Peter, That got me closer. I had shut down the iptables and tried it but forgot SELinux. I disabled SELinux and now I'm getting:
ERROR: Missing session parameter 'profileswitch'! I'm tracking it down now. -----Original Message----- From: Peter Haag [mailto:[EMAIL PROTECTED] Sent: Monday, April 30, 2007 8:43 AM To: Stephen W. Bradley; nfsen-discuss@lists.sourceforge.net Subject: Re: [Nfsen-discuss] Nfsen not working -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --On April 30, 2007 7:51:26 -0400 "Stephen W. Bradley" <[EMAIL PROTECTED]> wrote: | Peter, | | I tried this way this morning making the netflow user apache in the config | file and re-installing everything to change it over. | | | [EMAIL PROTECTED] nfsen-snapshot-20070312]# ls -l /nfsen/var/run | total 20 | -rw-r--r-- 1 apache apache 6 Apr 30 07:11 miamiflows.pid | srw-rw-r-- 1 apache apache 0 Apr 30 07:11 nfsen.comm | -rw-r--r-- 1 apache apache 6 Apr 30 07:11 nfsend.pid | [EMAIL PROTECTED] nfsen-snapshot-20070312]# | | | I still get the web page error: | | ERROR: nfsend connect() error: Permission denied! This is a direct answer from the php system call to open the socket. Obviously it's the right uid/gid for any reason. Are there any other security restrictions in place, SElinux, php modules etc. which prevent the socket open. For testing try to set chmod 666 nfsen.comm | ERROR: nfsend - connection failed!! | ERROR: Can not initialize globals! | | I have check PHP tags and tried changing file ownership and groups on all | the files and web page with no luck. | | Thanks | Steve | | -----Original Message----- | From: Peter Haag [mailto:[EMAIL PROTECTED] | Sent: Saturday, April 28, 2007 2:01 AM | To: Stephen W. Bradley; nfsen-discuss@lists.sourceforge.net | Subject: Re: [Nfsen-discuss] Nfsen not working | | -----BEGIN PGP SIGNED MESSAGE----- | Hash: SHA1 | | | | - --On April 27, 2007 2:59:46 PM -0400 "Stephen W. Bradley" | <[EMAIL PROTECTED]> wrote: | | | Chris managed to get me through the snapshot problem so that is my focus | | now. Thank you Chris | | | | In order to get around the problem of not finding the libraries for rrd I | | had to put them in /usr/lib64. That fixes the configure problem for the | | snapshots requiring --enable-nfprofile. | | | | I have started it up using /nfsen/bin/nfsen.rc start but the web page | fails | | to load with the following: | | | | | | ERROR: nfsend connect() error: Permission denied! | | ERROR: nfsend - connection failed!! | | ERROR: Can not initialize globals! | | nfsend creates a UNIX communication socket between frontend and backend. | This socket is located in $BASEDIR/var/run unless specified otherwise using | $COMMSOCKET | in nfsen.conf. This socket needs rw rights from the webserver uid in order | to | open this socket. Can you check this? | | | | | | | | Which leads to this in the /var/tmp/nfsen-log file. | | You may set $DEBUG=0 to prevent filling /var/tmp unless for debugging | purpose. | | | | | | | | | ========================= | | Run at 2007-04-27-14:52:11 | | | | nfsend No socket - open connection first | | | | | | | | It appears to have a problem binding to a socket but I do not know why. | | | | | | Any ideas appreciated. | | | | Thanks | | Steve | | | | | | -----Original Message----- | | From: [EMAIL PROTECTED] | | [mailto:[EMAIL PROTECTED] On Behalf Of Chris | | Waters | | Sent: Friday, April 27, 2007 12:04 PM | | To: nfsen-discuss@lists.sourceforge.net | | Subject: Re: [Nfsen-discuss] Nfsen not working | | | | I have a similar configuration and while not working 100% (profiles | | still don't work for me) the live profile is working just fine. I am | | running the snapshots for nfdump and nfsen. | | | | Centos 4.4 X86_64 | | nfsen: snapshot-20070312 $Id: nfsen 76 2007-03-13 12:20:11Z peter $ | | nfdump: Version: snapshot-20070312 $LastChangedDate: 2007-03-13 08:36:17 | | +0100 (Tue, 13 Mar 2007) $ | | $Id: nfdump.c 88 2007-03-06 08:49:26Z peter $ | | RRDtool 1.2.19 | | perl v5.8.8 | | | | I do remember having a problem getting the right path for the | | rrdlibraries. I am trying to figure out what I did to get it to work. | | I'll post again when I find the answer for you. | | | | | | Chris Waters | | Technology Services - Network Group | | JELD-WEN, Inc. | | Information Systems | | [EMAIL PROTECTED] | | | | -----Original Message----- | | From: [EMAIL PROTECTED] | | [mailto:[EMAIL PROTECTED] On Behalf Of | | Stephen W. Bradley | | Sent: Friday, April 27, 2007 8:43 AM | | To: nfsen-discuss@lists.sourceforge.net | | Subject: [Nfsen-discuss] Nfsen not working | | | | This may seem like an odd question but does anyone have Nfsen working | | 100%? | | | | 1. | | | | I have tried for days now and I still cannot get the details web page to | | work. | | | | Centos 4.4 | | rrdtool-1.2.18 | | nfdump-1.5.2 | | nfsen-1.2.4 | | MailTools-1.76 | | Perl 5.8.5 | | | | It will not show the graphs on the page. Everything else seems to be | | working but the graphs will not display. I can do searches but when I | | click on the tab at the top or click through to that page I do not get | | any pictures at all. | | | | Everything installs and compiles cleanly and I have gone through the | | permissions and users with no luck. | | | | | | 2. | | | | I have also tried installing the latest snapshots but Nfdump will NOT | | configure because it cannot find the librrd.so.2 no matter where I put | | it. | | I would prefer to run the latest but if it won't work I can run older | | code. | | | | configure:5871: test -s conftest.o | | configure:5874: $? = 0 | | configure:5885: result: yes | | configure:5888: checking size of void * | | configure:6207: gcc -o conftest -g -O2 -Wall -Wstrict-prototypes | | -Wmissing-prototypes -Wmissing-declarations -Wmissing-noreturn | | -I/usr/local/soft/rrdtool-1. | | 2.18/include -L/usr/local/soft/rrdtool-1.2.18/lib conftest.c -lrrd >&5 | | conftest.c:70: warning: function declaration isn't a prototype | | conftest.c:71: warning: function declaration isn't a prototype | | conftest.c:76: warning: function declaration isn't a prototype | | configure:6210: $? = 0 | | configure:6212: ./conftest | | ./conftest: error while loading shared libraries: librrd.so.2: cannot | | open shared object file: No such file or directory | | configure:6215: $? = 127 | | configure: program exited with status 127 | | | | | | I have tried putting the libs almost everywhere on the system and tried | | different --with-rrdpath= path with no success. | | | | | | Any guidance would be appreciated. | | | | Thank you | | Steve | | | | | | | | | | | | ------------------------------------------------------------------------ | | - | | This SF.net email is sponsored by DB2 Express Download DB2 Express C - | | the FREE version of DB2 express and take control of your XML. No limits. | | Just data. Click to get it now. | | http://sourceforge.net/powerbar/db2/ | | _______________________________________________ | | Nfsen-discuss mailing list | | Nfsen-discuss@lists.sourceforge.net | | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss | | | | ------------------------------------------------------------------------- | | This SF.net email is sponsored by DB2 Express | | Download DB2 Express C - the FREE version of DB2 express and take | | control of your XML. No limits. Just data. Click to get it now. | | http://sourceforge.net/powerbar/db2/ | | _______________________________________________ | | Nfsen-discuss mailing list | | Nfsen-discuss@lists.sourceforge.net | | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss | | | | | | ------------------------------------------------------------------------- | | This SF.net email is sponsored by DB2 Express | | Download DB2 Express C - the FREE version of DB2 express and take | | control of your XML. No limits. Just data. Click to get it now. | | http://sourceforge.net/powerbar/db2/ | | _______________________________________________ | | Nfsen-discuss mailing list | | Nfsen-discuss@lists.sourceforge.net | | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss | | | | - -- | _______ SWITCH - The Swiss Education and Research Network ______ | Peter Haag, Security Engineer, Member of SWITCH CERT | PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 | SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland | E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/ | -----BEGIN PGP SIGNATURE----- | Version: GnuPG v1.4.5 (Darwin) | | iQCVAwUBRjLjNf5AbZRALNr/AQJ35AP/biedynmk8wETxPZIWT/mcxi32BR2I9D6 | wEkA2iMmpaMd491dCYOiCuEeXSNKclfhhBZAT+qeZDApqXQxnoT3neW7PznJ3bpV | ZL1+CJ9bVvhbFEUIrObtqDcv93Ylrqp9en+Be9SEkEma2HY9yqonzMA9E+4HMQWB | OU9UUifg7ek= | =Oxqx | -----END PGP SIGNATURE----- | | | ------------------------------------------------------------------------- | This SF.net email is sponsored by DB2 Express | Download DB2 Express C - the FREE version of DB2 express and take | control of your XML. No limits. Just data. Click to get it now. | http://sourceforge.net/powerbar/db2/ | _______________________________________________ | Nfsen-discuss mailing list | Nfsen-discuss@lists.sourceforge.net | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iQCVAwUBRjXkaf5AbZRALNr/AQLnvQP9HB9Q0rEob87C/TYw77J6eItgGMpwqHZP S/nIK4UgtIG+xpF0qJ1N9YAmIRIjyYVlrC6NKTfcBPYi2SzRec/G36VZjA6YJWyT Ecgf+U7+J0gq6tNdYRuUapBvRs9TPfvV/FUUnLYvUprwPjx+T+YPahzn+iP4iiVu zodkimJanxs= =/J+K -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
