[ Resending this. We had some trouble with our mail system and
sourceforge's mail system did not like it. ]
Peter Haag wrote:
After a longer period of silence a new NfSen snapshot is available
at Sourceforge.
This snapshot includes the new channel architecture, which resulted
in major
I've been wondering how to enable compression for flow files generated
by nfprofile from profile live. For live profile, compression was easy
to set up. So far, I haven't found a way to do the same for other
profiles (the data of which is not stored directly by nfcapd). I've
tried ugly things
Jens Hektor wrote:
As the timestamp of your filter files is the same as the last
update of your RRDs: did you check your filter file with nfdump -Z?
No, I didn't check them. Thank you for the hint but unfortunately it
didn't solve my problem.
I forgot to mention that the detail of NfSen
Peter Haag wrote:
There is no reason, why it should not work. You may check the log file
to see if the profiler worked correctly.
This makes me wonder a bit. Should there be log messages telling
that nfprofile had done something? Currently, I see only the messages
like the ones below.
Unfortunately, that shadow profile is currently my only profile besides
the profile live. I just created a new one which is not a shadow
profile. Soon, I'll see whether it works or not.
The new profile works at least partly. There are nfcapd files stored
under the
I wrote:
I'm wondering what's wrong with my continuous / shadow profile
configuration (or perhaps my NfSen configuration). [...] Everything
else seems to be fine but the RRD files of the shadow profile aren't
being updated.
Problem is now solved. The reason for it is quite embarassing for
Hello,
I wonder what have I done wrong. I have set up two profiles. One that
filters netflow data sent by a Juniper router works. The other one that
filters netflow data sent by Cisco Catalyst 6500s does not. Nfdump reads
all the data without any issues and the non-working profile begins to
work
Hi Peter,
Peter Haag wrote:
Matti Saarinen wrote:
I wonder what have I done wrong. I have set up two profiles. One that
filters netflow data sent by a Juniper router works. The other one that
filters netflow data sent by Cisco Catalyst 6500s does not.
Obviously, there is something
I accidentally sent the previous e-mail too early. Below is the example
for nprofile command for the non working profile. I outputs no erros and
the same filter works with nfdump.
% echo .#dns-servers#2#anycast-dns#vallila1#012 | nfprofile -P
/srv/data1/nfsen/profiles-stat -M
I wrote:
I wonder what have I done wrong. I have set up two profiles. One that
filters netflow data sent by a Juniper router works. The other one that
filters netflow data sent by Cisco Catalyst 6500s does not.
Now I know what I have done wrong.
'vallila1' = { 'port'= '', 'col'
10 matches
Mail list logo
