-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Michael Wenzelmaier
Sent: Tuesday, October 19, 2004 4:59 PM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] web server problems
I'm only using Internet Explorer. I don't know where the dll
comes from. I guess if I think back it started happening after I
installed to XP SP2.
Michael Wenzelmaier
Interlink Companies
Phone: 574-524-1000
Ext. 114
Email: [EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Burton M. Strauss III
Sent: Tuesday, October 19, 2004 4:56 PM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] web server problems
Sounds perfectly reasonable to me. ntop saw a bad request and
smacked you.
Why are you trying to send ntop's web server a request for a Windows DLL
anyway???? STFW... for owssvr.dll
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Michael Wenzelmaier
Sent: Tuesday, October 19, 2004 4:48 PM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] web server problems
This is what I get. I can access it with the browser just fine
the first time. When I go to another site and the back to ntop I
get the error message.
Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Initialized socket,
port 3001, address (any)
Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Waiting for HTTP
connections on port 3001
Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Starting web server
Oct 19 17:12:08 syslog ntop[1949]: THREADMGMT: web connections
thread (1949) started...
Oct 19 17:12:08 syslog ntop[1949]: Note: SIGPIPE handler set (ignore)
Oct 19 17:12:08 syslog ntop[1949]: WEB: ntop's web server is
now processing requests
Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread
(114696) for web server
Oct 19 17:12:08 syslog ntop[1941]: INITWEB: Server started...
continuing with initialization
Oct 19 17:12:08 syslog ntop[1950]: THREADMGMT: pcap dispatch
thread running...
Oct 19 17:12:08 syslog ntop[1941]: THREADMGMT: Started thread
(131081) for network packet sniffing on eth0
Oct 19 17:12:19 syslog ntop[1949]: SECURITY: Loading items table
Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED
selection, 0 [out of 15] hosts selected
Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: Device 0: no
hosts deleted
Oct 19 17:13:08 syslog ntop[1945]: IDLE_PURGE: FINISHED
selection, 51 [out of 65] hosts selected
Oct 19 17:13:10 syslog ntop[1945]: IDLE_PURGE: Device 1
[NetFlow-device]: 51 hosts deleted, elapsed time is 1.685442
seconds (0.033048 per host)
Oct 19 17:14:38 syslog ntop[1944]: OSFP: scanFingerprintLoop()
checked 3, resolved 3
Oct 19 17:15:00 syslog ntop[1949]: URL security(5): Found bad
file extension (.dll) in URL...
Oct 19 17:15:00 syslog ntop[1949]: **ERROR** URL security:
'/_vti_bin/owssvr.dll?UL=1&ACT=4&BUILD=6254&STRMVER=4&CAPREQ=0'
rejected (code=5)(client=::f4ee:6745:5ce8:3a41)
Oct 19 17:15:00 syslog ntop[1949]: **ERROR** Rejected request
from address ::f4ee:6745:5ce8:3a41 (it previously sent ntop a
bad request)
Oct 19 17:15:00 syslog last message repeated 25 times
Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED
selection, 0 [out of 16] hosts selected
Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: Device 0: no
hosts deleted
Oct 19 17:15:10 syslog ntop[1945]: IDLE_PURGE: FINISHED
selection, 108 [out of 133] hosts selected
Oct 19 17:15:14 syslog ntop[1945]: IDLE_PURGE: Device 1
[NetFlow-device]: 108 hosts deleted, elapsed time is 3.450987
seconds (0.031954 per host)
Michael Wenzelmaier
Interlink Companies
Phone: 574-524-1000
Ext. 114
Email: [EMAIL PROTECTED]
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On
Behalf Of Burton M. Strauss III
Sent: Thursday, September 23, 2004 12:17 PM
To: [EMAIL PROTECTED]
Subject: RE: [Ntop] web server problems
Backup in the log and find the original erroneous request. You
may need to
enable --trace-level 4 to see all the messages.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of
Michael Wenzelmaier
Sent: Thursday, September 23, 2004 10:37 AM
To: [EMAIL PROTECTED]
Subject: [Ntop] web server problems
Hi,
My ntop was running fine for a few months until recently. Now I'm
getting the folloing error message. Can anybody tell me how
do fix this?
Thu Sep 23 10:57:26 2004 **ERROR** Rejected request from address
::f41e:9f44:5ce8:3a41 (it previously sent ntop a bad request)
Michael Wenzelmaier
Interlink Companies
Phone: 574-524-1000
Ext. 114
Email: [EMAIL PROTECTED]
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
---
Incoming mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
---
Outgoing mail is certified Virus Free.
Checked by AVG anti-virus system (http://www.grisoft.com).
Version: 6.0.778 / Virus Database: 525 - Release Date: 10/15/2004
_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop
