I installed ntop and run it on linux gateway which also runs an httpd server on port 81. From another machine on the LAN I access the gateway server through port 3000 (the default ntop service port for viewng logs).

Previously everything worked hunkydory: I would get the ntop web server. Now, however and all of a sudden, when I access port 3000 on the gateway server through my browser (on win xp), whether on the internal NIC or through the internet via a dynamic dns service, I get my webpage from *my* web server (ie on port 81)???

What's going on? I'm a bit of a noob and I'm not sure where to start looking but this has really got me!

Any help appreciated.

What service do you see listening on port 3000?
netstat -nlp

What happens if you access it from the server itself - do you get the ntop page?
lynx -dump http://127.0.0.1:3000

Well I followed your suggestion to rm -rf / but that didn't work and now I can't boot my machine!!

What shall I do now?

Humour aside, sorry for having posted a question then neglected to follow the answers. The problem seems to have righted itself on its own. At least it's not happened since . Very peculiar though. I'm pretty sure that at the time ntop was running on port 3000 and the httpd on port 81.