It's based on the port #s of traffic being sent to/from the host. 

-----Burton

(Please note that I am speaking only as an individual and not as a
representative of my employer) 

-----Original Message-----
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of
[EMAIL PROTECTED]
Sent: Tuesday, July 11, 2006 9:37 AM
To: [email protected]
Subject: [Ntop] host type

Hi,

when doing a port scan on the network, ntop characterizes the host, which is
being scanned, as Printer, SMTP (Mail) Server, POP Server, etc. Is this
assignment made only by looking at the destination port numbers that are
being used by the port scanner? Is there a quick way to disable this, or is
it necessary to change the code?

/Michal

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop

Reply via email to