Hi Ntop developers What do you think about this problem?
Best regards, // Ola On Sun, Jun 13, 2010 at 11:43:36AM +0200, martin f krafft wrote: > Package: ntop > Version: 3:3.3-11+b2 > > If I leave ntop running in a browser, it eventually reloads. After > some time, the ntop server starts to complain loudly and rejects the > requests: > > ntop[2911]: clearing lockout for address 2a01:198:4e2:0:f:3d00:d8e3:4fae > ntop[21899]: **ERROR** Buffer too short @ webInterface.c:646 (increase to > at least 1080) > ntop[21899]: **ERROR** Buffer too short @ webInterface.c:646 (increase to > at least 1063) > ntop[2911]: **ERROR** URL security: > '/st%3CTD%20%20ALIGN=RIGHT%3E77.56.166.1%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%3E00:01:5C:32:8F:C1%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%20NOWRAP%3E%C2%A0%3C/TD%3E%3CTD%20%20ALIGN=RIGHT%20NOWRAP%3E%C2%A0%3C/TD%3E%3CTD%20%20ALIGN=LEFT%3E%3CIMG%20ALIGN=ABSMIDDLE%20SRC=' > rejected (code=4)(client=2a01:198:4e2:0:f:3d00:d8e3:4fae) > ntop[2911]: **ERROR** Rejected request from address > 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request) > ntop[2911]: **ERROR** Rejected request from address > 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request) > ntop[2911]: **ERROR** Rejected request from address > 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request) > ntop[2911]: **ERROR** Rejected request from address > 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request) > ntop[2911]: **ERROR** Rejected request from address > 2a01:198:4e2:0:f:3d00:d8e3:4fae (it previously sent ntop a bad request) > ntop[2911]: clearing lockout for address 2a01:198:4e2:0:f:3d00:d8e3:4fae > ntop[21979]: **ERROR** Buffer too short @ webInterface.c:646 (increase to > at least 1080) > > I don't think there is anything I did wrong or that there's > a security event going on. It seems like the buffer is simply too > small. This may be due to IPv6, but I am not sure. > > In any case, I'd appreciate if ntop didn't get quite so loud about > this problem and wouldn't reject subsequent requests. What do I have > to do to prevent it from thinking that I have malicious intents? > > -- > .''`. martin f. krafft <madd...@d.o> Related projects: > : :' : proud Debian developer http://debiansystem.info > `. `'` http://people.debian.org/~madduck http://vcs-pkg.org > `- Debian - when you have better things to do than fixing systems -- --------------------- Ola Lundqvist --------------------------- / o...@debian.org Annebergsslingan 37 \ | o...@inguza.com 654 65 KARLSTAD | | http://inguza.com/ +46 (0)70-332 1551 | \ gpg/f.p.: 7090 A92B 18FE 7994 0C36 4FE4 18A1 B1CF 0FE5 3DD9 / --------------------------------------------------------------- -- To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org