Heya guys, I'm having an oddd issue with nfSen, for background this is a FreeBSD 6.1 machine with dual 2.6Ghz Xeon w/ HTT, 2Gb of RAM, receiving about 1.5kflows/s. nfSen is running through Apache 2.2 and PHP5.2, perl is at 5.8.8. Both nfSen and nfDump are running on the latest snapshots off of SourceForge.
I have nfSen set up and it's receiving data into the live profile absolutly fine, it's graphing and I can dig through the results wounderfully. The problem I'm having is when I try to generate different profiles with filters. If I generate a profile from the console as root (which is then dropped to www I believe), the profile is created successfully and historical data is successfully shown on graphs. Command I'm using is: nfsen -a Networking -B 2006-11-16-08-50 'net 148.88.xxx.0/23' This generates all the correct flow files, updates the RRDs, etc. However, if I do the same through the webinterface, I get the following messages spat out into /var/log/messages. Nov 17 11:09:25 xxx nfsen[12374]: Failed to execute nfdump: No child processes Nov 17 11:09:25 xxx nfsen[12374]: nfdump command was: '/usr/local/bin/nfdump -r /usr/local/var/nfsen/profiles/live/xxx/2006/11/17/nfcapd.200611171050 -w /usr/local/var/nfsen/profiles/Networking/xxx/2006/11/17/nfcapd.200611171 050 -f /usr/local/var/nfsen/profiles/Networking/filter.txt' The odd thing is that nfdump is run, and the flows are created. The RRDs are not updated though. Looking at the code, on error of that command it's instructed to go to the next data file. If I remove the instruction to skip the file (as I know it exists and is fine), the RRDs are updated fine and all is good. For some reason when profileadmin.php instructs nfsend to create a profile, system() in NfProfile.pm always returns -1 for nfdump, even on success. Has anyone seen this before and have any clue how to fix it? Or is there any futher debugging to do, it feels permission related, but I'm not sure. I've tried giving the www user a legitimate home directory and shell, but that didn't help. Also my apologies if this email is badly formatted, I'm forced to use Outlook and I've kicked it as best I know how to be nice. Pete. Peter A. Wood e: [EMAIL PROTECTED] Network Security Specialist Technical Services Group Lancaster University ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys - and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
