Hi all,
I tried to migrate NFSen to another computer, my step are:
1, install NFSen;
2, configured nfsen.conf as old one;
3, copy /data/nfsen/profiles-data to the new NFSen computer;
but I found all filter under "stats" tab are blank. do I missed something?
thanks
At 2013-05-24 08:26:28,nfsen-discuss-requ...@lists.sourceforge.net wrote:
>Send Nfsen-discuss mailing list submissions to
> nfsen-discuss@lists.sourceforge.net
>
>To subscribe or unsubscribe via the World Wide Web, visit
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>or, via email, send a message with subject or body 'help' to
> nfsen-discuss-requ...@lists.sourceforge.net
>
>You can reach the person managing the list at
> nfsen-discuss-ow...@lists.sourceforge.net
>
>When replying, please edit your Subject line so it is more specific
>than "Re: Contents of Nfsen-discuss digest..."
>
>
>Today's Topics:
>
> 1. Re: nfsen (or maybe rrd) not draw diagram (Peter Haag)
> 2. Re: nfsen (or maybe rrd) not draw diagram (Eric)
> 3. Re: Crash with nfdump NSEL-1.6.10 (Peter Haag)
>
>
>----------------------------------------------------------------------
>
>Message: 1
>Date: Thu, 23 May 2013 15:33:40 +0200
>From: Peter Haag <ph...@users.sourceforge.net>
>Subject: Re: [Nfsen-discuss] nfsen (or maybe rrd) not draw diagram
>To: Eric <eric...@163.com>
>Cc: nfsen-discuss@lists.sourceforge.net
>Message-ID: <519e1ab4.1040...@users.sourceforge.net>
>Content-Type: text/plain; charset=ISO-8859-1
>
>Hi Eric,
>
>On 5/23/13 W21 2:36, Eric wrote:
>> if I try to rebuild the 'live' profile;
>>
>> [root@nfsen1 ~]# /data/nfsen/bin/nfsen -r live
>>
>> ERR Communication nfsend failed. Died at /data/nfsen/libexec/Nfcomm.pm line
>> 1311, <$nfsen_sock> line 4.
>>
>> rebuilding other profiles were all fine.
>
>I know, it's misleading - the rebuild process just takes a bit longer and the
>communication times out. This has no
>impact on the rebuild process. You can check the status of the profile at any
>time with:
>
>./nfsen -l live
>
>Will be fixed in 1.3.7
>
> - Peter
>
>>
>>
>>
>>
>> At 2013-05-22 17:14:55,Eric <eric...@163.com> wrote:
>>
>> Hi wim & all,
>> the graph still not updated although datas coming in continously.
>>
>> here is what I found today, if any one can help? thanks. PS: I run the
>> same command on all other profiles, and fine.
>>
>> [root@nfsen1 live]# /data/nfsen/bin/nfsen -l live
>> name live
>> group (nogroup)
>> tcreate Tue Mar 5 17:00:00 2013
>> tstart Tue Mar 5 17:01:37 2013
>> tend Wed May 22 12:25:00 2013
>> updated Wed May 22 12:25:00 2013
>> expire 72 days 0 hours
>> size 0
>> maxsize 50.0 GB
>> type live
>> locked 0
>> status OK
>> version 130
>> channel EASTHQ sign: + colour: #FF0000 order: 1 sourcelist:
>> EASTHQ ERR Error reading channel stat
>> information. Missing key 'first'
>> Files: 0 Size: 0
>> channel CN2BJ sign: + colour: #0000ff order: 2 sourcelist:
>> CN2BJ ERR Error reading channel stat
>> information. Missing key 'first'
>> Files: 0 Size: 0
>> channel CN2CD sign: + colour: #ff0000 order: 3 sourcelist:
>> CN2CD ERR Error reading channel stat
>> information. Missing key 'first'
>> Files: 0 Size: 0
>> channel CN2GZ sign: + colour: #00ff00 order: 4 sourcelist:
>> CN2GZ ERR Error reading channel stat
>> information. Missing key 'first'
>> Files: 0 Size: 0
>>
>> .....
>>
>>
>>
>>
>>
>>
>> At 2013-05-20 22:44:46,"Wim Biemolt" <wim.biem...@surfnet.eu
>> <mailto:wim.biem...@surfnet.eu>> wrote:
>> >On 20/05/2013 06:37, Eric wrote:
>> >
>> >> From the last screenshot, I can see there are data coming in, but
>> not
>> >> draw diagram (you can see the last update time attribute). Is there
>> >> anyone can help? thanks
>> >
>> >I'm afraid I can't really help. But since you mentioned rrd in the
>> >subject. I performed some upgrades myself yesterday, nfdump from
>> >1.6.9 to 1.6.10 but also from 'rrdtool-1.4.5' to 'rrdtool-1.4.7_2'.
>> >After the upgrade all pictures have become "empty" (zero in size).
>> >Everything else seems to work fine. But no pictures anymore :-(
>> >
>> >Cheers,
>> >
>> >-Wim
>>
>>
>>
>>
>>
>>
>>
>> ------------------------------------------------------------------------------
>> Try New Relic Now & We'll Send You this Cool Shirt
>> New Relic is the only SaaS-based application performance monitoring service
>> that delivers powerful full stack analytics. Optimize and monitor your
>> browser, app, & servers with just a few lines of code. Try New Relic
>> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
>>
>>
>>
>> _______________________________________________
>> Nfsen-discuss mailing list
>> Nfsen-discuss@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>
>--
>--
>Be nice to your netflow data
>
>
>
>------------------------------
>
>Message: 2
>Date: Thu, 23 May 2013 22:09:20 +0800 (CST)
>From: Eric <eric...@163.com>
>Subject: Re: [Nfsen-discuss] nfsen (or maybe rrd) not draw diagram
>To: ph...@users.sourceforge.net
>Cc: nfsen-discuss@lists.sourceforge.net
>Message-ID: <669b3435.da89.13ed1b8f9ee.coremail.eric...@163.com>
>Content-Type: text/plain; charset="gbk"
>
>Hi Peter,
>thanks for your reply.
>
>
>I've tried run command "/data/nfsen/bin/nfsen -r live", it showed "ERR Error
>reading channel stat information. Missing key 'first' ".
>
>
>now :
>1, data under profiles-data/live folder are correct, all other profiles',
>there are new data files for all sources every 5 mins the file size looks good.
>2, data under other profile folder not correct, seems only a file would be
>created when service/computer restart.
>3, the http://.../nfsen/nfsen.php automatically refresh every 5 mins, but the
>grahp no update , and the timeline stucked at last restart timeslot.
>
>
>can you help? thanks
>
>
>
>
>
>
>
>
>At 2013-05-23 21:33:40,"Peter Haag" <ph...@users.sourceforge.net> wrote:
>>Hi Eric,
>>
>>On 5/23/13 W21 2:36, Eric wrote:
>>> if I try to rebuild the 'live' profile;
>>>
>>> [root@nfsen1 ~]# /data/nfsen/bin/nfsen -r live
>>>
>>> ERR Communication nfsend failed. Died at /data/nfsen/libexec/Nfcomm.pm line
>>> 1311, <$nfsen_sock> line 4.
>>>
>>> rebuilding other profiles were all fine.
>>
>>I know, it's misleading - the rebuild process just takes a bit longer and the
>>communication times out. This has no
>>impact on the rebuild process. You can check the status of the profile at any
>>time with:
>>
>>./nfsen -l live
>>
>>Will be fixed in 1.3.7
>>
>> - Peter
>>
>>>
>>>
>>>
>>>
>>> At 2013-05-22 17:14:55,Eric <eric...@163.com> wrote:
>>>
>>> Hi wim & all,
>>> the graph still not updated although datas coming in continously.
>>>
>>> here is what I found today, if any one can help? thanks. PS: I run the
>>> same command on all other profiles, and fine.
>>>
>>> [root@nfsen1 live]# /data/nfsen/bin/nfsen -l live
>>> name live
>>> group (nogroup)
>>> tcreate Tue Mar 5 17:00:00 2013
>>> tstart Tue Mar 5 17:01:37 2013
>>> tend Wed May 22 12:25:00 2013
>>> updated Wed May 22 12:25:00 2013
>>> expire 72 days 0 hours
>>> size 0
>>> maxsize 50.0 GB
>>> type live
>>> locked 0
>>> status OK
>>> version 130
>>> channel EASTHQ sign: + colour: #FF0000 order: 1 sourcelist:
>>> EASTHQ ERR Error reading channel stat
>>> information. Missing key 'first'
>>> Files: 0 Size: 0
>>> channel CN2BJ sign: + colour: #0000ff order: 2 sourcelist:
>>> CN2BJ ERR Error reading channel stat
>>> information. Missing key 'first'
>>> Files: 0 Size: 0
>>> channel CN2CD sign: + colour: #ff0000 order: 3 sourcelist:
>>> CN2CD ERR Error reading channel stat
>>> information. Missing key 'first'
>>> Files: 0 Size: 0
>>> channel CN2GZ sign: + colour: #00ff00 order: 4 sourcelist:
>>> CN2GZ ERR Error reading channel stat
>>> information. Missing key 'first'
>>> Files: 0 Size: 0
>>>
>>> .....
>>>
>>>
>>>
>>>
>>>
>>>
>>> At 2013-05-20 22:44:46,"Wim Biemolt" <wim.biem...@surfnet.eu
>>> <mailto:wim.biem...@surfnet.eu>> wrote:
>>> >On 20/05/2013 06:37, Eric wrote:
>>> >
>>> >> From the last screenshot, I can see there are data coming in, but
>>> not
>>> >> draw diagram (you can see the last update time attribute). Is there
>>> >> anyone can help? thanks
>>> >
>>> >I'm afraid I can't really help. But since you mentioned rrd in the
>>> >subject. I performed some upgrades myself yesterday, nfdump from
>>> >1.6.9 to 1.6.10 but also from 'rrdtool-1.4.5' to 'rrdtool-1.4.7_2'.
>>> >After the upgrade all pictures have become "empty" (zero in size).
>>> >Everything else seems to work fine. But no pictures anymore :-(
>>> >
>>> >Cheers,
>>> >
>>> >-Wim
>>>
>>>
>>>
>>>
>>>
>>>
>>>
>>> ------------------------------------------------------------------------------
>>> Try New Relic Now & We'll Send You this Cool Shirt
>>> New Relic is the only SaaS-based application performance monitoring service
>>> that delivers powerful full stack analytics. Optimize and monitor your
>>> browser, app, & servers with just a few lines of code. Try New Relic
>>> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
>>>
>>>
>>>
>>> _______________________________________________
>>> Nfsen-discuss mailing list
>>> Nfsen-discuss@lists.sourceforge.net
>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>>
>>
>>--
>>--
>>Be nice to your netflow data
>-------------- next part --------------
>An HTML attachment was scrubbed...
>
>------------------------------
>
>Message: 3
>Date: Fri, 24 May 2013 02:26:13 +0200
>From: Peter Haag <ph...@users.sourceforge.net>
>Subject: Re: [Nfsen-discuss] Crash with nfdump NSEL-1.6.10
>To: Sebastian Hagedorn <haged...@uni-koeln.de>
>Cc: nfsen-discuss@lists.sourceforge.net
>Message-ID: <519eb3a5.3070...@users.sourceforge.net>
>Content-Type: text/plain; charset=ISO-8859-1
>
>Hi Sebastian,
>Sorry - I posted the mail just to nfdump-discuss. You seem to have downloaded
>1.6.10 right away :)
>
>Mail mail from Mai 18th on nfdump-dicuss:
>
>I'm sorry for this problem! When I put 1.6.10 on sourceforge, I got the report
>already from another user. I immediately
>withdrew the package and fixed the double free bug. Please pull a clean copy
>from sourceforge now. It's fixed.
>
>Sorry for the inconvenience.
>
>- Peter
>
>
>
>
>On 5/22/13 W21 11:13, Sebastian Hagedorn wrote:
>> Hi,
>>
>> we've been using nfdump/NfSen for several years, but until yesterday I
>> wasn't responsible for the software itself. We
>> had been using nfdump 1.5.4 and all our devices were exporting netflow
>> version 5. Because I now want to support IPv6 as
>> well I upgraded to 1.6.10. I configured nfdump on a RHEL 5 system like this:
>>
>> ./configure --enable-nsel --enable-compat15 --enable-nfprofile
>>
>> Then I changed one of our routers to export netflow version 9 and enabled
>> flows for IPv6. Now I'm getting crashes when I
>> try to use nfdump on nfcapd files from that router, e.g.:
>>
>> nfdump -r /var/local/nfsen/profiles/live/bordergw/nfcapd.201305211525 -c 1
>> 'proto tcp'
>> Date first seen Event XEvent Proto Src IP Addr:Port Dst IP
>> Addr:Port X-Src IP Addr:Port X-Dst
>> IP Addr:Port In Byte Out Byte
>> Verify map id 0: ERROR: Expected 7 elements in map, but found 2!
>> 2013-05-21 15:24:42.820 IGNORE Ignore TCP REDACTED:58335 ->
>> REDACTED:445 0.0.0.0:0 ->
>> 0.0.0.0:445 48 0
>> Summary: total flows: 1, total bytes: 48, total packets: 1, avg bps: 0, avg
>> pps: 0, avg bpp: 0
>> Time window: 2013-05-21 15:23:47 - 2013-05-21 15:29:58
>> Total flows processed: 18701, Blocks skipped: 0, Bytes read: 1048560
>> Sys: 0.009s flows/second: 1870474.1 Wall: 0.003s flows/second: 4813642.2
>> *** glibc detected *** nfdump: free(): invalid pointer: 0x0944c848 ***
>> ======= Backtrace: =========
>> /lib/libc.so.6[0x4fec65]
>> /lib/libc.so.6(cfree+0x59)[0x502c59]
>> nfdump[0x80615bf]
>> nfdump[0x804aca6]
>> /lib/libc.so.6(__libc_start_main+0xdc)[0x4aaebc]
>> nfdump[0x80494a1]
>> ======= Memory map: ========
>> 00410000-00411000 r-xp 00410000 00:00 0 [vdso]
>> 00476000-00491000 r-xp 00000000 08:01 870123 /lib/ld-2.5.so
>> 00491000-00492000 r-xp 0001a000 08:01 870123 /lib/ld-2.5.so
>> 00492000-00493000 rwxp 0001b000 08:01 870123 /lib/ld-2.5.so
>> 00495000-005ec000 r-xp 00000000 08:01 870125 /lib/libc-2.5.so
>> 005ec000-005ee000 r-xp 00156000 08:01 870125 /lib/libc-2.5.so
>> 005ee000-005ef000 rwxp 00158000 08:01 870125 /lib/libc-2.5.so
>> 005ef000-005f2000 rwxp 005ef000 00:00 0
>> 006e7000-006f8000 r-xp 00000000 08:01 870295 /lib/libresolv-2.5.so
>> 006f8000-006f9000 r-xp 00010000 08:01 870295 /lib/libresolv-2.5.so
>> 006f9000-006fa000 rwxp 00011000 08:01 870295 /lib/libresolv-2.5.so
>> 006fa000-006fc000 rwxp 006fa000 00:00 0
>> 05716000-05721000 r-xp 00000000 08:01 870280
>> /lib/libgcc_s-4.1.2-20080825.so.1
>> 05721000-05722000 rwxp 0000a000 08:01 870280
>> /lib/libgcc_s-4.1.2-20080825.so.1
>> 08048000-08079000 r-xp 00000000 08:01 1069771 /usr/local/bin/nfdump
>> 08079000-0807c000 rw-p 00031000 08:01 1069771 /usr/local/bin/nfdump
>> 0807c000-08091000 rw-p 0807c000 00:00 0
>> 0944b000-0946c000 rw-p 0944b000 00:00 0 [heap]
>> b74b1000-b79b2000 rw-p b74b1000 00:00 0
>> b7eb3000-b7ef6000 rw-p b7eb3000 00:00 0
>> b7f01000-b7f02000 rw-p b7f01000 00:00 0
>> bfaba000-bfacf000 rw-p bffe9000 00:00 0 [stack]
>> Aborted
>>
>> Verifying the file shows no errors, as far as I can tell:
>>
>> nfdump -v /var/local/nfsen/profiles/live/bordergw/nfcapd.201305211525
>> File : /var/local/nfsen/profiles/live/bordergw/nfcapd.201305211525
>> Version : 1 - compressed
>> Blocks : 70
>> Type 1 : 0
>> Type 2 : 70
>> Type 3 : 0
>> Records : 1262294
>>
>> What's more, there don't seem to be any IPv6 flows. Any ideas or suggestions?
>>
>> Cheers,
>> Sebastian
>>
>>
>> ------------------------------------------------------------------------------
>> Try New Relic Now & We'll Send You this Cool Shirt
>> New Relic is the only SaaS-based application performance monitoring service
>> that delivers powerful full stack analytics. Optimize and monitor your
>> browser, app, & servers with just a few lines of code. Try New Relic
>> and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
>>
>>
>>
>> _______________________________________________
>> Nfsen-discuss mailing list
>> Nfsen-discuss@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>
>--
>--
>Be nice to your netflow data
>
>
>
>------------------------------
>
>------------------------------------------------------------------------------
>Try New Relic Now & We'll Send You this Cool Shirt
>New Relic is the only SaaS-based application performance monitoring service
>that delivers powerful full stack analytics. Optimize and monitor your
>browser, app, & servers with just a few lines of code. Try New Relic
>and get this awesome Nerd Life shirt! http://p.sf.net/sfu/newrelic_d2d_may
>
>------------------------------
>
>_______________________________________________
>Nfsen-discuss mailing list
>Nfsen-discuss@lists.sourceforge.net
>https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
>
>End of Nfsen-discuss Digest, Vol 84, Issue 10
>*********************************************
------------------------------------------------------------------------------
Introducing AppDynamics Lite, a free troubleshooting tool for Java/.NET
Get 100% visibility into your production application - at no cost.
Code-level diagnostics for performance bottlenecks with <2% overhead
Download for free and get started troubleshooting in minutes.
http://p.sf.net/sfu/appdyn_d2d_ap1
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
