Ok, but what I want to see is INSIDE the html - do a view source or (save as single html page then open it in wordpad/notepad)
it will look something like this: <TR ><th align="left" nowrap width="250"> <a href="/192.168.3.198.html" >tigger.burtonstrauss.us<!-- NONE:hRN(7) --></a> <img src="/Risk_low.gif" border="0" alt="Low Risk"><td align="center"> </td></th> <TD ALIGN=RIGHT>192.168.3.198</TD><TD ALIGN=RIGHT>00:60:08:A6:A0:5D</TD> See the <!-- -->? Those are html comments - the browser doesn't render them, but I use them to tell me how I decided to display the value in that column. In this case, it was a hostResolvedNameType 7 (DNS name). You could also send me - off-list - a packet capture (use tcpdump -c 50)... -----Burton "When the world is round, all edges are nearby" ---Anon > -----Original Message----- > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > Markus Rehbach > Sent: Tuesday, February 24, 2004 3:00 PM > To: [EMAIL PROTECTED] > Subject: Re: [Ntop] New sorting routines in cvs - these are post 3.0pre1 > - TEST NOW OR HOLD YOUR WATER > > > Hi, > > no change. The result of the debug: > > Tue Feb 24 21:36:19 2004 CMPFCTN_DEBUG: > setResolvedName(0x085d9b60) 0 -> 5 Compaq Computer > Corporation:41:30:76 - hash.c(1170) > Tue Feb 24 21:36:19 2004 CMPFCTN_DEBUG: > setResolvedName(0x085d9b60) 5 Compaq Computer > Corporation:41:30:76 -> 6 192.168.11.230 - pbuf.c(3216) > Tue Feb 24 21:36:59 2004 CMPFCTN_DEBUG: > setResolvedName(0x085dd730) 0 -> 6 192.168.11.100 - hash.c(1160) > > but ntop shows an empty entry in the columns after getting the > the following packets: > > No. Time Source Destination > Protocol Info > 1 0.000000 192.168.11.100 192.168.11.255 > BROWSER Local Master Announcement ENTE, Workstation, Server, > Print Queue Server, Xenix Server, NT Workstation, NT Server, > Master Browser > 2 0.000005 192.168.11.100 192.168.11.255 > BROWSER Domain/Workgroup Announcement WORKGROUP, NT Workstation, > Domain Enum > > No debug output but wrong result. An empty entry in the 'host > name' column. > > Concerning 'edge case': the relevant packets are UDP packets and > the normal > way in smaller Windows networks to make the name resolution. It's > the NetBIOS > over TCP crap. Not my favorite but not unusual. > > Cheers > > Markus > > > _________________________________ > > On Tuesday 24 February 2004 16:25, Burton M. Strauss III wrote: > > Luca's change overnight may also have fixed it - please check. > > > > -----Burton > > > > > -----Original Message----- > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > > Burton M. Strauss III > > > Sent: Tuesday, February 24, 2004 7:21 AM > > > To: [EMAIL PROTECTED] > > > Subject: RE: [Ntop] New sorting routines in cvs - these are > post 3.0pre1 > > > - TEST NOW OR HOLD YOUR WATER > > > > > > > > > It's an edge case to me - I don't have a pure windows network > to test on > > > - everything uses tcp/ip. > > > > > > There's nothing odd about being in any particular state for > any amount of > > > time: Don't think of it has "hung". > > > > > > It's perfectly normal, based on what ntop sees. Remember, > it's unlikely > > > that ntop will be started just as everything on the network identifies > > > itself. Rather it's going to learn about the more active > hosts first and > > > the less active only when they send periodic announcements or > respond to > > > device polls like some router/gateways perform. > > > > > > > > > I adjusted the debug message yesterday so only actual transitions are > > > reported, i.e. you won't see the 6->3 > > > stuff because it never happens. I'm assuming you didn't > update your code > > > after that commit?? The time stamp on the ntop-dev message is Mon > > > 2/23/2004 > > > 4:51 PM (US Central Time Zone). > > > > > > Can you check the generated HTML and see what's in the cell. > With that > > > commit, there should now be <!-- --> (HTML comments) showing how ntop > > > populated the cell. > > > > > > Thanks! > > > > > > -----Burton > > > > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop > _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
