Hi Ntop developers

What do you think about this problem?

Best regards,

// Ola

On Sun, Jun 13, 2010 at 11:43:36AM +0200, martin f krafft wrote:
> Package: ntop
> Version: 3:3.3-11+b2
> 
> If I leave ntop running in a browser, it eventually reloads. After
> some time, the ntop server starts to complain loudly and rejects the
> requests:
> 
>   ntop[2911]:   clearing lockout for address 2a01:198:4e2:0:f:3d00:d8e3:4fae
>   ntop[21899]:   **ERROR** Buffer too short @ webInterface.c:646 (increase to 
> at least 1080)
>   ntop[21899]:   **ERROR** Buffer too short @ webInterface.c:646 (increase to 
> at least 1063)
>   ntop[2911]:   **ERROR** URL security: 
> '/st%3CTD%20%20ALIGN=RIGHT%3E77.56.166.1%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%3E00:01:5C:32:8F:C1%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%20NOWRAP%3E%C2%A0%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%20NOWRAP%3E%C2%A0%3C/TD%3E%3CTD%20%20ALIGN=LEFT%3E%3CIMG%20ALIGN=ABSMIDDLE%20SRC='
>  rejected (code=4)(client=2a01:198:4e2:0:f:3d00:d8e3:4fae)
>   ntop[2911]:   **ERROR** Rejected request from address 
> 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request)
>   ntop[2911]:   **ERROR** Rejected request from address 
> 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request)
>   ntop[2911]:   **ERROR** Rejected request from address 
> 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request)
>   ntop[2911]:   **ERROR** Rejected request from address 
> 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request)
>   ntop[2911]:   **ERROR** Rejected request from address 
> 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request)
>   ntop[2911]:   clearing lockout for address 2a01:198:4e2:0:f:3d00:d8e3:4fae
>   ntop[21979]:   **ERROR** Buffer too short @ webInterface.c:646 (increase to 
> at least 1080)
> 
> I don't think there is anything I did wrong or that there's
> a security event going on. It seems like the buffer is simply too
> small. This may be due to IPv6, but I am not sure.
> 
> In any case, I'd appreciate if ntop didn't get quite so loud about
> this problem and wouldn't reject subsequent requests. What do I have
> to do to prevent it from thinking that I have malicious intents?
> 
> -- 
>  .''`.   martin f. krafft <madd...@d.o>      Related projects:
> : :'  :  proud Debian developer               http://debiansystem.info
> `. `'`   http://people.debian.org/~madduck    http://vcs-pkg.org
>   `-  Debian - when you have better things to do than fixing systems



-- 
 --------------------- Ola Lundqvist ---------------------------
/  o...@debian.org                     Annebergsslingan 37      \
|  o...@inguza.com                      654 65 KARLSTAD          |
|  http://inguza.com/                  +46 (0)70-332 1551       |
\  gpg/f.p.: 7090 A92B 18FE 7994 0C36  4FE4 18A1 B1CF 0FE5 3DD9 /
 ---------------------------------------------------------------



-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to