Hola,
I am having a problem with nfsen. Due to a machine crash I had to
reinstall my nfsen in other machine with the same characteristics. I had
my flow data saved in the filer so, once I reinstalled the machine (with
the same nfsen/nfdump version I had in the machine that crashed:  nfsen
1.2.4/nfdump 1.5) I followed the instructions in the README file to add
my existing netflow data to the new installation (nfsen -r live basically).
I had no errors in the logs files, and nfdump seems to work ok because I
get new nfcapd file for each of my sources, but I don't get new gif
files, and the gif files in  the live directory have the same date than
when the machine crash (5th of March). The rrd files seems to be
creating correctly.

[EMAIL PROTECTED] live]# ls -la /data/nfsen/profiles/live/
total 108664
drwxrwxr-x  35 apache apache    8192 Mar 13 12:54 .
drwxrwxr-x   4 apache apache    4096 Feb 16 14:04 ..
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Badajoz0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Barcelona0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Bilbao0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Bilbao1
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 CiudadReal0
-rw-r--r--   1 apache apache   69695 Mar  5 11:20 flows-day.gif
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 flows_icmp.rrd
-rw-r--r--   1 apache apache  102315 Mar  5 11:20 flows-month.gif
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 flows_other.rrd
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 flows.rrd
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 flows_tcp.rrd
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 flows_udp.rrd
-rw-r--r--   1 apache apache   96403 Mar  5 11:20 flows-week.gif
-rw-r--r--   1 apache apache   68659 Mar  5 11:20 flows-year.gif
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 IRIS2
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 IRIS4
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 IRIS5
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 LasPalmas1
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Madrid0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Madrid1
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Madrid3
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Madrid4
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Murcia0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Murcia1
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Oviedo0
drwxrwxr-x   2 apache apache  643072 Mar 13 13:25 Oviedo1
-rw-r--r--   1 apache apache   63187 Mar  5 11:20 packets-day.gif
-rw-rw-r--   1 apache apache 5911864 Mar 13 13:26 packets_icmp.rrd
-rw-r--r--   1 apache apache   94345 Mar  5 11:20 packets-month.gif
[........]

Because of that the web interface is a picture of what I got before the
crash with information  only till  the 5th of March (everything except
the details page where I get an empty graph and shows correct dates).

If I do a nfse -l live I get this:
#
# Profile live.
#
name    live
tstart  Fri Feb  9 00:30:00 2007
tend    Tue Mar 13 12:45:00 2007
updated Fri Feb  9 00:25:00 2007
filter  <none>
expire  29 days 0 hours
size    0
maxsize 370.0 GB
sources
Badajoz0:Barcelona0:Bilbao0:Bilbao1:CiudadReal0:IRIS2:IRIS4:IRIS5:LasPalmas1:Madrid0:Madrid1:Madrid3:Madrid4:Murcia0:Murcia1:Oviedo0:Oviedo1:Palma1:Pamplona0:Pamplona1:Rediris1:Rioja1:Santander0:Santander1:Santiago0:Sevilla0:Tenerife1:Valencia0:Valencia1:Valladolid0:Valladolid1:Zaragoza0:Zaragoza1
type    live
locked  0
status  rebuild

which is quite strange because the size of the profile is 0 when I have
29 days of netflow data from 34 sources in our backbone.

I am using a Red Hat Enterprise Linux ES release 4 (Nahant Update 4).

The only difference between the new and the old machine is the version
of the rrdtool. I am using  now rrdtool-devel-1.2.18-1.el4.rf and
rrdtool-1.2.18-1.el4.rf (in the old machine I had
rrdtool-1.2.13-1.el4.test and rrdtool-devel-1.2.13-1.el4.test)
PHP version is 4.3.9-3.22.3


Any idea or suggestion are more than welcome?

Cheers,
chelo


-- 
"Se puede admitir la fuerza bruta, pero la razón bruta es insoportable.".
Oscar Wilde



-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to