We compiled each one from source downloaded from www.ntop.org, So I do not
believe we are running a CA or a Zone Alarm version. Looking our syslog
and access.log I do not see a buffer too short message. We are running at
the default trace level, do wee need to be running at 4 or 5 to see the
error? I have included the datadump request from the access.log and
warnings seen in syslog in case they are of some help.
access.log:
192.168.X.X nit - [27/Jun/2006:16:48:10 -0400] "GET /gauge.jpg HTTP/1.1"
200 3800 - - 7
192.168.X.X nit - [27/Jun/2006:16:48:10 -0400] "GET
/pktTTLDistribPie.png HTTP/1.1" 200 174 - - 33
192.168.X.X nit - [27/Jun/2006:16:48:10 -0400] "GET
/allProtoDistribution.png HTTP/1.1" 200 174 - - 29
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_FTPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counter
=&title= HTTP/1.1" 200 2905 - - 11
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_HTTPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counte
r=&title= HTTP/1.1" 200 3572 - - 26
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_DNSBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counter
=&title= HTTP/1.1" 200 3569 - - 10
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_TelnetBytes&arbiface=eth3&arbip=&start=now-12h&end=now&coun
ter=&title= HTTP/1.1" 200 2210 - - 12
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_NBios%2DIPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&
counter=&title= HTTP/1.1" 200 4141 - - 17
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_MailBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counte
r=&title= HTTP/1.1" 200 2321 - - 9
192.168.X.X nit - [27/Jun/2006:16:48:11 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_DHCP%2DBOOTPBytes&arbiface=eth3&arbip=&start=now-12h&end=no
w&counter=&title= HTTP/1.1" 200 2126 - - 9
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_SNMPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counte
r=&title= HTTP/1.1" 200 3653 - - 38
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_NNTPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counte
r=&title= HTTP/1.1" 200 2065 - - 12
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_VoIPBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counte
r=&title= HTTP/1.1" 200 2698 - - 9
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_X11Bytes&arbiface=eth3&arbip=&start=now-12h&end=now&counter
=&title= HTTP/1.1" 200 2064 - - 12
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_SSHBytes&arbiface=eth3&arbip=&start=now-12h&end=now&counter
=&title= HTTP/1.1" 200 3033 - - 13
192.168.X.X nit - [27/Jun/2006:16:48:12 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_GnutellaBytes&arbiface=eth3&arbip=&start=now-12h&end=now&co
unter=&title= HTTP/1.1" 200 2421 - - 9
192.168.X.X nit - [27/Jun/2006:16:48:13 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_KazaaBytes&arbiface=eth3&arbip=&start=now-12h&end=now&count
er=&title= HTTP/1.1" 200 2729 - - 10
192.168.X.X nit - [27/Jun/2006:16:48:13 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_WinMXBytes&arbiface=eth3&arbip=&start=now-12h&end=now&count
er=&title= HTTP/1.1" 200 2097 - - 9
192.168.X.X nit - [27/Jun/2006:16:48:13 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_eDonkeyBytes&arbiface=eth3&arbip=&start=now-12h&end=now&cou
nter=&title= HTTP/1.1" 200 3041 - - 13
192.168.X.X nit - [27/Jun/2006:16:48:13 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_BitTorrentBytes&arbiface=eth3&arbip=&start=now-12h&end=now&
counter=&title= HTTP/1.1" 200 2123 - - 12
192.168.X.X nit - [27/Jun/2006:16:48:13 -0400] "GET /viewLog.html
HTTP/1.1" 200 2205/13021 - - 563
192.168.X.X nit - [27/Jun/2006:16:49:37 -0400] "GET
/plugins/rrdPlugin?action=arbreq&which=graph&arbfile=IP_MessengerBytes&arbiface=eth3&arbip=&start=now-12h&end=now&c
ounter=&title= HTTP/1.1" 200 2562 - - 10
192.168.X.X nit - [27/Jun/2006:16:49:37 -0400] "GET
/ipProtoDistribution.png HTTP/1.1" 200 174 - - 27
192.168.X.X nit - [27/Jun/2006:16:49:38 -0400] "GET
/plugins/rrdPlugin?action=graphSummary&graphId=4&key=interfaces/eth3/&start=now-12h&end=now
HTTP/1.1" 200 15593 - -
145
192.168.X.X nit - [27/Jun/2006:16:51:39 -0400] "GET / HTTP/1.1" 200
5974/47864 - - 11
192.168.X.X nit - [27/Jun/2006:16:51:39 -0400] "GET /style.css HTTP/1.1"
200 2227 - - 4
192.168.X.X nit - [27/Jun/2006:16:51:40 -0400] "GET /functions.js
HTTP/1.1" 200 3783 - - 6
192.168.X.X nit - [27/Jun/2006:16:51:41 -0400] "GET /theme.css HTTP/1.1"
200 5714 - - 6
192.168.X.X nit - [27/Jun/2006:16:51:42 -0400] "GET /theme.js HTTP/1.1"
200 2007 - - 6
192.168.X.X nit - [27/Jun/2006:16:51:43 -0400] "GET /JSCookMenu.js
HTTP/1.1" 200 24645 - - 370
192.168.X.X nit - [27/Jun/2006:16:51:44 -0400] "GET /white_bg.gif
HTTP/1.1" 200 805 - - 16
192.168.X.X nit - [27/Jun/2006:16:51:44 -0400] "GET /ntop_logo.gif
HTTP/1.1" 200 1907 - - 1
192.168.X.X nit - [27/Jun/2006:16:51:45 -0400] "GET /spacer.gif
HTTP/1.1" 200 336 - - 5
192.168.X.X nit - [27/Jun/2006:16:51:45 -0400] "GET /blank.gif HTTP/1.1"
200 1086 - - 6
Syslog:
/var/log/syslog:Jun 27 10:59:02 we01-nms ntop[6550]: **WARNING** packet
truncated (8907->8232)
/var/log/syslog:Jun 27 10:59:02 we01-nms ntop[6550]: **WARNING** packet
truncated (10170->8232)
/var/log/syslog:Jun 27 16:50:56 we01-nms ntop[6550]: **WARNING** packet
truncated (9257->8232)
/var/log/syslog:Jun 27 16:50:57 we01-nms ntop[6550]: **WARNING** packet
truncated (9257->8232)
/var/log/syslog:Jun 27 16:50:57 we01-nms ntop[6550]: **WARNING** packet
truncated (10570->8232)
/var/log/syslog:Jun 27 16:50:57 we01-nms ntop[6550]: **WARNING** packet
truncated (13196->8232)
/var/log/syslog:Jun 27 16:50:59 we01-nms ntop[6550]: **WARNING** packet
truncated (9257->8232)
hristopher Collins wrote:
-------- Original Message --------
Subject: RE: [Ntop] Dump Data failing
Date: Sat, 24 Jun 2006 14:55:01 -0500
From: Burton Strauss <[EMAIL PROTECTED]>
Reply-To: [email protected]
To: <[email protected]>
1) Check in the log and see if there's a buffer too short message there.
2) Are you running Computer Associates or Zone Alarm? The ZA version
that
CA licensed re-writes each html page and it fails at the 256KB page size
-
which many ntop pages exceed. CA knows about the bug and has zero
interest
in fixing same.
-----Burton
-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Monday, June 19, 2006 1:33 PM
To: [email protected]
Subject: [Ntop] Dump Data failing
We are running NTOP v.3.2 on 40+ machines. Some display the Data Dump
feature fine, but some display the following, we running on slackware
10.2
and I believe identical configurations. Wht might this be happening?
','Help','/ntophelp.html',null,null], ['','Report a
Problem','/ntopProblemReport.html',null,null],
[null,'FAQ','/faq.html',null,null], ['','Risk
Flags','/help.html',null,null], ], [null,'Summary',null,null,null,
[null,'Traffic','/trafficStats.html',null,null],
[null,'Hosts','/hostsInfo.html',null,null], [null,'Network
Load','/thptStats.html',null,null], [null,'Network
Flows','/NetFlows.html',null,null], ], [null,'All
Protocols',null,null,null,
[null,'Traffic','/sortDataProtos.html',null,null],
[null,'Throughput','/sortDataThpt.html',null,null],
[null,'Activity','/dataHostTraffic.html',null,null], ],
[null,'IP',null,null,null, [null,'Summary',null,null,null,
[null,'Traffic','/sortDataIP.html',null,null],
[null,'Multicast','/multicastStats.html',null,null], [null,'Internet
Domain','/domainStats.html',null,null], [null,'Host
Clusters','/hostClusters.html',null,null],
[null,'Distribution','/ipProtoDistrib.html',null,null], ],
[null,'Traffic
Directions',null,null,null, [null,'Local to
Local','/ipL2L.html',null,null],
[null,'Local to Remote','/ipL2R.html',null,null], [null,'Remote to
Local','/ipR2L.html',null,null], [null,'Remote to
Remote','/ipR2R.html',null,null], ], [null,'Local',null,null,null,
[null,'Routers','/localRoutersList.html',null,null], [null,'Ports
Used','/ipProtoUsage.html',null,null], [null,'Host
Fingerprint','/localHostsFingerprint.html',null,null], [null,'Host
Characterization','/localHostsCharacterization.html',null,null],
[null,'Network
Traffic Map','/networkMap.html',null,null], [null,'Local
Matrix','/ipTrafficMatrix.html',null,null], ], ],
[null,'Media',null,null,null, [null,'Fibre Channel',null,null,null,
[null,'Traffic','/fcData.html',null,null],
[null,'Throughput','/fcThpt.html',null,null],
[null,'Activity','/fcActivity.html',null,null],
[null,'Hosts','/fcHostsInfo.html',null,null], [null,'Traffic Per
Port','/fcShowStats.html',null,null],
[null,'VSANs','/vsanList.html',null,null],
[null,'VSAN Summary','/vsanDistrib.html',null,null], ], ],
[null,'Utils',null,null,null, [null,'Data Dump','/dump.html',null,null],
[null,'View Log','/viewLog.html',null,null], ],
[null,'Plugins',null,null,null, [null,'Host Last Seen',null,null,null,
[null,'Activate','/showPlugins.html?LastSeen=1',null,null],
[null,'Describe','/showPlugins.html?LastSeen',null,null], ], [null,'ICMP
Watch',null,null,null,
[null,'Deactivate','/showPlugins.html?icmpWatch=0',null,null],
[null,'View','/plugins/icmpWatch',null,null],
[null,'Describe','/showPlugins.html?icmpWatch',null,null], ],
[null,'NetFlow',null,null,null,
[null,'Deactivate','/showPlugins.html?NetFlow=0',null,null],
[null,'Configure','/plugins/NetFlow',null,null],
[null,'Describe','/showPlugins.html?NetFlow',null,null],
[null,'Statistics','/plugins/NetFlow/statistics.html',null,null], ],
[null,'PDA',null,null,null,
[null,'Activate','/showPlugins.html?PDAPlugin=1',null,null],
[null,'Describe','/showPlugins.html?PDAPlugin',null,null], ],
[null,'Round-Robin Databases',null,null,null,
[null,'Deactivate','/showPlugins.html?rrdPlugin=0',null,null],
[null,'Configure','/plugins/rrdPlugin',null,null],
[null,'Describe','/showPlugins.html?rrdPlugin',null,null],
[null,'Statistics','/plugins/rrdPlugin/statistics.html',null,null],
['','Arbitrary Graphs','/plugins/rrdPlugin/arbgraph.html',null,null], ],
[null,'sFlow',null,null,null,
[null,'Activate','/showPlugins.html?sFlow=1',null
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop
