_INFO_NTOP_HTML.....info.html
CONST_INVALIDNETMASK.....-1
CONST_IP_L_2_L_HTML.....ipL2L.html
CONST_IP_L_2_R_HTML.....ipL2R.html
CONST_IP_PROTO_DISTRIB_HTML.....ipProtoDistrib.html
CONST_IP_PROTO_USAGE_HTML.....ipProtoUsage.html
CONST_IP_R_2_L_HTML.....ipR2L.html
CONST_IP_R_2_R_HTML.....ipR2R.html
CONST_IP_TRAFFIC_MATRIX_HTML.....ipTrafficMatrix.html
CONST_ISO8601_TIMESPEC.....%Y-%m-%dT%H:%M:%S
CONST_LEFTMENU_HTML.....leftmenu.html
CONST_LEFTMENU_NOJS_HTML.....leftmenu-nojs.html
CONST_LOCAL_ROUTERS_LIST_HTML.....localRoutersList.html
CONST_LOG_VIEW_BUFFER_SIZE.....50
CONST_MAGIC_NUMBER.....1968
CONST_MAN_NTOP_HTML.....ntop.html
CONST_MODIFY_URL.....modifyURL
CONST_MODIFY_USERS.....modifyUsers
CONST_MULTICAST_MASK.....-536870912
CONST_MULTICAST_STATS_HTML.....multicastStats.html
CONST_NET_FLOWS_HTML.....NetFlows.html
CONST_NETMASK_ENTRY.....yes
CONST_NETWORK_ENTRY.....0
CONST_NTOP_HELP_HTML.....help.html
CONST_NTOP_P3P.....ntop.p3p
CONST_NULL_HDRLEN.....4
CONST_NUM_TABLE_ROWS_PER_PAGE.....128
CONST_NUM_TRANSACTION_ENTRIES.....256
CONST_OSFINGERPRINT_FILE.....etter.passive.os.fp
CONST_P2C_FILE.....p2c.opt.table
CONST_PACKET_QUEUE_LENGTH.....2048
CONST_PATH_SEP.....47
CONST_PCAP_NW_INTERFACE_FILE.....pcap file
CONST_PCTG_HIGH_COLOR.....BGCOLOR=#FF3118
CONST_PCTG_LOW.....25
CONST_PCTG_MID.....75
CONST_PLUGIN_ENTRY_FCTN_NAME.....PluginEntryFctn
CONST_PLUGIN_EXTENSION......so
CONST_PLUGINS_HEADER.....plugins/
CONST_PPP_HDRLEN.....4
CONST_PPP_PROTOCOL_TYPE.....34827
CONST_PRIVACYCLEAR_HTML.....privacyFlagClear.html
CONST_PRIVACYFORCE_HTML.....privacyFlagForce.html
CONST_PRIVACYNOTICE_HTML.....privacyNotice.html
CONST_PROBLEMRPT_HTML.....ntopProblemReport.html
CONST_REPORT_ITS_DEFAULT.....(default)
CONST_REPORT_ITS_EFFECTIVE..... (effective)
CONST_RESET_STATS_HTML.....resetStats.html
CONST_RRD_DEFAULT_FONT_NAME.....undefined
CONST_RRD_DEFAULT_FONT_PATH.....undefined
CONST_RRD_DEFAULT_FONT_SIZE.....undefined
CONST_RRD_D_PERMISSIONS_EVERYONE.....493
CONST_RRD_D_PERMISSIONS_GROUP.....488
CONST_RRD_D_PERMISSIONS_PRIVATE.....448
CONST_RRD_EXTENSION......rrd
CONST_RRD_PERMISSIONS_EVERYONE.....2
CONST_RRD_PERMISSIONS_GROUP.....yes
CONST_RRD_PERMISSIONS_PRIVATE.....0
CONST_RRD_UMASK_EVERYONE.....18
CONST_RRD_UMASK_GROUP.....22
CONST_RRD_UMASK_PRIVATE.....54
CONST_SCSI_BYTES_HTML.....scsiBytes.html
CONST_SCSI_STATUS_HTML.....scsiStatus.html
CONST_SCSI_TIMES_HTML.....scsiTimes.html
CONST_SCSI_TM_HTML.....scsiTMInfo.html
CONST_SFLOW_TCPDUMP_MAGIC.....-1582119980
CONST_SHOW_MUTEX_HTML.....showMutex.html
CONST_SHOW_PLUGINS_HTML.....showPlugins.html
CONST_SHOW_PORT_TRAFFIC_HTML.....showPortTraffic.html
CONST_SHOW_URLS_HTML.....showURLs.html
CONST_SHOW_USERS_HTML.....showUsers.html
CONST_SHUTDOWN_NTOP_HTML.....shutdown.html
CONST_SIZE_PCAP_ERR_BUF.....512
CONST_SORT_DATA_HOST_TRAFFIC_HTML.....dataHostTraffic.html
CONST_SORT_DATA_IP_HTML.....sortDataIP.html
CONST_SORT_DATA_PROTOS_HTML.....sortDataProtos.html
CONST_SORT_DATA_RCVD_HOST_TRAFFIC_HTML.....dataRcvdHostTraffic.html
CONST_SORT_DATA_SENT_HOST_TRAFFIC_HTML.....dataSentHostTraffic.html
CONST_SORT_DATA_SENT_THPT_HTML.....undefined
CONST_SORT_DATA_THPT_HTML.....sortDataThpt.html
CONST_SORT_DATA_THPT_STATS_HTML.....thptStats.html
CONST_SSL_CERTF_FILENAME.....ntop-cert.pem
CONST_SWITCH_NIC_HTML.....switch.html
CONST_TEXT_INFO_NTOP_HTML.....textinfo.html
CONST_THPT_STATS_MATRIX_HTML.....thptStatsMatrix.html
CONST_THROUGHPUT_GRAPH.....thptGraph
CONST_TRAFFIC_STATS_HTML.....trafficStats.html
CONST_TWO_MSL_TIMEOUT.....120
CONST_UNKNOWN_MTU.....65355
CONST_V5FLOWS_PER_PAK.....30
CONST_V7FLOWS_PER_PAK.....28
CONST_VIEW_LOG_HTML.....viewLog.html
CONST_VLAN_LIST_HTML.....vlanList.html
CONST_VSAN_DETAIL_HTML.....vsanDetail.html
CONST_VSAN_DISTRIB_HTML.....vsanDistrib.html
CONST_VSAN_LIST_HTML.....vsanList.html
CONST_W3C_CHARTYPE_LINE.....<meta http-equiv="Content-Type"
content="text/html; charset=ISO-8859-1">
CONST_W3C_DOCTYPE_LINE.....<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01
Transitional//EN" "http://www.w3.org/TR/html4/loose.dtd
<http://www.w3.org/TR/html4/loose.dtd> ">
CONST_W3C_P3P_XML.....w3c/p3p.xml
CONST_WIN32_PATH_NETWORKS.....networks
CONST_XML_DOCTYPE_NAME.....ntop_dump
CONST_XML_DTD_NAME.....ntopdump.dtd
CONST_XMLDUMP_PLUGIN_NAME.....xmldump
CONST_XML_TMP_NAME...../tmp/ntopxml
CONTACTED_PEERS_THRESHOLD.....1024
DEFAULT_AS_LOOKUP_URL.....http://ws.arin.net/cgi-bin/whois.pl?queryinput=AS
DEFAULT_MAXIMUM_HOSTS_PURGE_PER_CYCLE.....512
DEFAULT_NETFLOW_PORT_STR.....2055
DEFAULT_NTOP_ACCESS_LOG_FILE.....(null)
DEFAULT_NTOP_AUTOREFRESH_INTERVAL.....120
DEFAULT_NTOP_DAEMON_MODE.....0
DEFAULT_NTOP_DEVICES.....(null)
DEFAULT_NTOP_DISABLE_PROMISCUOUS.....0
DEFAULT_NTOP_DOMAIN_NAME.....(nil)
DEFAULT_NTOP_DONT_TRUST_MAC_ADDR.....0
DEFAULT_NTOP_ENABLE_SESSIONHANDLE.....yes
DEFAULT_NTOP_FAMILY.....0
DEFAULT_NTOP_FILTER_EXPRESSION.....(null)
DEFAULT_NTOP_FILTER_IN_FRAME.....0
DEFAULT_NTOP_FLOW_SPECS.....(null)
DEFAULT_NTOP_LOCAL_SUBNETS.....(null)
DEFAULT_NTOP_MERGE_INTERFACES.....yes
DEFAULT_NTOP_NUMERIC_IP_ADDRESSES.....0
DEFAULT_NTOP_OTHER_PKT_DUMP.....0
DEFAULT_NTOP_PACKET_DECODING.....yes
DEFAULT_NTOP_PCAP_LOG_FILENAME.....(null)
DEFAULT_NTOP_PID_DIRECTORY...../var/run
DEFAULT_NTOP_PIDFILE.....ntop.pid
DEFAULT_NTOP_STICKY_HOSTS.....0
DEFAULT_NTOP_SUSPICIOUS_PKT_DUMP.....0
DEFAULT_NTOP_TRACK_ONLY_LOCAL.....0
DEFAULT_NTOP_TRAFFICDUMP_FILENAME.....(null)
DEFAULT_NTOP_WEB_ADDR.....(null)
DEFAULT_NTOP_WEB_PORT.....3000
DEFAULT_RRD_DAYS.....90
DEFAULT_RRD_HOURS.....72
DEFAULT_RRD_INTERVAL.....300
DEFAULT_RRD_MONTHS.....36
DEFAULT_RRD_PERMISSIONS.....0
DEFAULT_SFLOW_COLLECTOR_PORT.....6343
DEFAULT_SFLOW_COLLECTOR_PORT_STR.....6343
DEFAULT_SFLOW_SAMPLING_RATE.....400
DEFAULT_SNAPLEN.....384
DEFAULT_SYSLOG_FACILITY.....24
DEFAULT_TCPWRAP_ALLOW.....undefined
DEFAULT_TCPWRAP_DENY.....undefined
DEFAULT_TRACE_LEVEL.....3
DEFAULT_WEBSERVER_REQUEST_QUEUE_LEN.....10
EMSGSIZE.....90
ETHERMTU.....1500
LEN_CMDLINE_BUFFER.....4096
LEN_ETHERNET_ADDRESS_DISPLAY.....18
LEN_ETHERNET_ADDRESS.....6
LEN_ETHERNET_VENDOR_DISPLAY.....9
LEN_ETHERNET_VENDOR.....3
LEN_FC_ADDRESS_DISPLAY.....9
LEN_FC_ADDRESS.....3
LEN_FGETS_BUFFER.....512
LEN_GENERAL_WORK_BUFFER.....1024
LEN_MEDIUM_WORK_BUFFER.....128
LEN_SMALL_WORK_BUFFER.....24
LEN_TIMEFORMAT_BUFFER.....48
LEN_WWN_ADDRESS_DISPLAY.....24
LEN_WWN_ADDRESS.....8
MAKE_ASYNC_ADDRESS_RESOLUTION.....yes
MAKE_NTOP_PACKETSZ_DECLARATIONS.....no
MAKE_WITH_FORK_COPYONWRITE.....yes
MAKE_WITH_HTTPSIGTRAP.....no
MAKE_WITH_LOG_XXXXXX.....no
MAKE_WITH_NETFLOWSIGTRAP.....no
MAKE_WITH_RRDSIGTRAP.....no
MAKE_WITH_SCHED_YIELD.....yes
MAKE_WITH_SEMAPHORES.....yes
MAKE_WITH_SSLWATCHDOG.....yes
MAKE_WITH_SSLWATCHDOG_RUNTIME.....yes
MAKE_WITH_SYSLOG.....yes
MAX_ADDRESSES.....35
MAX_ALIASES.....35
MAX_ASSIGNED_IP_PORTS.....1024
MAXCDNAME.....255
MAX_DEVICE_NAME_LEN.....64
MAX_DLT_ARRAY.....123
MAXDNAME.....1025
MAX_ELEMENT_HASH.....4096
MAX_HASHDUMP_ENTRY.....65535
MAXHOSTNAMELEN.....64
MAX_HOSTS_CACHE_LEN.....512
MAX_IP_PORT.....65534
MAXLABEL.....63
MAX_LANGUAGES_REQUESTED.....4
MAX_LANGUAGES_SUPPORTED.....8
MAX_LASTSEEN_TABLE_SIZE.....4096
MAX_LEN_SYM_HOST_NAME_HTML.....256
MAX_LEN_SYM_HOST_NAME.....64
MAX_LEN_URL.....512
MAX_LEN_VENDOR_NAME.....64
MAX_NFS_NAME_HASH.....12288
MAX_NODE_TYPES.....8
MAX_NUM_BAD_IP_ADDRESSES.....3
MAX_NUM_CONTACTED_PEERS.....8
MAX_NUM_DEQUEUE_THREADS.....yes
MAX_NUM_DEVICES.....32
MAX_NUM_DEVICES_VIRTUAL.....7
MAX_NUM_DHCP_MSG.....8
MAX_NUM_FIN.....4
MAX_NUM_IGNOREDFLOWS.....32
MAX_NUM_LIST_ENTRIES.....32
MAX_NUM_NETWORKS.....32
MAX_NUM_PROBES.....16
MAX_NUM_PROTOS.....64
MAX_NUM_PURGED_SESSIONS.....512
MAX_NUM_PWFILE_ENTRIES.....32
MAX_NUM_QUEUED_ADDRESSES.....4096
MAX_NUM_RECENT_PORTS.....5
MAX_NUM_ROUTERS.....512
MAX_NUM_STORED_FLAGS.....4
MAX_NUM_UNKNOWN_PROTOS.....5
MAX_PACKET_LEN.....8232
MAX_PASSIVE_FTP_SESSION_TRACKER.....384
MAX_PDA_HOST_TABLE.....4096
MAX_PER_DEVICE_HASH_LIST.....65535
MAX_SESSIONS_CACHE_LEN.....512
MAX_SSL_CONNECTIONS.....32
MAX_SUBNET_HOSTS.....1024
MAX_TOT_NUM_SESSIONS.....65535
MAX_WEBSERVER_REQUEST_QUEUE_LEN.....20
MAX_WIN32_NET_ALIASES.....35
MIN_WEBSERVER_REQUEST_QUEUE_LEN.....2
NAME_MAX.....255
NETDB_SUCCESS.....0
NETFLOW_DEVICE_NAME.....NetFlow-device
NS_CMPRSFLGS.....192
NS_MAXCDNAME.....255
PACKETSZ.....512
PARM_ENABLE_EXPERIMENTAL.....no
PARM_HOST_PURGE_INTERVAL.....120
PARM_HOST_PURGE_MINIMUM_IDLE_ACTVSES.....1800
PARM_HOST_PURGE_MINIMUM_IDLE_NOACTVSES.....600
PARM_MIN_WEBPAGE_AUTOREFRESH_TIME.....15
PARM_PASSIVE_SESSION_MINIMUM_IDLE.....60
PARM_PRINT_ALL_SESSIONS.....no
PARM_PRINT_RETRANSMISSION_DATA.....no
PARM_SESSION_PURGE_MINIMUM_IDLE.....600
PARM_SHOW_NTOP_HEARTBEAT.....no
PARM_SSLWATCHDOG_WAIT_INTERVAL.....3
PARM_SSLWATCHDOG_WAITWOKE_LIMIT.....5
PARM_THROUGHPUT_REFRESH_INTERVAL.....30
PARM_USE_CGI.....yes
PARM_USE_COLOR.....no
PARM_USE_HOST.....no
PARM_USE_MACHASH_INVERT.....yes
PARM_USE_SESSIONS_CACHE.....no
PARM_WEDONTWANTTOTALKWITHYOU_INTERVAL.....300
SFLOW_DEVICE_NAME.....sFlow-device
THREAD_MODE.....MT (SSL)
ADDRESS_DEBUG.....no
CHKVER_DEBUG.....no
DEFAULT_NTOP_DEBUG.....0
DEFAULT_NTOP_DEBUG_MODE.....0
DNS_DEBUG.....no
DNS_SNIFF_DEBUG.....no
FC_DEBUG.....no
FINGERPRINT_DEBUG.....no
FRAGMENT_DEBUG.....no
FTP_DEBUG.....no
GDBM_DEBUG.....no
HASH_DEBUG.....no
HOST_FREE_DEBUG.....no
HTTP_DEBUG.....no
I18N_DEBUG.....no
IDLE_PURGE_DEBUG.....no
INITWEB_DEBUG.....no
MEMORY_DEBUG.....no
NETFLOW_DEBUG.....no
P2P_DEBUG.....no
PACKET_DEBUG.....no
PARAM_DEBUG.....no
PLUGIN_DEBUG.....no
PROBLEMREPORTID_DEBUG.....no
RRD_DEBUG.....no
SEMAPHORE_DEBUG.....no
SESSION_TRACE_DEBUG.....no
SSLWATCHDOG_DEBUG.....no
STORAGE_DEBUG.....no
UNKNOWN_PACKET_DEBUG.....no
URL_DEBUG.....no
VENDOR_DEBUG.....no
PLUGINS:
RRD:
RRD path...../var/ntop/rrd
New directory permissions.....0700
New file umask.....0066
----------------------------------------------------------------------------
Bill Richardson
Network Operations
"Linux is very user friendly, It's just very particular about who it makes
friends with"
