Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
Somehow I doubt that nfcapd can start two processes on the same UDP port.
As far as I know, the OS will not let it. Are you sure running a single
collector with multiple sources is possible the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.com wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' = '#ff', 'type' =
'netflow' },
'router1'= { 'port' = '9995', 'IP' = '192.168.121.11' , 'col'
= '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' = '192.168.21.11' , 'col' =
'#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both flows, but when going
to the detail page, I only see stats for the original router (router1)
when it was setup. Under stats for router2 I have x in every column,
it's like it is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well with no change.
This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value is the IP of the
netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
Hi Jason,
Actually this should work. Could you please send me a ps output off list from
your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen should recognise
this and should start the collector
accordingly with multiple -n options.
nfcapd can handle multiple netflow streams to the same port and dispatching
them accordingly.
Regards
- Peter
On 3/27/13 W13 8:43, Adrian Popa wrote:
Somehow I doubt that nfcapd can start two processes on the same UDP port. As
far as I know, the OS will not let it. Are
you sure running a single collector with multiple sources is possible the way
you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.com
mailto:ja...@biel-tech.com wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' = '#ff', 'type' =
'netflow' },
'router1'= { 'port' = '9995', 'IP' = '192.168.121.11' , 'col'
= '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' = '192.168.21.11' , 'col'
= '#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both flows, but when going
to the detail page, I only see stats for
the original router (router1) when it was setup. Under stats for
router2 I have x in every column, it's like it
is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well with no change.
This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value is the IP of the
netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
Well I'll be damned, I sent that email before leaving the office
yesterday. Both the sources not displaying statistics had been in nfSen
for at least 2-3hrs if not moreI come in the morning and I have
statistics now for them related to flows/s etc.
Is there a time frame outside of the standard 5min update that is required
to pass before the detailed statistics get updated? I'm positive they were
both in there longer than an hour.
On Wed, Mar 27, 2013 at 3:04 AM, Peter Haag ph...@users.sourceforge.netwrote:
Hi Jason,
Actually this should work. Could you please send me a ps output off list
from your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen should
recognise this and should start the collector
accordingly with multiple -n options.
nfcapd can handle multiple netflow streams to the same port and
dispatching them accordingly.
Regards
- Peter
On 3/27/13 W13 8:43, Adrian Popa wrote:
Somehow I doubt that nfcapd can start two processes on the same UDP
port. As far as I know, the OS will not let it. Are
you sure running a single collector with multiple sources is possible
the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.commailto:
ja...@biel-tech.com wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' = '#ff',
'type' = 'netflow' },
'router1'= { 'port' = '9995', 'IP' = '192.168.121.11' ,
'col' = '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' = '192.168.21.11' ,
'col' = '#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both flows, but when
going to the detail page, I only see stats for
the original router (router1) when it was setup. Under stats for
router2 I have x in every column, it's like it
is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well with no
change. This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value is the IP
of the netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net mailto:
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
--
Jason
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
On 3/27/13 W13 11:46, Jason Biel wrote:
Well I'll be damned, I sent that email before leaving the office yesterday.
Both the sources not displaying statistics
had been in nfSen for at least 2-3hrs if not moreI come in the morning
and I have statistics now for them related to
flows/s etc.
Is there a time frame outside of the standard 5min update that is required to
pass before the detailed statistics get
updated? I'm positive they were both in there longer than an hour.
No - no other interval, other than the 5min ..
Any specific network storage? NFS? Other caching issue?
- Peter
On Wed, Mar 27, 2013 at 3:04 AM, Peter Haag ph...@users.sourceforge.net
mailto:ph...@users.sourceforge.net wrote:
Hi Jason,
Actually this should work. Could you please send me a ps output off list
from your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen should
recognise this and should start the collector
accordingly with multiple -n options.
nfcapd can handle multiple netflow streams to the same port and
dispatching them accordingly.
Regards
- Peter
On 3/27/13 W13 8:43, Adrian Popa wrote:
Somehow I doubt that nfcapd can start two processes on the same UDP
port. As far as I know, the OS will not let it. Are
you sure running a single collector with multiple sources is possible
the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.com
mailto:ja...@biel-tech.com mailto:ja...@biel-tech.com
mailto:ja...@biel-tech.com wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' = '#ff',
'type' = 'netflow' },
'router1'= { 'port' = '9995', 'IP' = '192.168.121.11' ,
'col' = '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' = '192.168.21.11' ,
'col' = '#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both flows, but when
going to the detail page, I only see stats for
the original router (router1) when it was setup. Under stats for
router2 I have x in every column, it's like it
is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well with no
change. This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value is the IP
of the netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
--
Jason
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13. http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
On 3/27/13 W13 12:22, Jason Biel wrote:
The nfsen profiles directory is on NFS, binaries and such are on the local
system. Is that usually an issue?
It should not - no. But it was the only option, I could guess of, that for some
reason the data did not appear. But I
can't tell, what was wrong.
- Peter
It didn't
appear to be for the first host so it would be rather confusing.
On Wed, Mar 27, 2013 at 6:20 AM, Peter Haag ph...@users.sourceforge.net
mailto:ph...@users.sourceforge.net wrote:
On 3/27/13 W13 11:46, Jason Biel wrote:
Well I'll be damned, I sent that email before leaving the office
yesterday. Both the sources not displaying statistics
had been in nfSen for at least 2-3hrs if not moreI come in the
morning and I have statistics now for them related to
flows/s etc.
Is there a time frame outside of the standard 5min update that is
required to pass before the detailed statistics get
updated? I'm positive they were both in there longer than an hour.
No - no other interval, other than the 5min ..
Any specific network storage? NFS? Other caching issue?
- Peter
On Wed, Mar 27, 2013 at 3:04 AM, Peter Haag
ph...@users.sourceforge.net mailto:ph...@users.sourceforge.net
mailto:ph...@users.sourceforge.net
mailto:ph...@users.sourceforge.net wrote:
Hi Jason,
Actually this should work. Could you please send me a ps output off
list from your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen should
recognise this and should start the collector
accordingly with multiple -n options.
nfcapd can handle multiple netflow streams to the same port and
dispatching them accordingly.
Regards
- Peter
On 3/27/13 W13 8:43, Adrian Popa wrote:
Somehow I doubt that nfcapd can start two processes on the same
UDP port. As far as I know, the OS will not let it. Are
you sure running a single collector with multiple sources is
possible the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel ja...@biel-tech.com
mailto:ja...@biel-tech.com mailto:ja...@biel-tech.com
mailto:ja...@biel-tech.com
mailto:ja...@biel-tech.com mailto:ja...@biel-tech.com
mailto:ja...@biel-tech.com mailto:ja...@biel-tech.com
wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple
sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' =
'#ff', 'type' = 'netflow' },
'router1'= { 'port' = '9995', 'IP' =
'192.168.121.11' , 'col' = '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' =
'192.168.21.11' , 'col' = '#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both flows, but
when going to the detail page, I only see stats for
the original router (router1) when it was setup. Under stats
for router2 I have x in every column, it's like it
is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well with
no change. This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value is
the IP of the netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo contest.
Compete for recognition, cash, and the chance to get your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13.
http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Own the
Re: [Nfsen-discuss] Multiple Sources - One Collector Port - Missing Statistics
I'll keep an eye on it as I add some more sources. If anything, I can move
it back to local disk and see if the same issue happens there.
On Wed, Mar 27, 2013 at 8:06 AM, Peter Haag ph...@users.sourceforge.netwrote:
On 3/27/13 W13 12:22, Jason Biel wrote:
The nfsen profiles directory is on NFS, binaries and such are on the
local system. Is that usually an issue?
It should not - no. But it was the only option, I could guess of, that for
some reason the data did not appear. But I
can't tell, what was wrong.
- Peter
It didn't
appear to be for the first host so it would be rather confusing.
On Wed, Mar 27, 2013 at 6:20 AM, Peter Haag
ph...@users.sourceforge.netmailto:
ph...@users.sourceforge.net wrote:
On 3/27/13 W13 11:46, Jason Biel wrote:
Well I'll be damned, I sent that email before leaving the office
yesterday. Both the sources not displaying statistics
had been in nfSen for at least 2-3hrs if not moreI come in the
morning and I have statistics now for them related to
flows/s etc.
Is there a time frame outside of the standard 5min update that is
required to pass before the detailed statistics get
updated? I'm positive they were both in there longer than an hour.
No - no other interval, other than the 5min ..
Any specific network storage? NFS? Other caching issue?
- Peter
On Wed, Mar 27, 2013 at 3:04 AM, Peter Haag
ph...@users.sourceforge.net mailto:ph...@users.sourceforge.net mailto:
ph...@users.sourceforge.net
mailto:ph...@users.sourceforge.net wrote:
Hi Jason,
Actually this should work. Could you please send me a ps
output off list from your system such as
ps auxww | grep nfcapd
When configuring the same port for different source, NfSen
should recognise this and should start the collector
accordingly with multiple -n options.
nfcapd can handle multiple netflow streams to the same port
and dispatching them accordingly.
Regards
- Peter
On 3/27/13 W13 8:43, Adrian Popa wrote:
Somehow I doubt that nfcapd can start two processes on the
same UDP port. As far as I know, the OS will not let it. Are
you sure running a single collector with multiple sources is
possible the way you want it?
On Wed, Mar 27, 2013 at 4:26 AM, Jason Biel
ja...@biel-tech.com mailto:ja...@biel-tech.com mailto:
ja...@biel-tech.com mailto:ja...@biel-tech.com
mailto:ja...@biel-tech.com mailto:ja...@biel-tech.com mailto:
ja...@biel-tech.com mailto:ja...@biel-tech.com
wrote:
Currently running:
nfsen-1.3.6p1
nfdump-1.6.9 (with nfprofile, nftracker, sflow compiled)
I am trying to run a single collector port for multiple
sources:
%sources = (
#'upstream1'= { 'port' = '9995', 'col' =
'#ff', 'type' = 'netflow' },
'router1'= { 'port' = '9995', 'IP' =
'192.168.121.11' , 'col' = '#ff', 'type' = 'netflow' },
'router2'= { 'port' = '9995', 'IP' =
'192.168.21.11' , 'col' = '#00CC33', 'type' = 'netflow' },
);
This works great, the graphs get updated with both
flows, but when going to the detail page, I only see stats for
the original router (router1) when it was setup. Under
stats for router2 I have x in every column, it's like it
is not picking up the stats for those flows.
I've tried setting the port for router2 to '0' as well
with no change. This continues as I add more sources as well.
What am I missing? My assumption is that the 'IP' value
is the IP of the netflow source correct?
--
Own the Future-Intelreg; Level Up Game Demo Contest 2013
Rise to greatness in Intel's independent game demo
contest.
Compete for recognition, cash, and the chance to get
your game
on Steam. $5K grand prize plus 10 genre and skill prizes.
Submit your demo by 6/6/13.
http://p.sf.net/sfu/intel_levelupd2d
___
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net mailto:
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net mailto:
Nfsen-discuss@lists.sourceforge.net
mailto:Nfsen-discuss@lists.sourceforge.net mailto:
Nfsen-discuss@lists.sourceforge.net
