Mailing List Archive: I need help

I need help

Aug 16, 2001, 4:01 AM

Post #1 of 4 (878 views)

Hello.

I've installed libpcap-0.6.2-7.i386.rpm and ntop-1.3.2-5.i386.rpm on RedHat
Linux 7.1

When I do

[root@localhost /root]# ntop -i eth0

I get...

16/Aug/2001:11:01:39 SSL is present but https is disabled: use -W <https
port> for enabling it
16/Aug/2001:11:01:39 ntop v.1.3.2 MT (SSL) [i686-pc-linux] (03/03/01
12:02:30 AM build)
16/Aug/2001:11:01:39 Listening on [eth0]
16/Aug/2001:11:01:39 Copyright 1998-2001 by Luca Deri <deri@ntop.org>
16/Aug/2001:11:01:39 Get the freshest ntop from http://www.ntop.org/
16/Aug/2001:11:01:39 Initialising...
16/Aug/2001:11:01:39 Loading plugins (if any)...
16/Aug/2001:11:01:39 Searching plugins in /usr/lib/ntop/plugins
16/Aug/2001:11:01:39 Welcome to arpWatchPlugin. (C) 1999 by Luca Deri.
16/Aug/2001:11:01:39 Welcome to icmpWatchPlugin. (C) 1999 by Luca Deri.
16/Aug/2001:11:01:39 Welcome to LastSeenWatchPlugin. (C) 1999 by Andrea
Marangoni.
16/Aug/2001:11:01:39 WARNING: unable to load plugin
'/usr/lib/ntop/plugins/libpep.so'
[/usr/lib/ntop/plugins/libpep.so: undefined symbol: Perl_hv_undef]
16/Aug/2001:11:01:39 Welcome to nfsWatchPlugin. (C) 1999 by Luca Deri.
16/Aug/2001:11:01:39 Welcome to ntopRmon. (C) 2000 by Luca Deri.
16/Aug/2001:11:01:39 WARNING: plugin disabled [missing NET-SNMP]
16/Aug/2001:11:01:39 Welcome to WAPPlugin. (C) 2000 by Luca Deri.
16/Aug/2001:11:01:39 WARNING: For security reasons it is STRONGLY
recommended to16/Aug/2001:11:01:39 run ntop as unprivileged user
by using the -u option!
16/Aug/2001:11:01:39 Resetting traffic statistics...
16/Aug/2001:11:01:39 Thread 1026 for LSOF support started.
16/Aug/2001:11:01:39 Thread 2051 for Network Packet Capturing started
(_main_ thread).
16/Aug/2001:11:01:39 Thread 3076 for Host Traffic Statistics started.
16/Aug/2001:11:01:39 Thread 4101 for Throughput Update started.
16/Aug/2001:11:01:39 Thread 5126 for Scan Idle Host started.
16/Aug/2001:11:01:39 Thread 6151 for DNS Address Resolution started.
16/Aug/2001:11:01:39 Starting plugin threads (if any)...
16/Aug/2001:11:01:39 Waiting for HTTP connections on port 3000...
16/Aug/2001:11:01:39 Sniffying...
16/Aug/2001:11:01:40 Thread 8201 for Network Packet Sniffing started
(_main_ thread).

When I do ctrl+c for stopping the ntop I get ...

16/Aug/2001:11:13:25 Unloading plugins (if any)...
16/Aug/2001:11:13:25 Thanks for using wapWatch...
16/Aug/2001:11:13:25 Done.
16/Aug/2001:11:13:25 Thanks for using nfsWatchPlugin...
16/Aug/2001:11:13:25 Done.
16/Aug/2001:11:13:25 Thanks for using LsWatch...
16/Aug/2001:11:13:25 Done.
16/Aug/2001:11:13:25 Thanks for using icmpWatch...
16/Aug/2001:11:13:25 Done.
16/Aug/2001:11:13:25 Thanks for using arpWatch...
16/Aug/2001:11:13:25 Done.
0 packets received by filter on eth0
0 packets dropped by kernel
0 packets dropped by ntop
16/Aug/2001:11:13:25 Waiting until threads terminate...

I can't see anything....

Please help me...

Best Regards.

Carlos Gomes.

Carlos Armando Rodrigues Gomes, Eng.º
tel. +351 229 578 670 Ext. 403 fax. +351 229 578 686
Telemóvel: +351 914 907 484
cgomes@eacampos.pt

Emílio de Azevedo Campos, S. A.
Rua Senhora da Penha, 110-114
4460-423 SENHORA DA HORA
PORTUGAL

Re: I need help [ In reply to ]

adavid at adavid

Aug 16, 2001, 4:57 AM

Post #2 of 4 (887 views)

Permalink

> From: Carlos Gomes <cgomes@eacampos.pt>
>
> Hello.
>
> I've installed libpcap-0.6.2-7.i386.rpm and ntop-1.3.2-5.i386.rpm on RedHat=
> =20
> Linux 7.1
>
> When I do
>
> [root@localhost /root]# ntop -i eth0
>
> I get...
>
> 16/Aug/2001:11:01:39 SSL is present but https is disabled: use -W <https=20
> port> for enabling it
> 16/Aug/2001:11:01:39 ntop v.1.3.2 MT (SSL) [i686-pc-linux] (03/03/01=20
> 12:02:30 AM build)
> 16/Aug/2001:11:01:39 Listening on [eth0]
> 16/Aug/2001:11:01:39 Copyright 1998-2001 by Luca Deri <deri@ntop.org>
> 16/Aug/2001:11:01:39 Get the freshest ntop from http://www.ntop.org/
> 16/Aug/2001:11:01:39 Initialising...

[snip]

> (_main_ thread).
> 16/Aug/2001:11:01:39 Thread 3076 for Host Traffic Statistics started.
> 16/Aug/2001:11:01:39 Thread 4101 for Throughput Update started.
> 16/Aug/2001:11:01:39 Thread 5126 for Scan Idle Host started.
> 16/Aug/2001:11:01:39 Thread 6151 for DNS Address Resolution started.
> 16/Aug/2001:11:01:39 Starting plugin threads (if any)...
> 16/Aug/2001:11:01:39 Waiting for HTTP connections on port 3000...

Here is the clue ^^^^

Point your favourite browser at this http port and you should get something

> 16/Aug/2001:11:01:39 Sniffying...
> 16/Aug/2001:11:01:40 Thread 8201 for Network Packet Sniffing started=20
> (_main_ thread).
>
> When I do ctrl+c for stopping the ntop I get ...

It dies of course.

To run it as a daemon, use the -d command option and check out the
map page.

Enjoy. But don't expect perfect operation as ntop is in further development,
with a new release imminent.

Regards

--
Anthony David

Gambling(n): A discretionary tax on those asleep during high school maths
http://adavid.com.au/
0xA72CE1ED fingerprint = EA1E C69E FE59 BBE1 AA4B F354 BD09 9765 A72C E1ED

Re: I need help [ In reply to ]

cgomes at eacampos

Aug 16, 2001, 5:46 AM

Post #3 of 4 (891 views)

Permalink

Hello Again!!!
The problem Mr. Anthony David is that in my browser on that port (3000)
doesn't appears anything.
When run ifconfig it says to me that eth0 doesen´t running in Promiscus mode!

What can I do? Is anything wrong?

Best Regards.

Carlos Gomes

At 21:57 16-08-2001 +1000, you wrote:
> > From: Carlos Gomes <cgomes@eacampos.pt>
> >
> > Hello.
> >
> > I've installed libpcap-0.6.2-7.i386.rpm and ntop-1.3.2-5.i386.rpm on
> RedHat=
> > =20
> > Linux 7.1
> >
> > When I do
> >
> > [root@localhost /root]# ntop -i eth0
> >
> > I get...
> >
> > 16/Aug/2001:11:01:39 SSL is present but https is disabled: use -W <https=20
> > port> for enabling it
> > 16/Aug/2001:11:01:39 ntop v.1.3.2 MT (SSL) [i686-pc-linux] (03/03/01=20
> > 12:02:30 AM build)
> > 16/Aug/2001:11:01:39 Listening on [eth0]
> > 16/Aug/2001:11:01:39 Copyright 1998-2001 by Luca Deri <deri@ntop.org>
> > 16/Aug/2001:11:01:39 Get the freshest ntop from http://www.ntop.org/
> > 16/Aug/2001:11:01:39 Initialising...
>
>[snip]
>
> > (_main_ thread).
> > 16/Aug/2001:11:01:39 Thread 3076 for Host Traffic Statistics started.
> > 16/Aug/2001:11:01:39 Thread 4101 for Throughput Update started.
> > 16/Aug/2001:11:01:39 Thread 5126 for Scan Idle Host started.
> > 16/Aug/2001:11:01:39 Thread 6151 for DNS Address Resolution started.
> > 16/Aug/2001:11:01:39 Starting plugin threads (if any)...
> > 16/Aug/2001:11:01:39 Waiting for HTTP connections on port 3000...
>
>
>Here is the clue ^^^^
>
>Point your favourite browser at this http port and you should get something
>
> > 16/Aug/2001:11:01:39 Sniffying...
> > 16/Aug/2001:11:01:40 Thread 8201 for Network Packet Sniffing started=20
> > (_main_ thread).
> >
> > When I do ctrl+c for stopping the ntop I get ...
>
>It dies of course.
>
>To run it as a daemon, use the -d command option and check out the
>map page.
>
>Enjoy. But don't expect perfect operation as ntop is in further development,
>with a new release imminent.
>
>Regards
>
>--
>Anthony David
>
>Gambling(n): A discretionary tax on those asleep during high school maths
>http://adavid.com.au/
>0xA72CE1ED fingerprint = EA1E C69E FE59 BBE1 AA4B F354 BD09 9765 A72C E1ED
>_______________________________________________
>Ntop mailing list
>Ntop@unipi.it
>http://listmanager.unipi.it/mailman/listinfo/ntop

Carlos Armando Rodrigues Gomes, Eng.º
tel. +351 229 578 670 Ext. 403 fax. +351 229 578 686
Telemóvel: +351 914 907 484
cgomes@eacampos.pt

Emílio de Azevedo Campos, S. A.
Rua Senhora da Penha, 110-114
4460-423 SENHORA DA HORA
PORTUGAL

Re: I need help [ In reply to ]

adavid at adavid

Aug 16, 2001, 6:51 AM

Post #4 of 4 (891 views)

Permalink

> Organization: Centro di Servizi per la rete di Ateneo - Pisa - Italy
> X-Sender: cgomes@192.168.100.2
> From: Carlos Gomes <cgomes@eacampos.pt>
> Content-Type: multipart/alternative;
> boundary="=====================_6769411==_.ALT"
> Sender: ntop-admin@unipi.it
> X-BeenThere: ntop@unipi.it
> X-Mailman-Version: 2.0.4
> Precedence: bulk
> Reply-To: ntop@unipi.it
> List-Help: <mailto:ntop-request@unipi.it?subject=help>
> List-Post: <mailto:ntop@unipi.it>
> List-Subscribe: <http://listmanager.unipi.it/mailman/listinfo/ntop>,
> <mailto:ntop-request@unipi.it?subject=subscribe>
> List-Id: Ntop's fans list <ntop.unipi.it>
> List-Unsubscribe: <http://listmanager.unipi.it/mailman/listinfo/ntop>,
> <mailto:ntop-request@unipi.it?subject=unsubscribe>
> List-Archive: <http://listmanager.unipi.it/pipermail/ntop/>
> Date: Thu, 16 Aug 2001 13:46:56 +0100
>
> --=====================_6769411==_.ALT
> Content-Type: text/plain; charset="iso-8859-1"; format=flowed
> Content-Transfer-Encoding: quoted-printable
>
> Hello Again!!!
> The problem Mr. Anthony David is that in my browser on that port (3000)=20
> doesn't appears anything.
> When run ifconfig it says to me that eth0 doesen=B4t running in Promiscus=
> mode!

Then what happens when you issue the command

/sbin/ifconfig eth0 promisc

?
>
> What can I do? Is anything wrong?
>
> Best Regards.
>
> Carlos Gomes
>

Regards

--
Anthony David

Gambling(n): A discretionary tax on those asleep during high school maths
http://adavid.com.au/
0xA72CE1ED fingerprint = EA1E C69E FE59 BBE1 AA4B F354 BD09 9765 A72C E1ED