-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Matt,
Latest NfSen snapshot on sourceforge supports adding/deleting new netflow
sources to profile live.
If you do not want to upgrade for any reason have a look into the file
etc/nfsen-shell-param.
There is a line SOURCES, which list each source:port which is needed for nfcapd
startup. This should do the job.
- Peter
- -------- Original Message --------
From: "Matt McBride" <[EMAIL PROTECTED]>
To: [email protected]
Subject: [Nfsen-discuss] Adding additional sources
Date: Mon Oct 02 2006 17:28:36 GMT+0200 (CEST)
> Hello Peter,
>
> I am trying to add an addition Netflow source to my existing
> nfsen/nfdump deployment. I have followed your recommendations listed
> below:
>
> " There is an ugly work around - but no warranty whatsoever. Do it at
> your own risk:
> 1. Be sure, that you really want to do this.
> 2. Accept, that all graphic data in your graphs get lost. Graph will
> be rebuilt only
> from data existing in your data directory.
> 3. Add the new source in nfsen.conf
> 4. Stop NfSen.
> 5. remove all rrd files in profile live directory.
> 6. Re-run ./install.pl /your/nfsen.conf
> 7. Start NfSen.
> 6. Run ./nfsen -r live"
>
> I even took it a few steps further. I actually blew away all
> directories (BASE DIR and HTML DIR) and backed up existing raw netflow
> data to a different file system. When I run ./install.pl
> /your/nfsen.conf it actually creates the directories and files for the
> newly added source. Permissions are set up correctly. I import my
> existing nfcapd data back into their directories and rebuild the
> profile with ./nfsen -r live. But, when I run nfsen.rc start, a
> process for nfcapd for the new source is not started. Nfcapd is only
> collecting for the same sources and is not collecting for the newly
> added source. Am I missing something?
>
> Thanks,
>
> -Matt
>
> -------------------------------------------------------------------------
> Take Surveys. Earn Cash. Influence the Future of IT
> Join SourceForge.net's Techsay panel and you'll get the chance to share your
> opinions on IT & business topics through brief surveys -- and earn cash
> http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/security
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRSH9Rf5AbZRALNr/AQIwLQP/R4WL+FIvLs5fp5wFyQ2LMrH1qAV2xdVQ
h5NYMkQS42Dm2e5T6uY615zjP7GYVdyG7xp3powykfunahBIhJ9UT0YDlPf7ihbv
whBhCWXxEBpMEv2rXyLPGpbRpy7aIfF/IB/Pm2j4C5nLAC0Sf2k/kYHwJLV7/swQ
Q9Y80cJ40DQ=
=M9I/
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys -- and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
