[prev in list] [next in list] [prev in thread] [next in thread]
List: ntop
Subject: Re: [Ntop] ntop Win32 3.2.2 not resolving local hosts
From: "Gary Gatten" <Ggatten () waddell ! com>
Date: 2008-01-16 20:13:03
Message-ID: 70C0964126D66F458E688618E1CD008A02878BA9 () WADPEXV0 ! waddell ! com
[Download RAW message or body]
--===============2026669921==
Content-class: urn:content-classes:message
Content-Type: multipart/alternative;
boundary="----_=_NextPart_001_01C8587C.32CE33A7"
This is a multi-part message in MIME format.
Do you have NBT over TCP enabled? If so kill it if you don't need it.
Maybe try adding a couple of internal hosts to the hosts file on the
ntop box. Make sure the domain suffix is correct as well. Don't you
LOVE windoze name resolution process! MAYBE try changing the Node type
as well - are you at H-Node?
I think someone posted a similar question fairly recently. Maybe search
the archives for the last... 3 months? and see what turns up. I
haven't been able to determine if this issue is ntop and what libraries
and functions it's using on windows for name resolution - or if it's
windows config. Where is your nTop box physically / logically located
on your internal network? It's supposed to do various forms of DNS
"snooping" to minimize doing direct lookups on its own. It would be
nice to know what parts of the name resolution is working and what parts
aren't.
Oh yea, be sure to delete your dnscache.db and flush your dns cache on
your windoze box.
Gary
________________________________
From: ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] On Behalf Of
Lannie Schafroth
Sent: Wednesday, January 16, 2008 12:07 PM
To: ntop@unipi.it
Subject: [Ntop] ntop Win32 3.2.2 not resolving local hosts
I have complied version 3.2.2 for Windows. It is up and running and
working to a point.
It will resolve all external sites our users connect to. However all
internal network devices and workstations show as IP only. I have read
the FAQ and set dont trust MAC and etc. I have all our local systems in
DNS and with reverse PTR records.
They resolve just fine on the computer ntop is running on, but ntop
never resolves them.
Any suggestions?
Lannie Schafroth
<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'>
</div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
[Attachment #3 (text/html)]
<html xmlns:v="urn:schemas-microsoft-com:vml" \
xmlns:o="urn:schemas-microsoft-com:office:office" \
xmlns:w="urn:schemas-microsoft-com:office:word" \
xmlns:st1="urn:schemas-microsoft-com:office:smarttags" \
xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv=Content-Type content="text/html; charset=us-ascii">
<meta name=Generator content="Microsoft Word 11 (filtered medium)">
<!--[if !mso]>
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<![endif]--><o:SmartTagType
namespaceuri="urn:schemas-microsoft-com:office:smarttags" name="City"/>
<o:SmartTagType namespaceuri="urn:schemas-microsoft-com:office:smarttags"
name="place"/>
<!--[if !mso]>
<style>
st1\:*{behavior:url(#default#ieooui) }
</style>
<![endif]-->
<style>
<!--
/* Font Definitions */
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
@font-face
{font-family:Geneva;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{mso-margin-top-alt:auto;
margin-right:0in;
mso-margin-bottom-alt:auto;
margin-left:0in;
font-size:12.0pt;
font-family:"Times New Roman";
mso-believe-normal-left:yes;}
a:link, span.MsoHyperlink
{color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{color:purple;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
color:black;}
@page Section1
{size:8.5in 11.0in;
margin:1.0in 1.25in 1.0in 1.25in;}
div.Section1
{page:Section1;}
-->
</style>
<![if mso 9]>
<style>
p.MsoNormal
{margin-left:7.5pt;}
</style>
<![endif]>
</head>
<body lang=EN-US link=blue vlink=purple style='margin-left:7.5pt;margin-top:
7.5pt;margin-right:7.5pt;margin-bottom:7.5pt' marginleft=10 marginright=10
margintop=10 marginbottom=10>
<div class=Section1>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt;color:black'>Do you have NBT over TCP enabled? If
so kill it if you don’t need it. Maybe try adding a couple of
internal hosts to the hosts file on the ntop box. Make sure the domain
suffix is correct as well. Don’t you LOVE windoze name resolution
process! MAYBE try changing the Node type as well – are you at
H-Node?<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt;color:black'>I think someone posted a similar question
fairly recently. Maybe search the archives for the last… 3
months? and see what turns up. I haven’t been able to
determine if this issue is ntop and what libraries and functions it’s
using on windows for name resolution – or if it’s windows
config. Where is your nTop box physically / logically located on your
internal network? It’s supposed to do various forms of DNS \
“snooping” to minimize doing direct lookups on its own. It would be \
nice to know what parts of the name resolution is working and what parts \
aren’t.<o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt;color:black'>Oh yea, be sure to delete your dnscache.db
and flush your dns cache on your windoze box.<o:p></o:p></span></font></p>
<p class=MsoNormal><st1:City w:st="on"><st1:place w:st="on"><font size=3
color=black face="Times New Roman"><span \
style='font-size:12.0pt;color:black'>Gary</span></font></st1:place></st1:City><font \
color=black><span style='color:black'><o:p></o:p></span></font></p>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt;color:black'><o:p> </o:p></span></font></p>
<p class=MsoNormal><font size=3 color=black face="Times New Roman"><span
style='font-size:12.0pt;color:black'><o:p> </o:p></span></font></p>
<div>
<div class=MsoNormal align=center style='margin:0in;margin-bottom:.0001pt;
text-align:center'><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'>
<hr size=2 width="100%" align=center tabindex=-1>
</span></font></div>
<p class=MsoNormal style='margin:0in;margin-bottom:.0001pt'><b><font size=2
face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma;font-weight:bold'>From:</span></font></b><font
size=2 face=Tahoma><span style='font-size:10.0pt;font-family:Tahoma'> \
ntop-bounces@unipi.it [mailto:ntop-bounces@unipi.it] <b><span \
style='font-weight:bold'>On Behalf Of </span></b>Lannie Schafroth<br>
<b><span style='font-weight:bold'>Sent:</span></b> Wednesday, January 16, 2008
12:07 PM<br>
<b><span style='font-weight:bold'>To:</span></b> ntop@unipi.it<br>
<b><span style='font-weight:bold'>Subject:</span></b> [Ntop] ntop Win32 3.2.2
not resolving local hosts</span></font><o:p></o:p></p>
</div>
<p class=MsoNormal><font size=3 face="Times New Roman"><span style='font-size:
12.0pt'><o:p> </o:p></span></font></p>
<p class=MsoNormal style='margin:0in;margin-bottom:.0001pt'><font size=3
color=black face=Geneva><span style='font-size:12.0pt;font-family:Geneva;
color:black'>I have complied version 3.2.2 for Windows. It is up and
running and working to a point.<br>
<br>
It will resolve all external sites our users connect to. However all
internal network devices and workstations show as IP only. I have read
the FAQ and set dont trust MAC and etc. I have all our local systems in
DNS and with reverse PTR records.<br>
<br>
They resolve just fine on the computer ntop is running on, but ntop never
resolves them.<br>
<br>
Any suggestions?<br>
<br>
<br>
Lannie Schafroth</span></font><o:p></o:p></p>
</div>
<font size="1">
<div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt \
0in'> </div>
"This email is intended to be reviewed by only the intended recipient
and may contain information that is privileged and/or confidential.
If you are not the intended recipient, you are hereby notified that
any review, use, dissemination, disclosure or copying of this email
and its attachments, if any, is strictly prohibited. If you have
received this email in error, please immediately notify the sender by
return email and delete this email from your system."
</font>
</body>
</html>
_______________________________________________
Ntop mailing list
Ntop@unipi.it
http://listgateway.unipi.it/mailman/listinfo/ntop
--===============2026669921==--
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic