Sounds perfectly reasonable to me. ntop saw a bad request and smacked you. Why are you trying to send ntop's web server a request for a Windows DLL anyway???? STFW... for owssvr.dll
-----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Michael Wenzelmaier > Sent: Tuesday, October 19, 2004 4:48 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] web server problems > > > This is what I get. I can access it with the browser just fine > the first time. When I go to another site and the back to ntop I > get the error message. > > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Initialized socket, > port 3001, address (any) > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Waiting for HTTP > connections on port 3001 > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Starting web server > Oct 19 17:12:08 syslog ntop[1949]: THREADMGMT: web connections > thread (1949) started... > Oct 19 17:12:08 syslog ntop[1949]: Note: SIGPIPE handler set (ignore) > Oct 19 17:12:08 syslog ntop[1949]: WEB: ntop's web server is > now processing requests > Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread > (114696) for web server > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Server started... > continuing with initialization > Oct 19 17:12:08 syslog ntop[1950]: THREADMGMT: pcap dispatch > thread running... > Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread > (131081) for network packet sniffing on eth0 > Oct 19 17:12:19 syslog ntop[1949]: SECURITY: Loading items table > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED > selection, 0 [out of 15] hosts selected > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: Device 0: no > hosts deleted > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED > selection, 51 [out of 65] hosts selected > Oct 19 17:13:10 syslog ntop[1945]: IDLE_PURGE: Device 1 > [NetFlow-device]: 51 hosts deleted, elapsed time is 1.685442 > seconds (0.033048 per host) > Oct 19 17:14:38 syslog ntop[1944]: OSFP: scanFingerprintLoop() > checked 3, resolved 3 > Oct 19 17:15:00 syslog ntop[1949]: URL security(5): Found bad > file extension (.dll) in URL... > Oct 19 17:15:00 syslog ntop[1949]: **ERROR** URL security: > '/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=6254&STRMVER=4&CAPREQ=0' > rejected (code=5)(client=::f4ee:6745:5ce8:3a41) > Oct 19 17:15:00 syslog ntop[1949]: **ERROR** Rejected request > from address ::f4ee:6745:5ce8:3a41 (it previously sent ntop a bad request) > Oct 19 17:15:00 syslog last message repeated 25 times > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED > selection, 0 [out of 16] hosts selected > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: Device 0: no > hosts deleted > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED > selection, 108 [out of 133] hosts selected > Oct 19 17:15:14 syslog ntop[1945]: IDLE_PURGE: Device 1 > [NetFlow-device]: 108 hosts deleted, elapsed time is 3.450987 > seconds (0.031954 per host) > > > > Michael Wenzelmaier > > Interlink Companies > Phone: 574-524-1000 > Ext. 114 > Email: [EMAIL PROTECTED] > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Burton M. Strauss III > Sent: Thursday, September 23, 2004 12:17 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] web server problems > > Backup in the log and find the original erroneous request. You > may need to > enable --trace-level 4 to see all the messages. > > -----Burton > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > Michael Wenzelmaier > > Sent: Thursday, September 23, 2004 10:37 AM > > To: [EMAIL PROTECTED] > > Subject: [Ntop] web server problems > > > > > > Hi, > > > > > > > > My ntop was running fine for a few months until recently. Now I'm > > getting the folloing error message. Can anybody tell me how do fix this? > > > > > > > > Thu Sep 23 10:57:26 2004 **ERROR** Rejected request from address > > ::f41e:9f44:5ce8:3a41 (it previously sent ntop a bad request) > > > > > > > > > > > > > > > > Michael Wenzelmaier > > > > > > > > Interlink Companies > > > > Phone: 574-524-1000 > > > > Ext. 114 > > > > Email: [EMAIL PROTECTED] > > > > > > > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
