http://lists.jammed.com/incidents/2001/10/0124.html
- Brian
Burton M. Strauss III wrote:
Probably it's something related to IE ... might start at MS's knowledge base...
-----Burton
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Wenzelmaier Sent: Tuesday, October 19, 2004 4:59 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] web server problems
I'm only using Internet Explorer. I don't know where the dll comes from. I guess if I think back it started happening after I installed to XP SP2.
Michael Wenzelmaier
Interlink Companies Phone: 574-524-1000 Ext. 114 Email: [EMAIL PROTECTED]
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Burton M. Strauss III Sent: Tuesday, October 19, 2004 4:56 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] web server problems
Sounds perfectly reasonable to me. ntop saw a bad request and smacked you. Why are you trying to send ntop's web server a request for a Windows DLL anyway???? STFW... for owssvr.dll
-----Burton
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Wenzelmaier Sent: Tuesday, October 19, 2004 4:48 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] web server problems
This is what I get. I can access it with the browser just fine the first time. When I go to another site and the back to ntop I get the error message.
Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Initialized socket, port 3001, address (any) Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Waiting for HTTP connections on port 3001 Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Starting web server Oct 19 17:12:08 syslog ntop[1949]: THREADMGMT: web connections thread (1949) started... Oct 19 17:12:08 syslog ntop[1949]: Note: SIGPIPE handler set (ignore) Oct 19 17:12:08 syslog ntop[1949]: WEB: ntop's web server is now processing requests Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread (114696) for web server Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Server started... continuing with initialization Oct 19 17:12:08 syslog ntop[1950]: THREADMGMT: pcap dispatch thread running... Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread (131081) for network packet sniffing on eth0 Oct 19 17:12:19 syslog ntop[1949]: SECURITY: Loading items table Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED selection, 0 [out of 15] hosts selected Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: Device 0: no hosts deleted Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED selection, 51 [out of 65] hosts selected Oct 19 17:13:10 syslog ntop[1945]: IDLE_PURGE: Device 1 [NetFlow-device]: 51 hosts deleted, elapsed time is 1.685442 seconds (0.033048 per host) Oct 19 17:14:38 syslog ntop[1944]: OSFP: scanFingerprintLoop() checked 3, resolved 3 Oct 19 17:15:00 syslog ntop[1949]: URL security(5): Found bad file extension (.dll) in URL... Oct 19 17:15:00 syslog ntop[1949]: **ERROR** URL security: '/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=6254&STRMVER=4&CAPREQ=0' rejected (code=5)(client=::f4ee:6745:5ce8:3a41) Oct 19 17:15:00 syslog ntop[1949]: **ERROR** Rejected request from address ::f4ee:6745:5ce8:3a41 (it previously sent ntop a
bad request)
Oct 19 17:15:00 syslog last message repeated 25 times Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED selection, 0 [out of 16] hosts selected Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: Device 0: no hosts deleted Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED selection, 108 [out of 133] hosts selected Oct 19 17:15:14 syslog ntop[1945]: IDLE_PURGE: Device 1 [NetFlow-device]: 108 hosts deleted, elapsed time is 3.450987 seconds (0.031954 per host)
Michael Wenzelmaier
Interlink Companies Phone: 574-524-1000 Ext. 114 Email: [EMAIL PROTECTED]
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Burton M. Strauss III Sent: Thursday, September 23, 2004 12:17 PM To: [EMAIL PROTECTED] Subject: RE: [Ntop] web server problems
Backup in the log and find the original erroneous request. You may need to enable --trace-level 4 to see all the messages.
-----Burton
-----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Michael Wenzelmaier Sent: Thursday, September 23, 2004 10:37 AM To: [EMAIL PROTECTED] Subject: [Ntop] web server problems
Hi,
My ntop was running fine for a few months until recently. Now I'm getting the folloing error message. Can anybody tell me how
do fix this?
Thu Sep 23 10:57:26 2004 **ERROR** Rejected request from address ::f41e:9f44:5ce8:3a41 (it previously sent ntop a bad request)
Michael Wenzelmaier
Interlink Companies
Phone: 574-524-1000
Ext. 114
Email: [EMAIL PROTECTED]
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
--- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
--- Incoming mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
--- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system (http://www.grisoft.com). Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
