Probably it's something related to IE ... might start at MS's knowledge base...
-----Burton > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Michael Wenzelmaier > Sent: Tuesday, October 19, 2004 4:59 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] web server problems > > > I'm only using Internet Explorer. I don't know where the dll > comes from. I guess if I think back it started happening after I > installed to XP SP2. > > Michael Wenzelmaier > > Interlink Companies > Phone: 574-524-1000 > Ext. 114 > Email: [EMAIL PROTECTED] > > > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > Behalf Of Burton M. Strauss III > Sent: Tuesday, October 19, 2004 4:56 PM > To: [EMAIL PROTECTED] > Subject: RE: [Ntop] web server problems > > Sounds perfectly reasonable to me. ntop saw a bad request and > smacked you. > Why are you trying to send ntop's web server a request for a Windows DLL > anyway???? STFW... for owssvr.dll > > -----Burton > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > Michael Wenzelmaier > > Sent: Tuesday, October 19, 2004 4:48 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Ntop] web server problems > > > > > > This is what I get. I can access it with the browser just fine > > the first time. When I go to another site and the back to ntop I > > get the error message. > > > > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Initialized socket, > > port 3001, address (any) > > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Waiting for HTTP > > connections on port 3001 > > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Starting web server > > Oct 19 17:12:08 syslog ntop[1949]: THREADMGMT: web connections > > thread (1949) started... > > Oct 19 17:12:08 syslog ntop[1949]: Note: SIGPIPE handler set (ignore) > > Oct 19 17:12:08 syslog ntop[1949]: WEB: ntop's web server is > > now processing requests > > Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread > > (114696) for web server > > Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Server started... > > continuing with initialization > > Oct 19 17:12:08 syslog ntop[1950]: THREADMGMT: pcap dispatch > > thread running... > > Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread > > (131081) for network packet sniffing on eth0 > > Oct 19 17:12:19 syslog ntop[1949]: SECURITY: Loading items table > > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED > > selection, 0 [out of 15] hosts selected > > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: Device 0: no > > hosts deleted > > Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED > > selection, 51 [out of 65] hosts selected > > Oct 19 17:13:10 syslog ntop[1945]: IDLE_PURGE: Device 1 > > [NetFlow-device]: 51 hosts deleted, elapsed time is 1.685442 > > seconds (0.033048 per host) > > Oct 19 17:14:38 syslog ntop[1944]: OSFP: scanFingerprintLoop() > > checked 3, resolved 3 > > Oct 19 17:15:00 syslog ntop[1949]: URL security(5): Found bad > > file extension (.dll) in URL... > > Oct 19 17:15:00 syslog ntop[1949]: **ERROR** URL security: > > '/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=6254&STRMVER=4&CAPREQ=0' > > rejected (code=5)(client=::f4ee:6745:5ce8:3a41) > > Oct 19 17:15:00 syslog ntop[1949]: **ERROR** Rejected request > > from address ::f4ee:6745:5ce8:3a41 (it previously sent ntop a > bad request) > > Oct 19 17:15:00 syslog last message repeated 25 times > > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED > > selection, 0 [out of 16] hosts selected > > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: Device 0: no > > hosts deleted > > Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED > > selection, 108 [out of 133] hosts selected > > Oct 19 17:15:14 syslog ntop[1945]: IDLE_PURGE: Device 1 > > [NetFlow-device]: 108 hosts deleted, elapsed time is 3.450987 > > seconds (0.031954 per host) > > > > > > > > Michael Wenzelmaier > > > > Interlink Companies > > Phone: 574-524-1000 > > Ext. 114 > > Email: [EMAIL PROTECTED] > > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On > > Behalf Of Burton M. Strauss III > > Sent: Thursday, September 23, 2004 12:17 PM > > To: [EMAIL PROTECTED] > > Subject: RE: [Ntop] web server problems > > > > Backup in the log and find the original erroneous request. You > > may need to > > enable --trace-level 4 to see all the messages. > > > > -----Burton > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > > Michael Wenzelmaier > > > Sent: Thursday, September 23, 2004 10:37 AM > > > To: [EMAIL PROTECTED] > > > Subject: [Ntop] web server problems > > > > > > > > > Hi, > > > > > > > > > > > > My ntop was running fine for a few months until recently. Now I'm > > > getting the folloing error message. Can anybody tell me how > do fix this? > > > > > > > > > > > > Thu Sep 23 10:57:26 2004 **ERROR** Rejected request from address > > > ::f41e:9f44:5ce8:3a41 (it previously sent ntop a bad request) > > > > > > > > > > > > > > > > > > > > > > > > Michael Wenzelmaier > > > > > > > > > > > > Interlink Companies > > > > > > Phone: 574-524-1000 > > > > > > Ext. 114 > > > > > > Email: [EMAIL PROTECTED] > > > > > > > > > > > > > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > > > --- > > Incoming mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > > > > > --- > > Outgoing mail is certified Virus Free. > > Checked by AVG anti-virus system (http://www.grisoft.com). > > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > > --- > Incoming mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > > --- > Outgoing mail is certified Virus Free. > Checked by AVG anti-virus system (http://www.grisoft.com). > Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004 > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
