Your message dated Thu, 19 May 2005 10:13:01 +0200
with message-id <[EMAIL PROTECTED]>
and subject line Bug#165080: Seems fixed with version 2:3.0-5
has caused the attached Bug report to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what I am
talking about this indicates a serious mail system misconfiguration
somewhere. Please contact me immediately.)
Debian bug tracking system administrator
(administrator, Debian Bugs database)
--------------------------------------
Received: (at submit) by bugs.debian.org; 16 Oct 2002 19:04:10 +0000
>From [EMAIL PROTECTED] Wed Oct 16 14:04:10 2002
Return-path: <[EMAIL PROTECTED]>
Received: from 213-152-32-77.dsl.eclipse.net.uk (localhost) [213.152.32.77]
by master.debian.org with esmtp (Exim 3.12 1 (Debian))
id 181tSk-0001g7-00; Wed, 16 Oct 2002 14:04:10 -0500
Received: from adrian by localhost with local (Exim 4.10)
id 181tSY-0004Yq-00
for [EMAIL PROTECTED]; Wed, 16 Oct 2002 20:03:58 +0100
Date: Wed, 16 Oct 2002 20:03:58 +0100
To: [EMAIL PROTECTED]
Subject: ntop: creates world writeable files in /var/log/ntop
Message-ID: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
User-Agent: Mutt/1.4i
From: Adrian Bridgett <[EMAIL PROTECTED]>
X-MailScanner: Found to be clean
X-MailScanner-SpamCheck: not spam, SpamAssassin (score=-4.6, required 5,
SPAM_PHRASE_00_01, USER_AGENT, USER_AGENT_MUTT)
Delivered-To: [EMAIL PROTECTED]
X-Spam-Status: No, hits=-4.6 required=5.0
tests=SPAM_PHRASE_00_01,USER_AGENT,USER_AGENT_MUTT
version=2.41
X-Spam-Level:
Package: ntop
Version: 2.0.0-14
Severity: important
I turned on the "log suspicious packets" option and was wondering what it
had picked up:
cerberos /var/log/ntop$ ls -l /var/log/ntop
total 0
-rw-rw-rw- 1 root root 0 Oct 16 19:56
ntop-suspicious-pkts.ppp0.pcap
-rw-rw-rw- 1 root root 0 Oct 16 19:56
ntop-suspicious-pkts.wlan0.pcap
cerberos /var/log/ntop$ ls -ld /var/log/ntop
drwxr-xr-x 2 ntop root 1024 Oct 16 19:56 /var/log/ntop
Ouch! I stopped ntop, removed these files, restarted it (using sudo if that
matters), and they are back once again.
As these packets could potentially contain useful information, maybe they
should not be world readable. They certainly shouldn't be world writeable!
Thanks
Adrian
Email: [EMAIL PROTECTED]
Windows NT - Unix in beta-testing. GPG/PGP keys available on public key servers
Debian GNU/Linux -*- By professionals for professionals -*- www.debian.org
---------------------------------------
Received: (at 165080-done) by bugs.debian.org; 19 May 2005 08:24:04 +0000
>From [EMAIL PROTECTED] Thu May 19 01:24:04 2005
Return-path: <[EMAIL PROTECTED]>
Received: from c-adt-5.ataco.se (bixbite.opalsys.net) [213.115.168.248]
by spohr.debian.org with esmtp (Exim 3.35 1 (Debian))
id 1DYgK4-00087r-00; Thu, 19 May 2005 01:24:04 -0700
Received: from ola by bixbite.opalsys.net with local (Exim 4.50)
id 1DYg9N-0005Jn-3l; Thu, 19 May 2005 10:13:01 +0200
Date: Thu, 19 May 2005 10:13:01 +0200
From: Ola Lundqvist <[EMAIL PROTECTED]>
To: Justin Burket <[EMAIL PROTECTED]>, [EMAIL PROTECTED]
Subject: Re: Bug#165080: Seems fixed with version 2:3.0-5
Message-ID: <[EMAIL PROTECTED]>
Reply-To: [EMAIL PROTECTED]
References: <[EMAIL PROTECTED]>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <[EMAIL PROTECTED]>
User-Agent: Mutt/1.5.9i
Delivered-To: [EMAIL PROTECTED]
X-Spam-Checker-Version: SpamAssassin 2.60-bugs.debian.org_2005_01_02
(1.212-2003-09-23-exp) on spohr.debian.org
X-Spam-Status: No, hits=-6.0 required=4.0 tests=BAYES_00,HAS_BUG_NUMBER
autolearn=no version=2.60-bugs.debian.org_2005_01_02
X-Spam-Level:
Hello
On Wed, May 18, 2005 at 08:33:23PM -0800, Justin Burket wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> I gave the '-q' option a try and took a look at /var/log/ntop:
>
> [EMAIL PROTECTED] on 4] [08:24 PM]
> [/var/log/ntop]ls -al
> total 104
> drwxr-xr-x 2 ntop root 68 May 18 20:22 .
> drwxr-xr-x 15 root root 4096 May 18 19:38 ..
> - -rw------- 1 ntop ntop 32171 May 18 20:22 access.log
> - -rw-r--r-- 1 root root 96 May 18 20:22
> ntop-suspicious-pkts.dev134662416.pcap
>
> Ntop is running as follows:
>
> [/var/log/ntop]ps uax | grep ntop
> ntop 4910 4.3 7.5 98288 29112 ? Ss 20:22 0:05
> /usr/sbin/ntop -d -L -u ntop -P /var/lib/ntop --skip-version-check -a
> /var/log/ntop/access.log -i ppp0 -O /var/log/ntop/ -w 10.0.1.1:7070 -W
> 0 -q
>
> maybe fixed upstream?
Probably. I'll close this bug now.
Thanks for the information.
Regards,
// Ola
> Justin KL1RL
> Fairbanks AK
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.0 (Darwin)
>
> iD8DBQFCjBcTx5nCM+Mt8tERAgW2AJ98f9aBAJ/qI3+spjytKmXirkAlLgCgydvc
> kRd61ZOTur6N8p9ffXNQ+Lk=
> =g8Wy
> -----END PGP SIGNATURE-----
>
>
>
--
--------------------- Ola Lundqvist ---------------------------
/ [EMAIL PROTECTED] Annebergsslingan 37 \
| [EMAIL PROTECTED] 654 65 KARLSTAD |
| +46 (0)54-10 14 30 +46 (0)70-332 1551 |
| http://www.opal.dhs.org UIN/icq: 4912500 |
\ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 /
---------------------------------------------------------------
--
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
