-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hola Chelo,
It seems as the background daemon is not running. Your profile is in status
rebuild,
which is fine after rebuilding. After the first cycle of the background daemon,
it changes to status OK and updates all gifs and the size of the profile. So
make sure
You have an nfsen-run process in your process table. Otherwise you may start it
from
commend line as root.
- Peter
- --On March 13, 2007 13:36:19 +0100 Chelo Malagon <[EMAIL PROTECTED]> wrote:
| Hola,
| I am having a problem with nfsen. Due to a machine crash I had to
| reinstall my nfsen in other machine with the same characteristics. I had
| my flow data saved in the filer so, once I reinstalled the machine (with
| the same nfsen/nfdump version I had in the machine that crashed: nfsen
| 1.2.4/nfdump 1.5) I followed the instructions in the README file to add
| my existing netflow data to the new installation (nfsen -r live basically).
| I had no errors in the logs files, and nfdump seems to work ok because I
| get new nfcapd file for each of my sources, but I don't get new gif
| files, and the gif files in the live directory have the same date than
| when the machine crash (5th of March). The rrd files seems to be
| creating correctly.
|
| [EMAIL PROTECTED] live]# ls -la /data/nfsen/profiles/live/
| total 108664
| drwxrwxr-x 35 apache apache 8192 Mar 13 12:54 .
| drwxrwxr-x 4 apache apache 4096 Feb 16 14:04 ..
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Badajoz0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Barcelona0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Bilbao0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Bilbao1
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 CiudadReal0
| -rw-r--r-- 1 apache apache 69695 Mar 5 11:20 flows-day.gif
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_icmp.rrd
| -rw-r--r-- 1 apache apache 102315 Mar 5 11:20 flows-month.gif
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_other.rrd
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows.rrd
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_tcp.rrd
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_udp.rrd
| -rw-r--r-- 1 apache apache 96403 Mar 5 11:20 flows-week.gif
| -rw-r--r-- 1 apache apache 68659 Mar 5 11:20 flows-year.gif
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS2
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS4
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS5
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 LasPalmas1
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid1
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid3
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid4
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Murcia0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Murcia1
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Oviedo0
| drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Oviedo1
| -rw-r--r-- 1 apache apache 63187 Mar 5 11:20 packets-day.gif
| -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 packets_icmp.rrd
| -rw-r--r-- 1 apache apache 94345 Mar 5 11:20 packets-month.gif
| [........]
|
| Because of that the web interface is a picture of what I got before the
| crash with information only till the 5th of March (everything except
| the details page where I get an empty graph and shows correct dates).
|
| If I do a nfse -l live I get this:
| #
| # Profile live.
| #
| name live
| tstart Fri Feb 9 00:30:00 2007
| tend Tue Mar 13 12:45:00 2007
| updated Fri Feb 9 00:25:00 2007
| filter <none>
| expire 29 days 0 hours
| size 0
| maxsize 370.0 GB
| sources
|
Badajoz0:Barcelona0:Bilbao0:Bilbao1:CiudadReal0:IRIS2:IRIS4:IRIS5:LasPalmas1:Madrid0:Madrid1:Madr
|
id3:Madrid4:Murcia0:Murcia1:Oviedo0:Oviedo1:Palma1:Pamplona0:Pamplona1:Rediris1:Rioja1:Santander0
|
:Santander1:Santiago0:Sevilla0:Tenerife1:Valencia0:Valencia1:Valladolid0:Valladolid1:Zaragoza0:Za
| ragoza1 type live
| locked 0
| status rebuild
|
| which is quite strange because the size of the profile is 0 when I have
| 29 days of netflow data from 34 sources in our backbone.
|
| I am using a Red Hat Enterprise Linux ES release 4 (Nahant Update 4).
|
| The only difference between the new and the old machine is the version
| of the rrdtool. I am using now rrdtool-devel-1.2.18-1.el4.rf and
| rrdtool-1.2.18-1.el4.rf (in the old machine I had
| rrdtool-1.2.13-1.el4.test and rrdtool-devel-1.2.13-1.el4.test)
| PHP version is 4.3.9-3.22.3
|
|
| Any idea or suggestion are more than welcome?
|
| Cheers,
| chelo
|
|
| --
| "Se puede admitir la fuerza bruta, pero la razón bruta es insoportable.".
| Oscar Wilde
|
|
|
| -------------------------------------------------------------------------
| Take Surveys. Earn Cash. Influence the Future of IT
| Join SourceForge.net's Techsay panel and you'll get the chance to share your
| opinions on IT & business topics through brief surveys-and earn cash
| http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRfaeK/5AbZRALNr/AQJuXgQAjY8yh18MpHepbjGQV49LaKKv5ENkZ+g9
QYzBQ9Mnb6uu7KVIhQqQYM8LWr8uq56lSHaDCO+Rs2oCUrg9YSdbcjEdWjt5pZ7J
TnYb45DrsXj7yYBq7NRLMl4AcE4gNrD+Xnu6G0IeH8QRDuoGgJbtW9B5F11N7/5J
iXvGbLfpKr0=
=AG52
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
Take Surveys. Earn Cash. Influence the Future of IT
Join SourceForge.net's Techsay panel and you'll get the chance to share your
opinions on IT & business topics through brief surveys-and earn cash
http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
