Here it is: <TR ><th align="left" nowrap width="250"> <a href="/192.168.11.100.html" ><!-- NONE:hRN(6) --></a> <img src="/clock.gif" border="0" alt="NTP Server"><td align="center"> </td></th> <TD ALIGN=RIGHT>192.168.11.100</TD><TD ALIGN=RIGHT>00:10:5A:53:E6:A7</TD> <TD ALIGN=RIGHT NOWRAP> </TD><TD ALIGN=LEFT><IMG ALIGN=ABSMIDDLE SRC="/ gaugeS.jpg" ALT="Sent 76%" WIDTH=228 HEIGHT=12><IMG ALIGN=ABSMIDDLE SRC="/ gaugeR.jpg" ALT="Received 22%" WIDTH=66 HEIGHT=12> </TD> <TD ALIGN=RIGHT NOWRAP>3COM CORPORATION</TD><TD ALIGN=RIGHT> </TD><TD ALIGN=RIGHT>5</TD><TD ALIGN=RIGHT NOWRAP>1:28</A></TD><TD ALIGN=RIGHT NOWRAP> </TD></TR>
________________________________ On Tuesday 24 February 2004 22:42, Burton M. Strauss III wrote: > Ok, but what I want to see is INSIDE the html - do a view source or (save > as single html page then open it in wordpad/notepad) > > it will look something like this: > > <TR ><th align="left" nowrap width="250"> > <a href="/192.168.3.198.html" >tigger.burtonstrauss.us<!-- > NONE:hRN(7) --></a> > <img src="/Risk_low.gif" border="0" alt="Low Risk"><td > align="center"> </td></th> > <TD ALIGN=RIGHT>192.168.3.198</TD><TD ALIGN=RIGHT>00:60:08:A6:A0:5D</TD> > > See the <!-- -->? Those are html comments - the browser doesn't render > them, but I use them to tell me how I decided to display the value in that > column. In this case, it was a hostResolvedNameType 7 (DNS name). > > You could also send me - off-list - a packet capture (use tcpdump -c 50)... > > -----Burton > > > "When the world is round, all edges are nearby" > ---Anon > > > -----Original Message----- > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > Markus Rehbach > > Sent: Tuesday, February 24, 2004 3:00 PM > > To: [EMAIL PROTECTED] > > Subject: Re: [Ntop] New sorting routines in cvs - these are post 3.0pre1 > > - TEST NOW OR HOLD YOUR WATER > > > > > > Hi, > > > > no change. The result of the debug: > > > > Tue Feb 24 21:36:19 2004 CMPFCTN_DEBUG: > > setResolvedName(0x085d9b60) 0 -> 5 Compaq Computer > > Corporation:41:30:76 - hash.c(1170) > > Tue Feb 24 21:36:19 2004 CMPFCTN_DEBUG: > > setResolvedName(0x085d9b60) 5 Compaq Computer > > Corporation:41:30:76 -> 6 192.168.11.230 - pbuf.c(3216) > > Tue Feb 24 21:36:59 2004 CMPFCTN_DEBUG: > > setResolvedName(0x085dd730) 0 -> 6 192.168.11.100 - hash.c(1160) > > > > but ntop shows an empty entry in the columns after getting the > > the following packets: > > > > No. Time Source Destination > > Protocol Info > > 1 0.000000 192.168.11.100 192.168.11.255 > > BROWSER Local Master Announcement ENTE, Workstation, Server, > > Print Queue Server, Xenix Server, NT Workstation, NT Server, > > Master Browser > > 2 0.000005 192.168.11.100 192.168.11.255 > > BROWSER Domain/Workgroup Announcement WORKGROUP, NT Workstation, > > Domain Enum > > > > No debug output but wrong result. An empty entry in the 'host > > name' column. > > > > Concerning 'edge case': the relevant packets are UDP packets and > > the normal > > way in smaller Windows networks to make the name resolution. It's > > the NetBIOS > > over TCP crap. Not my favorite but not unusual. > > > > Cheers > > > > Markus > > > > > > _________________________________ > > > > On Tuesday 24 February 2004 16:25, Burton M. Strauss III wrote: > > > Luca's change overnight may also have fixed it - please check. > > > > > > -----Burton > > > > > > > -----Original Message----- > > > > From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of > > > > Burton M. Strauss III > > > > Sent: Tuesday, February 24, 2004 7:21 AM > > > > To: [EMAIL PROTECTED] > > > > Subject: RE: [Ntop] New sorting routines in cvs - these are > > > > post 3.0pre1 > > > > > > - TEST NOW OR HOLD YOUR WATER > > > > > > > > > > > > It's an edge case to me - I don't have a pure windows network > > > > to test on > > > > > > - everything uses tcp/ip. > > > > > > > > There's nothing odd about being in any particular state for > > > > any amount of > > > > > > time: Don't think of it has "hung". > > > > > > > > It's perfectly normal, based on what ntop sees. Remember, > > > > it's unlikely > > > > > > that ntop will be started just as everything on the network > > > > identifies itself. Rather it's going to learn about the more active > > > > hosts first and > > > > > > the less active only when they send periodic announcements or > > > > respond to > > > > > > device polls like some router/gateways perform. > > > > > > > > > > > > I adjusted the debug message yesterday so only actual transitions are > > > > reported, i.e. you won't see the 6->3 > > > > stuff because it never happens. I'm assuming you didn't > > > > update your code > > > > > > after that commit?? The time stamp on the ntop-dev message is Mon > > > > 2/23/2004 > > > > 4:51 PM (US Central Time Zone). > > > > > > > > Can you check the generated HTML and see what's in the cell. > > > > With that > > > > > > commit, there should now be <!-- --> (HTML comments) showing how ntop > > > > populated the cell. > > > > > > > > Thanks! > > > > > > > > -----Burton > > > > _______________________________________________ > > Ntop mailing list > > [EMAIL PROTECTED] > > http://listgateway.unipi.it/mailman/listinfo/ntop > > _______________________________________________ > Ntop mailing list > [EMAIL PROTECTED] > http://listgateway.unipi.it/mailman/listinfo/ntop _______________________________________________ Ntop mailing list [EMAIL PROTECTED] http://listgateway.unipi.it/mailman/listinfo/ntop
