-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On February 12, 2007 15:28:49 +0100 [EMAIL PROTECTED] wrote:
| Hi,
|
| On Mon, Feb 12, 2007 at 04:04:52PM +0200, Adrian Popa wrote:
|
| > The same thing happened to me when the partition used by nfsen had
| > filled up. I had gaps, but by creating a bunch of files (a few hours
| > worth), nfsen almost started (but I ended up deleting the old
| > installation and installing it again). This happened with snapshot 20070110.
|
| I still have 169G free. :-) I tried again touching a file. After that I
| started "nfsen start" (which fails) and "nfsend". After that I'm now
| able to receive new flows again.
|
| > Wim, here's what you can try: do a ps -ef | grep nfsen and ps -ef | grep
| > nfcapd and see if you have any processes running. (you should have none
| > after stopping nfsen). If you have running processes, kill them and try
| > to start nfsen.
|
| I killed everything which involved nfdump/nfsen. Nothing showed up
| with ps and started nfsen and nfsend. The only issues I now see are
| messages through the web interface (which is extremely slow).
Can't read from socket means, you do not have an nfsen-comm process. What does
the log file say? You should see the startup of the comm server.
If the comm server is not running - you will not get anything in the interface.
You should also see the status of nfsen running
./nfsen status
- Peter
|
| Warning: socket_read() [function.socket-read]: unable to read from socket
| [104]: Connection reset by peer in /data/nfsen/www/nfsenutil.php on line 120
| Warning: Cannot modify header information - headers already sent by (output
started at
| /data/nfsen/www/nfsenutil.php:120) in /data/nfsen/www/nfsen.php on line 88
| Warning: socket_read() [function.socket-read]: unable to read from socket
| [104]: Connection reset by peer in /data/nfsen/www/nfsenutil.php on line 120
|
| WARNING: Reset to profile live!
| ERROR: nfsend socket_write() communication error: Broken pipe!
| ERROR: nfsend socket_read() communication error: Connection reset by peer!
| ERROR: nfsend socket_read() communication error: Connection reset by peer!
|
| Selected Profile now only shows "New Profile ..."
|
| The other weird part is when I go to details. Only broken pictures
| from the good old days.
|
| Warning: socket_read() [function.socket-read]: unable to read from socket
| [104]: Connection reset by peer in /data/nfsen/www/nfsenutil.php on line 120
| Warning: Cannot modify header information - headers already sent by (output
started at
| /data/nfsen/www/nfsenutil.php:120) in /data/nfsen/www/nfsen.php on line 88
|
| WARNING: Reset to profile live!
| ERROR: nfsend socket_read() communication error: Connection reset by peer!
|
| Start: Jan 01 1970 - 01:00
| End: Jan 01 1970 - 01:00
|
| tstart 1969-12-31-13-00
| tend 1969-12-31-13-00
|
| I'm guessing this probably has something to do with Debian (4.0). My other
| FreeBSD installs are working fine with snapshot-20070208 :-) The good news
| is that at this moment I'm at least able to capture the flows again.
|
| liberouter:/data/nfsen/profiles/live/SURFnet# nfdump -r nfcapd.200702121515
-c 3
| Date flow start Duration Proto Src IP Addr:Port Dst
| IP Addr:Port Packets Bytes Flows
| 2007-02-12 15:14:46.942 2.170 TCP 62.131.203.51:143 ->
192.87.109.x:2051 6
| 366 1 2007-02-12 15:14:46.953 2.167 TCP 62.131.203.51:143 ->
192.87.109.x:2052
| 7 475 1 2007-02-12 15:14:49.182 0.000 TCP
207.46.106.84:1863 ->
| 192.87.109.x:1926 1 44 1 Summary: total flows: 3, total
bytes: 885, total
| packets: 14, avg bps: 3160, avg pps: 6, avg bpp: 63 Time window: 2007-02-12
15:14:21 - 2007-02-12
| 15:17:51
| Total flows processed: 14675, skipped: 0, Bytes read: 840628
| Sys: 0.016s flows/second: 917187.5 Wall: 0.014s flows/second: 1024003.9
|
| Cheers,
|
| -Wim -/- SURFnet
|
| -------------------------------------------------------------------------
| Using Tomcat but need to do more? Need to support web services, security?
| Get stuff done quickly with pre-integrated technology to make your job easier.
| Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
| http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRdB/Xf5AbZRALNr/AQLrIwP+OR9RS2B5dmOH41ENB4qEx9xN4gJoDqwF
oyZh/bvvbGGnDbRsvn8s+O1yQjKLUZdva79kd6KOcYrdylYfyhvnrdiTcgib02Wj
m3gwWCTbcnupZeSwqkwHGNYQr4gz5sS6//806Rd4Z9VCgsJLw8+N0XEKHzGvelBe
fPCiRe8LVZs=
=bbtx
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Using Tomcat but need to do more? Need to support web services, security?
Get stuff done quickly with pre-integrated technology to make your job easier.
Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo
http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
