headers
PIERRE-LOIC BAUDET | 1 Mar 2002 14:08
Picon

RE: rmonPlugin / NET-SNMP

> === So, what's in config.log?  It should have the text 
of the test program and the resulting message...

Yes indeed... Reading this log helped me to get round the 
problem. There was a bug with my openSSL which is fixed. 
So checking for register_mib in -lucdagent passes now : 

checking for register_mib in -lucdagent.... yes

Unfortunately, there is a (last ?) problem : after 
replacing every occurences of 'icmpPlugin' by 
'rmonPlugin' in Makefile and starting  /ntop/plugins/
make, here is what I got :

[root <at> sonde-test plugins]# make
/bin/sh ../libtool --mode=compile gcc -DHAVE_CONFIG_H -
I. -I. -I.. -I..  -I/usr/local/include -
I/home/pierlo/ntop-current/gdchart0.94c -
I/usr/include/openssl    -g -O2 -pipe -c rmonPlugin.c
rm -f .libs/rmonPlugin.lo
gcc -DHAVE_CONFIG_H -I. -I. -I.. -I.. -
I/usr/local/include -I/home/pierlo/ntop-
current/gdchart0.94c -I/usr/include/openssl -g -O2 -pipe -
Wp,-MD,.deps/rmonPlugin.pp -c rmonPlugin.c  -fPIC -DPIC -
o .libs/rmonPlugin.lo
rmonPlugin.c:94: warning: excess elements in struct 
initializer
rmonPlugin.c:94: warning: (near initialization for 
`rmonPluginInfo[0]')
rmonPlugin.c: In function `var_etherStatsTable':
(Continue reading)

Permalink | Reply | 1 comment |
headers
Eric_Josephson | 1 Mar 2002 15:09

Re: ntop-dev, claim money you never knew you had


I'm not a frequent poster to this list, but I do enjoy reading it.....  Can
we close the list to lock out the spam?

--

J. Eric Josephson
Director of Network and System Operations
978-720-2159
mailto:eric_josephson <at> groove.net

                                                                                                                            
                    FoundMoney                                                                                              
                    <foundmoney <at> optin-g        To:     ntop-dev <at> unipi.it                                                    
                    lobal.net>                 cc:                                                                          
                    Sent by:                   Subject:     [Ntop-dev] ntop-dev, claim money you never knew you had         
                    ntop-dev-admin <at> unip                                                                                     
                    i.it                                                                                                    

                                                                                                                            
                    03/01/2002 07:10 PM                                                                                     
                    Please respond to                                                                                       
                    ntop-dev                                                                                                

                                                                            
 (Embedded image moved to file: pic00041.pcx)
(Continue reading)

Permalink | Reply | 752 comments |
headers
Burton M. Strauss III | 1 Mar 2002 15:20
Picon

RE: rmonPlugin / NET-SNMP

YAY! (ucdagent)

There was a parameter change to the plugin structure - check one of the
others for how it now looks, or the structure definition in ntop.h:

             ntop.h:  1375   typedef struct pluginInfo {
             ntop.h:  1391   } PluginInfo;

device (the structure) and numDevices are now in the myGlobals structure, so
you'll need to prefix them

myGlobals.device[]
myGlobals.numDevices

-----Burton

-----Original Message-----
From: PIERRE-LOIC BAUDET [mailto:baudetp <at> libertysurf.fr]
Sent: Friday, March 01, 2002 7:09 AM
To: ntop-dev <at> unipi.it
Cc: Burton <at> attbi.com
Subject: RE: [Ntop-dev] rmonPlugin / NET-SNMP

> === So, what's in config.log?  It should have the text
of the test program and the resulting message...

Yes indeed... Reading this log helped me to get round the
problem. There was a bug with my openSSL which is fixed.
So checking for register_mib in -lucdagent passes now :
(Continue reading)

Permalink | Reply | 0 comments |
headers
PIERRE-LOIC BAUDET | 1 Mar 2002 16:41
Picon

RE: rmonPlugin / NET-SNMP

> device (the structure) and numDevices are now in the
myGlobals structure, so
> you'll need to prefix them
> 
> myGlobals.device[]
> myGlobals.numDevices

YES, that was the point ! RMON plugin works now (well, I
think so... Hope I won't have bad surprises in the near
future). Let's play with this for a while...

I'll add an entry to the FAQ next week !

Thanks again !

Pierre-Loic
--------------
Profitez de l'offre spéciale Tiscali Liberty Surf !
50% de temps en plus pendant 3 mois sur tous les forfaits Internet.

http://register.libertysurf.fr/subscribe_fr/signup.php3
Permalink | Reply | 0 comments |
headers
Sato, Takuya | 1 Mar 2002 21:05

inquiry

Hi,

1. Where can ntop plugins be found?

2. on the ntop I just built & installed on RH7 I have to start with '-P'
option declared or it can't find the database files ... where does the
config file for ntop reside?

3. even though openssl & stuff is installed when I specify '-W 8080' the
console reports that it's listening on port 3000 ... is it hardcoded
somewhere?

TIA,
Takuya
Permalink | Reply | 1 comment |
headers
PIERRE-LOIC BAUDET | 4 Mar 2002 15:44
Picon

rmonPlugin / query

Hello,

RMON plugin seems to work but :

* How to query it ? I followed what's written in the FAQ
and I installed tkMib, but I don't know how it works. Is
there something written about tkMib (e.g HOWTO) ? What are
the other (easier !) ways to query RMON plugin ?

* Does RMON plugin deals with RMON-2 MIB (which would be
great !) I don't think so, but I may be wrong.... 

Pierre-Loic
--------------
Profitez de l'offre spéciale Tiscali Liberty Surf !
50% de temps en plus pendant 3 mois sur tous les forfaits Internet.

http://register.libertysurf.fr/subscribe_fr/signup.php3
Permalink | Reply | 0 comments |
headers
ntop | 4 Mar 2002 22:00
Picon

FW: [VulnWatch] [H20020304]: Remotely exploitable format string v ulnerability in ntop

Any comments on this?

> -----Original Message-----
> From: hologram [mailto:holo <at> brained.org]
> Sent: Monday, March 04, 2002 9:48 AM
> To: vulnwatch <at> vulnwatch.org
> Subject: [VulnWatch] [H20020304]: Remotely exploitable format string
> vulnerability in ntop
> 
> 
> 
>         h o l o g r a m  |  s e c u r i t y  |  a d v i s o r y
> ______________________________________________________________
> _________
> 
> 
>                        Advisory ID : H20020304
>                           Software : ntop
>                           Synopsis : Remotely exploitable format
>                                      string vulnerability in ntop.
>                             Vendor : Luca Deri <www.ntop.org>
>                           Verified : Version 2.0
>                             Author : hologram <holo <at> brained.org>
> 
> ______________________________________________________________
> _________
> 
> 
> | Overview 
> |-----------------------------------------------------------
(Continue reading)

Permalink | Reply | 0 comments |
headers
PIERRE-LOIC BAUDET | 5 Mar 2002 10:48
Picon

rmonPlugin / MIB

Hi,

OK, RMON plugin works (no error message when started) :

(...)
05/Mar/2002 09:09:53 Loading plugins (if any)...
05/Mar/2002 09:09:53 Searching plugins in ./plugins
05/Mar/2002 09:09:53 Welcome to icmpWatchPlugin. (C) 1999 
by Luca Deri.
05/Mar/2002 09:09:53 Welcome to LastSeenWatchPlugin. (C) 
1999 by Andrea Marangoni.
05/Mar/2002 09:09:53 Welcome to nfsWatchPlugin. (C) 1999 
by Luca Deri.
05/Mar/2002 09:09:53 Welcome to sflowPlugin. (C) 2002 by 
Luca Deri.
05/Mar/2002 09:09:53 Welcome to ntopRmon. (C) 2000 by 
Luca Deri.
(...)
05/Mar/2002 09:09:54 Initializing plugins (if any)...
05/Mar/2002 09:09:54 ntop/RMON started
(...)

However :

* How to query RMON MIB ? I installed tkMib as mentioned 
in the FAQ, but I don't know how it works. Where 
can I find documentation about tkMib (e.g HOWTO ?) What 
are the other (easy) ways of querying RMON MIB ? 

* my rmonPlugin.c file is uncomplete.
(Continue reading)

Permalink | Reply | 0 comments |
headers
Luca Deri | 5 Mar 2002 13:59
Picon
Favicon

[H20020304]: Remotely exploitable format string vulnerability in ntop]

Hi all,
the following problems have been fixed in ntop's CVS. This is (yet)
another good reason to update your copy of ntop using CVS.

Cheers, Luca

> ----- Forwarded message from hologram <holo <at> brained.org> -----
> 
> Delivered-To: deneb <at> localhost.dreamware.com
> Mailing-List: contact bugtraq-help <at> securityfocus.com; run by ezmlm
> Precedence: bulk
> List-Id: <bugtraq.list-id.securityfocus.com>
> List-Post: <mailto:bugtraq <at> securityfocus.com>
> List-Help: <mailto:bugtraq-help <at> securityfocus.com>
> List-Unsubscribe: <mailto:bugtraq-unsubscribe <at> securityfocus.com>
> List-Subscribe: <mailto:bugtraq-subscribe <at> securityfocus.com>
> Delivered-To: mailing list bugtraq <at> securityfocus.com
> Delivered-To: moderator for bugtraq <at> securityfocus.com
> Date: Mon, 4 Mar 2002 07:46:18 -0500 (EST)
> From: hologram <holo <at> brained.org>
> To: <bugtraq <at> securityfocus.com>
> Subject: [H20020304]: Remotely exploitable format string vulnerability in
>  ntop
> 
>         h o l o g r a m  |  s e c u r i t y  |  a d v i s o r y
> _______________________________________________________________________
> 
>                        Advisory ID : H20020304
>                           Software : ntop
>                           Synopsis : Remotely exploitable format
(Continue reading)

Permalink | Reply | 1 comment |
headers
Luca Deri | 5 Mar 2002 14:01
Picon
Favicon

Re: ntop-dev, claim money you never knew you had

Eric_Josephson <at> groove.net wrote:
> 
> I'm not a frequent poster to this list, but I do enjoy reading it.....  Can
> we close the list to lock out the spam?
Done.

However, I want to avoid to moderate the list as I have no time for
doing this.

Thanks for the mail.

Cheers, Luca

> --
> 
> J. Eric Josephson
> Director of Network and System Operations
> 978-720-2159
> mailto:eric_josephson <at> groove.net
> 
> 
>                     FoundMoney
>                     <foundmoney <at> optin-g        To:     ntop-dev <at> unipi.it
>                     lobal.net>                 cc:
>                     Sent by:                   Subject:     [Ntop-dev] ntop-dev, claim money you never knew you had
>                     ntop-dev-admin <at> unip
>                     i.it
> 
> 
>                     03/01/2002 07:10 PM
(Continue reading)

Permalink | Reply | 751 comments |

Gmane