Bug List:
1. Data Sent table bug - When selecting a header in any Data Sent
table, the cooresponding Data Received table is shown. Data Sent tables
can't be sorted at all.
2. When using the -m <subnet> flags, all data for that subnet is
represented under one "multi-homed" IP address.
3. intop no longer displays non-local IP addresses
4. Can't compile the with --enable-debug option. The error is:
gcc -DHAVE_CONFIG_H -I. -I/usr/local/include
-I/usr/src/ntop-current/gdchart0.94c -g -g -O2 -pipe -ggdb3 -Wall -Wshadow
-Wpointer-arith -Wcast-align -Winline -Wmissing-prototypes
-Wmissing-declarations -Wnested-externs -Wp,-MD,.deps/hash.pp -c hash.c
-fPIC -DPIC -o .libs/hash.lo
In file included from ntop.h:2040,
from hash.c:21:
globals-core.h:179: warning: declaration of `signal' shadows global
declaration
hash.c: In function `resizeHostHash':
hash.c:376: warning: unsigned int format, pointer arg (arg 4)
hash.c:480: warning: declaration of `i' shadows previous local
hash.c:527: `theHost' undeclared (first use in this function)
hash.c:527: (Each undeclared identifier is reported only once
hash.c:527: for each function it appears in.)
hash.c: In function `removeGlobalHostPeers':
hash.c:692: warning: unsigned int format, pointer arg (arg 5)
hash.c: In function `freeHostInfo':
hash.c:938: warning: declaration of `i' shadows previous local
make[2]: *** [hash.lo] Error 1
5. Can't compile icmpPlugin. The error is:
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -I/usr/local/include
-I/usr/src/ntop-current/gdchart0.94c -g -O2 -pipe
-Wp,-MD,.deps/icmpPlugin.pp -c icmpPlugin.c -fPIC -DPIC -o
.libs/icmpPlugin.lo
icmpPlugin.c: In function `sortICMPhosts':
icmpPlugin.c:146: `addressResolutionMutex' undeclared (first use in this
function)
icmpPlugin.c:146: (Each undeclared identifier is reported only once
icmpPlugin.c:146: for each function it appears in.)
icmpPlugin.c: In function `handleIcmpWatchHTTPrequest':
icmpPlugin.c:173: `device' undeclared (first use in this function)
make[3]: *** [icmpPlugin.lo] Error 1
Hardware:
Single Pentium III 1GHz
512M RAM
2 Network Interfaces
1 3Com 905C Compatable
1 Intel EtherExpress 100 Compatable (this is the interface
I'm sniffing on)
Software:
ntop-current 25 JAN 2002, complied from source
ntop -i eth1 -P /var/log/ntop -A2 -E -e 50 -s 16384 -t5 -M -m
192.168.0.0/16
RedHat 7.2 no major upgrades
gcc v2.96-98
glibc v2.2.4-13
snort v1.8.3 - is running in the background, however all known bugs
exist without it running as well.
Network:
I am sniffing off an Ethernet Tap of a 100Mbps connection. The
ethernet tap splits the transmit and the receive lines into two seperate
interfaces, currently I'm only sniffing one (transmit). I have tried
mirroring a switch port and placing both lines of the tap into a hub but
that only generated many more problems.
The interface I'm sniffing is the inside port of a Cisco PIX
firewall, the outside of the firewall is the Internet.
The network averages about 50 IP addresses accessing the firewall
(about 3000 more go through a proxy server, therefore one IP address is
artificially inflated) Traffic usually saturates a T1 during the busy hours
(1.5Mbps)
The network card is a stealth interface with no IP address.
_______________________________________________
Ntop-dev mailing list
[EMAIL PROTECTED]
http://listmanager.unipi.it/mailman/listinfo/ntop-dev
