When I pull data from ntop using:
wget -O 20040831-2146
http://192.168.90.8:3000/dumpData.html?language=perl&view=long
I get duplicate entries such as
'192.168.90.38' => {
'index' => '0',
'hostNumIpAddress' => '192.168.90.38',
'hostResolvedName' => '192.168.90.38',
'firstSeen' => '1039885149',
'lastSeen' => '1040130357',
'minTTL' => '0',
'maxTTL' => '0',
'pktSent' => '2319',
'pktRcvd' => '2713',
<snip>
'Messenger' => {
'sentLoc' => '0',
'sentRem' => '0',
'rcvdLoc' => '0',
'rcvdFromRem' => '0'
},
},
'ethAddressString' => '00:D0:59:CD:24:85'
},
and
'192.168.90.38' => {
'index' => '0',
'hostNumIpAddress' => '192.168.90.38',
'hostResolvedName' => '192.168.90.38',
'firstSeen' => '1039885126',
'lastSeen' => '1040130375',
'minTTL' => '64',
'maxTTL' => '64',
'pktSent' => '222097',
'pktRcvd' => '374984',
<snip> 'Messenger' => {
'sentLoc' => '0',
'sentRem' => '244861',
'rcvdLoc' => '0',
'rcvdFromRem' => '333460'
},
},
'ICMP' => {
'SENT_ECHO' => '0',
'SENT_ECHOREPLY' => '0',
'SENT_UNREACH' => '41',
'SENT_ROUTERADVERT' => '0',
'SENT_TMXCEED' => '0',
'SENT_PARAMPROB' => '0',
'SENT_MASKREPLY' => '0',
'SENT_MASKREQ' => '0',
'SENT_INFO_REQUEST' => '0',
'SENT_INFO_REPLY' => '0',
'SENT_TIMESTAMP' => '0',
'SENT_TIMESTAMPREPLY' => '0',
'SENT_SOURCE_QUENCH' => '0',
'RCVD_ECHO' => '0',
'RCVD_ECHOREPLY' => '0',
'RCVD_UNREACH' => '0',
'RCVD_ROUTERADVERT' => '0',
'RCVD_TMXCEED' => '0',
'RCVD_PARAMPROB' => '0',
'RCVD_MASKREPLY' => '0',
'RCVD_MASKREQ' => '0',
'RCVD_INFO_REQUEST' => '0',
'RCVD_INFO_REPLY' => '0',
'RCVD_TIMESTAMP' => '0',
'RCVD_TIMESTAMPREPLY' => '0',
'RCVD_SOURCE_QUENCH' => '0',
},
'securityPkts' => {
'synPktsSent' => '0',
'synPktsRcvd' => '0',
'rstPktsSent' => '0',
'rstPktsRcvd' => '0',
'rstAckPktsSent' => '0',
'rstAckPktsRcvd' => '0',
'synFinPktsSent' => '0',
'synFinPktsRcvd' => '0',
'finPushUrgPktsSent' => '0',
'finPushUrgPktsRcvd' => '0',
'nullPktsSent' => '0',
'nullPktsRcvd' => '0',
'ackXmasFinSynNullScanSent' => '0',
'ackXmasFinSynNullScanRcvd' => '0',
'rejectedTCPConnSent' => '0',
'rejectedTCPConnRcvd' => '0',
'establishedTCPConnSent' => '0',
'establishedTCPConnRcvd' => '0',
'terminatedTCPConnServer' => '0',
'terminatedTCPConnClient' => '0',
'udpToClosedPortSent' => '0',
'udpToClosedPortRcvd' => '41',
'udpToDiagnosticPortSent' => '0',
'udpToDiagnosticPortRcvd' => '0',
'tcpToDiagnosticPortSent' => '0',
'tcpToDiagnosticPortRcvd' => '0',
'tinyFragmentSent' => '0',
'tinyFragmentRcvd' => '0',
'icmpFragmentSent' => '0',
'icmpFragmentRcvd' => '0',
'overlappingFragmentSent' => '0',
'overlappingFragmentRcvd' => '0',
'closedEmptyTCPConnSent' => '0',
'closedEmptyTCPConnRcvd' => '0',
'icmpPortUnreachSent' => '41',
'icmpPortUnreachRcvd' => '0',
'icmpHostNetUnreachSent' => '0',
'icmpHostNetUnreachRcvd' => '0',
'icmpProtocolUnreachSent' => '0',
'icmpProtocolUnreachRcvd' => '0',
'icmpAdminProhibitedSent' => '0',
'icmpAdminProhibitedRcvd' => '0',
'malformedPktsSent' => '0',
'malformedPktsRcvd' => '0',
},
},
Obviously the records are drastically different, any ideas why or how
I can avoid these?
Thanks,
Peter
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
