Hi, Am 26.01.2011 um 10.09 schrieb Don Gould:
> Ok, I've got nfdump installed on debian 5 > > I can see nfcapd is running: > > • ps -A | grep nf > 2754 ? 00:00:00 nfcapd > What I can't figure out is what the configuration is and where the config > files are... /etc/init.d/nfdump -- is the place to add options to nfcapd. Please start reading with documentation that comes with nfdump: /usr/share/doc/nfdump/README.Debian > > I tried locate nfdump but didn't find any conf files. Because it dosn't need one. > > I've looked at the man files and can see I can run the daemon from the > command line, but how do I view and or change the configuration in memory? > > Do I have to kill it and reload it from the command line? Yes. Read man page of invoke-rc.d and ps. > > /etc/init.d/nfdump > /etc/rc0.d/K20nfdump > /etc/rc1.d/K20nfdump > /etc/rc2.d/S20nfdump > /etc/rc3.d/S20nfdump > /etc/rc4.d/S20nfdump > /etc/rc5.d/S20nfdump > /etc/rc6.d/K20nfdump > > Do I control the conf from the start up files? No. When you install nfdump without nfsen you have to configure /etc/default/nfdump to get nfcapd started on boot. nfdump is installed the way nfsen is using it. nfsen does its own nfcapd configuration. If you want to run nfcapd without nfsen - which is not recommended for beginners - add all the nfcapd options you want to "DAEMON_ARGS". > > Sorry, bit lost. -- Erik Wenzel [email protected] ------------------------------------------------------------------------------ Special Offer-- Download ArcSight Logger for FREE (a $49 USD value)! Finally, a world-class log management solution at an even better price-free! Download using promo code Free_Logger_4_Dev2Dev. Offer expires February 28th, so secure your free ArcSight Logger TODAY! http://p.sf.net/sfu/arcsight-sfd2d _______________________________________________ Nfdump-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
