search for: ntop

I installed ntop on a centos5.2 system (which got all yum updates a few days ago)... # rpm -q ntop rrdtool ntop-3.3.8-1.el5.rf rrdtool-1.2.28-1.el5.rf went through the password configuration when I start it, its erroring. # service ntop start Starting ntop: Processing file /etc/ntop.conf for par...

...why I haven't signed up for this list before since we use CentOS all over the place. The list is very useful and it is good for me to participate and "give back" to the community. Anywho, I wanted to post this response to a thread that was created back in November 2008 about the ntop daemon failing to start. I'm currently setting up ntop as a NetFlow & SFlow collector and came across the issue. A quick refresher, the init script for ntop has an issue where it can't parse the ntop.conf file correctly if switches are entered before the "@/etc/ntop.conf"....

If you are running ntop on 5.4, what compile options? Use ports version? Or surgefile tarball? It makes a great security forensics tools, but I can't get it to stop segfaulting.Was wondering if anyone found a fix for it. -- Michael Scheidell, CTO 561-999-5000, ext 1131 SECNAP Network Security Corporation Take a vac...

--------------------------------------------------------------------- Red Hat, Inc. Security Advisory Synopsis: Remote file access vulnerability in ntop Advisory ID: RHSA-2000:049-02 Issue date: 2000-08-07 Updated on: 2000-08-08 Product: Red Hat Powertools Keywords: N/A Cross references: N/A --------------------------------------------------------------------- 1. Topic: The version of ntop which was include...

Hi, Can anyone please recomment an ntop alternative for me, which is more stable as well? I need to monitor all connections to and from a CentOS 5 server and ntop does it fairly well, but seems to crash at random times, and thus looses all the date prior to the crash. Cacti / MRTG only gives complete bandwidth usage on the given interf...

...Running CentOS 4.2 with the following conditions: [root at gatekeeper bin]# uname -srvmpi Linux 2.6.9-22.0.1.EL #1 Thu Oct 27 12:26:11 CDT 2005 i686 i686 i386 [root at gatekeeper bin]# uptime 07:54:41 up 31 days, 13:45, 6 users, load average: 0.00, 0.02, 0.00 [root at gatekeeper bin]# rpm -q ntop ntop-3.1-1.2.el4.rf [root at gatekeeper bin]# df -h S.ficheros Tama?o Usado Disp Uso% Montado en /dev/mapper/VolGroup00-LogVol00 2,9G 2,4G 425M 85% / /dev/hda1 99M 16M 79M 17% /boot none 157M 0 157M 0% /dev/shm [root at...

Hi, I want to do some analysis of NTOP data. Currently I have installed NTOP on Centos 5.1 and I am able to see some network data being graphed. But there is no documentation given whether NTOP is showing Network Throughput in MBytes or MBits for ex I am getting Throughput Min: 163.7k , Max: 3.0 M and Last 859.4k and there are some...

...failed. Return 1 if it was used. + */ +static int +ssh_connect_happy_eyeballs_initiate(const char *host, struct addrinfo *ai, + int *timeout_ms, int needpriv, + struct timeval *initiate, + int *nfds, fd_set *fds, + struct addrinfo *fd_ai[]) +{ + int oerrno, sock; + char ntop[NI_MAXHOST], strport[NI_MAXSERV]; + + memset(ntop, 0, sizeof(ntop)); + memset(strport, 0, sizeof(strport)); + /* If *nfds != 0 then *initiate is initialised. */ + if (*nfds && + (ai == NULL || + !ssh_connect_timeout(initiate, CONNECTION_ATTEMPT_DELAY))) + /* Do not initiate new c...

Hi all. I have currently a task to implement a network traffic analyzer. Some years ago I've used NTOP for that purpose, I would also like to test some alternatives. Which alternatives can you recommend and why? Thanks ;) Best regards, Rafa? Radecki.

Hi, Are there rpm binaries for ntop for CentOS Linux version 5.8? Regards, Kaushal

...1500 prio 5 bounded isolated # rules # download tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip dst 10.0.1.0/24 flowid 1:1 # upload tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip src 10.0.1.0/24 flowid 1:1 Problem is when I try to measure traffic with ntop (www.ntop.org), it is seen that overall traffic which that ip block limited to is much higher then 64kbit, actually it is about 500Kbps which signifies that tc do not limit properly. What could be the reason of this inconsistancy? How could I limit 64 Kbps? Is the above configuration correct? Many...

...e canonical name of the localhost of the socket. The + * caller should free the returned string with xfree. + */ + + const char * + get_local_hostname(int socket) + { + struct sockaddr_storage addr_6or4; + int i; + socklen_t addr_6or4_len; + char name[NI_MAXHOST], ntop[NI_MAXHOST]; + + /* Get local IP address*/ + addr_6or4_len = sizeof(addr_6or4); + memset(&addr_6or4, 0, sizeof(addr_6or4)); + if (getsockname(socket, (struct sockaddr *) &addr_6or4, &addr_6or4_len) < 0) { + debug("getsockname fail...

...ce ip address with following message: canohost.c: around line #100 if (getaddrinfo(name, NULL, &hints, &aitop) != 0) { logit("reverse mapping checking getaddrinfo for %.700s " "from address %.100s failed - POSSIBLE BREAKIN ATTEMPT!", ntop, name); return xstrdup(ntop); } I added ip address to the message. Since the name woun't be abled to be resolved correctly, reporting only host name won't help so. Please apply below patch if it is acceptable. Thanks! -- Junji --- openssh-4.0p1/canohost.c 2005-03-01 19:16...

Hi, Would it be sane to run ntop on the same box as Asterisk or better to mirror a LAN port etc? http://www.ntop.org/OpenSourceVoipMonitoring.pdf Thanks.

...1500 prio 5 bounded isolated # rules # download tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip dst 10.0.1.0/24 flowid 1:1 # upload tc filter add dev eth0 parent 1: protocol ip prio 16 u32 \ match ip src 10.0.1.0/24 flowid 1:1 Problem is when I try to measure traffic with ntop (www.ntop.org), it is seen that overall traffic which that ip block handles is much higher then 64kbit, actually it is about 500Kbps which is not what I want !. tc -s class show dev eth0 shows that I got the following [root@nat root]# /usr/local/sbin/traffic-limit.sh status class cbq 1: root rate...

Hey all, I wanted to let you all know the hex thing worked out for me. Thanks again. I had another question though that was sparked by Ionut Gogu''s question on monitoring. I setup and installed ntop for this purpose and noticed that we have so much traffic it is killing the machine. We have 1 GB of ram in there and it is not enough. It still overflows to the swap file and eats about half that as well. There are approximately 5000 connections setup over a bridge being controlled by tc. Is there...

...ient that attaches to it. The verify_reverse_mapping flag just turns off the forward lookup through DNS of the clients hostname, once the hostname has been determined. I am using Solaris 8 with ssh 3.4p1, and this piece of code: debug3("Trying to reverse map address %.100s.", ntop); /* Map the IP address to a host name. */ if (getnameinfo((struct sockaddr *)&from, fromlen, name, sizeof(name), NULL, 0, NI_NAMEREQD) != 0) { /* Host name not found. Use ip address. */ log("Could not reverse map address %.100s....

...2.2.0p1-/canohost.c Thu Jun 22 13:32:31 2000 +++ openssh-2.2.0p1/canohost.c Sun Oct 29 16:44:49 2000 @@ -32,7 +32,8 @@ int i; socklen_t fromlen; struct addrinfo hints, *ai, *aitop; - char name[MAXHOSTNAMELEN]; + char *name; + size_t name_size; char ntop[NI_MAXHOST], ntop2[NI_MAXHOST]; /* Get IP address of client. */ @@ -71,10 +72,21 @@ fatal("get_remote_hostname: getnameinfo NI_NUMERICHOST failed"); /* Map the IP address to a host name. */ - if (getnameinfo((struct sockaddr *)&from, fromlen,...

hi there, I just wanted to share a recent discovery I did on how to setup a secure VPN implementation for linux 2.4.x (I''m using 2.4.20 but it should be working, as far as documentation states, for > 2.4.18) without using FreeS/WAN. The tool (ipsec_tunnel: http://ringstrom.mine.nu/ipsec_tunnel/, by Tobias Ringström) is a kernel module based on ipip and ip_gre. It uses CyptoAPI to

...a very slightly modified version of patch 980 (the latest by Darren Tucker). It appears to me to be the best. Darren, thanks. This patch is applied against 4.3p2. The differences when compared against patch 980 are: 1) In sshconnect.c, where the Darren patch 980 did: ip = xstrdup(ntop); + ip = put_host_port(ntop, options.port); I didn't understand why the ip = xstrdup(ntop); wasn't removed, so this patch does: - ip = xstrdup(ntop); + ip = put_host_port(ntop, options.port); 2) Applies cleanly against openssh 4.3p2 (the addition...