Ntop Error Null Host Detected
Contents |
[ date ] [ thread ] [ subject ] [ author ] Hi All, I have ntop setup recently in ubuntu 10.04 server. After running 3 days, I ntop configuration got some logs from ntop: Mon Jun 28 08:32:57 2010 **ERROR** NULL host
Ntop Default Username Password
detected Mon Jun 28 08:33:23 2010 **ERROR** NULL host detected Mon Jun 28 08:34:00 2010 **ERROR** NULL host detected Mon
Ntop Web Interface
Jun 28 08:35:21 2010 **ERROR** NULL host detected Mon Jun 28 08:36:44 2010 **ERROR** mVLAN: Host (identical IP/MAC) found on multiple VLANs Mon Jun 28 08:36:44 2010 mVLAN: ntop continues but will consolidate
No Interface Has Been Configured. Please Configure Ntop First.
and thus probably overcount this traffic Mon Jun 28 08:38:54 2010 **ERROR** NULL host detected Mon Jun 28 08:40:53 2010 EPIPE during sending of page to web client Mon Jun 28 08:40:58 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:01 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:10 2010 EPIPE during sending of page to web how to setup ntop client Mon Jun 28 08:41:14 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:17 2010 EPIPE during sending of page to web client Mon Jun 28 08:41:21 2010 EPIPE during sending of page to web client Mon Jun 28 08:43:16 2010 **ERROR** NULL host detected Mon Jun 28 08:45:11 2010 **ERROR** NULL host detected Mon Jun 28 08:45:35 2010 **ERROR** NULL host detected Mon Jun 28 08:48:13 2010 **ERROR** NULL host detected Here, I think I have couple issues with ntop: 1. NULL host detected. What does it mean? 2. mVLAN issue. That means ntop find the same host in different vlans? I checked my log, I did change the SPAN in switch at that time. I guess that's why I have this message in the host. 3. EPIPE during sending of page to web client. This means the ntop has problem to send the traffic to the web client (That's me!) ? Do I need do something to get rid of "NULL host detected" message? It seems pop up every second. Thanks for your input!! Lou -------------- next part -------------- An HTML attachment was scrubbed... URL:
[-l|--pcap-log ] [-q|--create-suspicious-packets] [-r|--refresh-time
into HTML format using source code syntax highlighting with prefixed line numbers. Alternatively you can here view or download the uninterpreted source code file. A member file download can http://fossies.org/linux/ntop/docs/KNOWN_BUGS also be achieved by clicking within a package contents listing on the https://github.com/openssh/openssh-portable/blob/master/sshconnect.c according byte size field. 1 _ _ _ 2 | \ | | |_ ___ _ __ 3 | \| | __/ _ \| '_ \ 4 | |\ | || (_) | |_) | 5 |_| \_|\__\___/| .__/ 6 |_| 7 8 Network Top 9 10 ntop error -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- 11 v2.1 (Jun 2002) 12 13 B1. https:// & tcp wrappers 14 15 If you compile ntop with tcp wrappers and attempt to access an 16 https:// url, it will fail with 17 18 "Jun 11 14:22:52 www ntop[22622]: warning: can't get client address: Bad file descriptor" 19 20 in the log. 21 22 hosts.allow: 23 24 ntop: ntop error null 192.168.0. 25 26 hosts.deny: 27 28 ntop: ALL 29 30 31 No real clue why - the code that ntop uses: 32 33 { 34 struct request_info req; 35 request_init(&req, RQ_DAEMON, DAEMONNAME, RQ_FILE, myGlobals.newSock, NULL); 36 fromhost(&req); 37 if(!hosts_access(&req)) { 38 closelog(); /* just in case */ 39 openlog(DAEMONNAME, LOG_PID, deny_severity); 40 syslog(deny_severity, "refused connect from %s", eval_client(&req)); 41 } 42 else 43 handleHTTPrequest(from.sin_addr); 44 } 45 46 is the same as the code used, for example, by sshd. 47 48 It's the fromhost() call - without a value set there, there is no file descriptor 49 set, and the hosts_access() call is then "properly" rejecting the request. 50 51 52 ======================================== 53 54 B2. https:// & Opera 55 56 With fixes through 25Jun2002, this works, albeit VERY SLOWLY on the handshake. 57 Sometimes as much as two minutes. After that, clicking around through the 58 ntop web server works fine, but it is also subject to a noticeable delay bringing 59 up the png images. 60 61 However, some versions of Opera (6.03 under Win
Sign in Pricing Blog Support Search GitHub This repository Watch 45 Star 228 Fork 176 openssh/openssh-portable Code Pull requests 28 Projects 0 Pulse Graphs Permalink Branch: master Switch branches/tags Branches Tags IBS PRIVSEP V_2_5_2 V_2_9_P1 V_2_9_9 V_3_0_2 V_3_2_3 V_3_3 V_3_5 V_3_6 V_3_6_1 V_3_7 V_3_8 V_3_8_1 V_3_9 V_4_0 V_4_1 V_4_2 V_4_3 V_4_4 V_4_5 V_4_6 V_4_7 V_4_9 V_5_3 V_5_4 V_5_6 V_5_8 V_5_9 V_6_0 V_6_2 V_6_3 V_6_4 V_6_5 V_6_6 V_6_7 V_6_8 V_6_9 V_7_0 V_7_1 V_7_2 V_7_3 master Nothing to show V_7_3_P1 V_7_2_P2 V_7_2_P1 V_7_1_P2 V_7_1_P1 V_7_0_P1 V_6_9_P1 V_6_8_P1 V_6_7_P1 V_6_6_P1 V_6_5_P1 V_6_4_P1 V_6_3_P1 V_6_2_P2 V_6_2_P1 V_6_1_P1 V_6_0_P1 V_5_9_P1 V_5_8_P2 V_5_8_P1 V_5_7_P1 V_5_6_P1 V_5_5_P1 V_5_4_P1 V_5_3_P1 V_5_2_P1 V_5_1_P1 V_5_0_P1 V_4_9_P1 V_4_7_P1 V_4_6_P1 V_4_5_P1 V_4_4_P1 V_4_3_P2 V_4_3_P1 V_4_2_P1 V_4_1_P1 V_4_0_P1 V_3_9_P1 V_3_8_1_P1 V_3_8_P1 V_3_7_1_P2 V_3_7_1_P1 V_3_7_P1 V_3_6_1_P2 V_3_6_1_P1 V_3_6_P1 V_3_5_P1 V_3_4_P1 V_3_3_P1 V_3_2_3_P1 V_3_2_2_P1 V_3_1_P1 V_3_0_2_P1 V_3_0_1_P1 V_3_0_P1 V_2_9_9_P2 V_2_9_9_P1 V_2_9_P2 V_2_5_2_P2 V_2_5_2_P1 V_2_5_1_P2 V_2_5_1_P1 V_2_5_0_P1 V_2_3_0_P1 V_2_2_0_P1 V_2_1_1_P4 V_2_1_1_P3 V_2_1_1_P2 V_2_1_1_P1 V_2_1_0 V_2_1_0_P3 V_2_1_0_P2 V_2_1_0_P1 V_2_0_0_TEST1 V_2_0_0_BETA2 V_2_0_0_BETA1 V_1_2_3 V_1_2_3_TEST3 V_1_2_3_TEST2 V_1_2_3_TEST1 V_1_2_3_PRE5 V_1_2_3_PRE4 V_1_2_3_PRE3 V_1_2_3_PRE2 V_1_2_3_PRE1 V_1_2_2 V_1_2_2_PRE29 V_1_2_2_PRE28 V_1_2_2_P1 V_1_2_1_PRE27 V_1_2_1_PRE26 V_1_2_1_PRE25 V_1_2_1_PRE24 V_1_2_1_PRE23 V_1_2_1_PRE22 V_1_2_1_PRE21 V_1_2_1_PRE20 V_1_2_1_PRE19 V_1_2_1_PRE18 Nothing to show Find file Copy path openssh-portable/sshconnect.c 9136ec1 Sep 11, 2016 deraadt@openbsd.org upstream commit 5 contributors Users who have contributed to this file djmdjm mouring daztucker mfriedl jcs Raw Blame History 1544 lines (1406 sloc) 42.3 KB /* $OpenBSD: sshconnect.c,v 1.272 2016/09/12 01:22:38 deraadt Exp $ */ /* * Author: Tatu Ylonen