RE: [Ntop] Log

[Burton Strauss]

The AS list is a file for mapping IP addresses to ASNs.

 

-i none will cause ntop to capture from local interface "none".  The threads? Don't worry about them - if theres no work for them they won't consume much if any resources.  All of this is frequently discussed on this list.

 

Read the man page... that will answer #4.  But we ask you to give us this data because it lets us determine where to focus resources (e.g. binary packages).

 

-----Burton

---

From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Tang
Sent: Monday, December 06, 2004 9:31 PM
To: [EMAIL PROTECTED]
Subject: [Ntop] Log

 

Hi,

 

I am new to use NTop and need some help from experts in this list.

I have setup the NTop v3.0 in my network (running on Windows XP pro PC). I can see my Ntop is running fine. I only want use it to collect the Cisco Netflow data. But I can see some other process also running in the background. Here is process log. How to disable the un wanted process?

 

11/29/04 09:41:36  **WARNING** ASN: Unable to open file 'AS-list.txt'
11/29/04 09:41:36  I18N: This instance of ntop does not support multiple languages
11/29/04 09:41:36  IP2CC: Checking for IP address <-> Country Code mapping file
11/29/04 09:41:36  IP2CC: Loading file 'C:\Program Files\OPENXTRA\NTopWin32\p2c.opt.table.gz'
11/29/04 09:41:36  IP2CC: ...found 9 lines
11/29/04 09:41:36  GDVERCHK: Guessing at libgd version
11/29/04 09:41:36  GDVERCHK: ... as 1.8.x
11/29/04 09:41:36  Initializing external applications
11/29/04 09:41:36  Initializing semaphores, mutexes and threads
11/29/04 09:41:36  THREADMGMT: Started thread (408) for network packet analyser
11/29/04 09:41:36  THREADMGMT: Started thread (416) for fingerprinting
11/29/04 09:41:36  THREADMGMT: Packet processor thread running...
11/29/04 09:41:36  THREADMGMT: Fingerprint scan thread running...
11/29/04 09:41:36  THREADMGMT: Idle host scan thread running...
11/29/04 09:41:36  THREADMGMT: Started thread (420) for idle hosts detection
11/29/04 09:41:36  THREADMGMT: Started thread (428) for DNS address resolution
11/29/04 09:41:36  Calling plugin start functions (if any)
11/29/04 09:41:36  Sniffying...
11/29/04 09:41:36  THREADMGMT: Address resolution thread running...
11/29/04 09:41:36  Listening on [Intel 8255x-based Integrated Fast Ethernet]
11/29/04 09:41:36  Loading Plugins
11/29/04 09:41:36  ICMP: Welcome to icmpWatchPlugin. (C) 1999-2004 by Luca Deri
11/29/04 09:41:36  CHKVER: Checking current ntop version at version.ntop.org/version.xml
11/29/04 09:41:36  NFS: Welcome to nfsWatchPlugin. (C) 1999-2004 by Luca Deri
11/29/04 09:41:36  SFLOW: Welcome to sFlowPlugin. (C) 2002-04 by Luca Deri
11/29/04 09:41:36  NETFLOW: Welcome to NetFlow.(C) 2002-04 by Luca Deri
11/29/04 09:41:36  RRD: Welcome to rrdPlugin. (C) 2002-04 by Luca Deri.
11/29/04 09:41:36  Calling plugin start functions (if any)
11/29/04 09:41:36  RRD: Welcome to the RRD plugin
11/29/04 09:41:36  RRD: Started thread (464) for data collection.
11/29/04 09:41:36  THREADMGMT: rrd thread (464) started
11/29/04 09:41:36  NETFLOW: White list initialized to ''
11/29/04 09:41:36  NETFLOW: Black list initialized to ''
11/29/04 09:41:36  NETFLOW: Created a socket (476)
11/29/04 09:41:36  NETFLOW: Collector listening on port 2055
11/29/04 09:41:36  Creating dummy interface, 'NetFlow-device'
11/29/04 09:41:36  THREADMGMT: netFlow thread(496) started
11/29/04 09:41:36  Note: Reporting device initally set to 0 [Intel 8255x-based Integrated Fast Ethernet]
11/29/04 09:41:36  INITWEB: Initializing web server
11/29/04 09:41:36  INITWEB: Initializing tcp/ip socket connections for web server
11/29/04 09:41:36  INITWEB: Initialized socket, port 3000, address (any)
11/29/04 09:41:36  INITWEB: Waiting for HTTP connections on port 3000
11/29/04 09:41:36  INITWEB: Starting web server
11/29/04 09:41:36  THREADMGMT: Started thread (520) for web server
11/29/04 09:41:36  WEB: ntop's web server is now processing requests
11/29/04 09:41:36  THREADMGMT: Started thread (524) for network packet sniffing on \Device\NPF_{CEB63967-5548-484B-A7BA-199AF00FEADC}
11/29/04 09:41:36  THREADMGMT: pcap dispatch thread running...
11/29/04 09:41:51  **ERROR** CHKVER: Unable to resolve site version.ntop.org
11/29/04 09:41:51  CHKVER: Checking current ntop version at www.burtonstrauss.com/version.xml
11/29/04 09:42:06  **ERROR** CHKVER: Unable to resolve site www.burtonstrauss.com

1. Why the process want open file 'AS-list.txt'?

2. How to stop the network packet analyser?
3. How to stop Sniffying...?

4. How to stop Checking current ntop version?

 

Regards

 

Kevin

 

 

------------------------------------------------------------------------------
"This communication, including any attachments, is confidential.
If you are not the intended recipient, you should not read
it - please contact me immediately, destroy it, and do not
copy or use any part of this communication or disclose
anything about it. Thank you. Please note that this
communication does not designate an information system for
the purposes of the Electronic Transactions Act 2002."
------------------------------------------------------------------------------

_______________________________________________
Ntop mailing list
[EMAIL PROTECTED]
http://listgateway.unipi.it/mailman/listinfo/ntop