Hola Peter, I checked and nfsen was running (nfsen-run process) and it seems it took more than a cycle to updates all gifts and the size of profile. At 14:35 (spanish time) I had a message in the log saying "Mar 13 14:35:52 fraguelrock nfsen[30181]: Rebuild profile 'live' completed". The nfsen started at 12:33:45
Cheers and thank you Chelo Peter Haag wrote: > Hola Chelo, > It seems as the background daemon is not running. Your profile is in > status rebuild, > which is fine after rebuilding. After the first cycle of the > background daemon, > it changes to status OK and updates all gifs and the size of the > profile. So make sure > You have an nfsen-run process in your process table. Otherwise you may > start it from > commend line as root. > > - Peter > > --On March 13, 2007 13:36:19 +0100 Chelo Malagon > <[EMAIL PROTECTED]> wrote: > > | Hola, > | I am having a problem with nfsen. Due to a machine crash I had to > | reinstall my nfsen in other machine with the same characteristics. I had > | my flow data saved in the filer so, once I reinstalled the machine (with > | the same nfsen/nfdump version I had in the machine that crashed: nfsen > | 1.2.4/nfdump 1.5) I followed the instructions in the README file to add > | my existing netflow data to the new installation (nfsen -r live > basically). > | I had no errors in the logs files, and nfdump seems to work ok because I > | get new nfcapd file for each of my sources, but I don't get new gif > | files, and the gif files in the live directory have the same date than > | when the machine crash (5th of March). The rrd files seems to be > | creating correctly. > | > | [EMAIL PROTECTED] live]# ls -la /data/nfsen/profiles/live/ > | total 108664 > | drwxrwxr-x 35 apache apache 8192 Mar 13 12:54 . > | drwxrwxr-x 4 apache apache 4096 Feb 16 14:04 .. > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Badajoz0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Barcelona0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Bilbao0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Bilbao1 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 CiudadReal0 > | -rw-r--r-- 1 apache apache 69695 Mar 5 11:20 flows-day.gif > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_icmp.rrd > | -rw-r--r-- 1 apache apache 102315 Mar 5 11:20 flows-month.gif > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_other.rrd > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows.rrd > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_tcp.rrd > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 flows_udp.rrd > | -rw-r--r-- 1 apache apache 96403 Mar 5 11:20 flows-week.gif > | -rw-r--r-- 1 apache apache 68659 Mar 5 11:20 flows-year.gif > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS2 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS4 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 IRIS5 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 LasPalmas1 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid1 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid3 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Madrid4 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Murcia0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Murcia1 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Oviedo0 > | drwxrwxr-x 2 apache apache 643072 Mar 13 13:25 Oviedo1 > | -rw-r--r-- 1 apache apache 63187 Mar 5 11:20 packets-day.gif > | -rw-rw-r-- 1 apache apache 5911864 Mar 13 13:26 packets_icmp.rrd > | -rw-r--r-- 1 apache apache 94345 Mar 5 11:20 packets-month.gif > | [........] > | > | Because of that the web interface is a picture of what I got before the > | crash with information only till the 5th of March (everything except > | the details page where I get an empty graph and shows correct dates). > | > | If I do a nfse -l live I get this: > | # > | # Profile live. > | # > | name live > | tstart Fri Feb 9 00:30:00 2007 > | tend Tue Mar 13 12:45:00 2007 > | updated Fri Feb 9 00:25:00 2007 > | filter <none> > | expire 29 days 0 hours > | size 0 > | maxsize 370.0 GB > | sources > | > Badajoz0:Barcelona0:Bilbao0:Bilbao1:CiudadReal0:IRIS2:IRIS4:IRIS5:LasPalmas1:Madrid0:Madrid1:Madr > | > id3:Madrid4:Murcia0:Murcia1:Oviedo0:Oviedo1:Palma1:Pamplona0:Pamplona1:Rediris1:Rioja1:Santander0 > | > :Santander1:Santiago0:Sevilla0:Tenerife1:Valencia0:Valencia1:Valladolid0:Valladolid1:Zaragoza0:Za > | ragoza1 type live > | locked 0 > | status rebuild > | > | which is quite strange because the size of the profile is 0 when I have > | 29 days of netflow data from 34 sources in our backbone. > | > | I am using a Red Hat Enterprise Linux ES release 4 (Nahant Update 4). > | > | The only difference between the new and the old machine is the version > | of the rrdtool. I am using now rrdtool-devel-1.2.18-1.el4.rf and > | rrdtool-1.2.18-1.el4.rf (in the old machine I had > | rrdtool-1.2.13-1.el4.test and rrdtool-devel-1.2.13-1.el4.test) > | PHP version is 4.3.9-3.22.3 > | > | > | Any idea or suggestion are more than welcome? > | > | Cheers, > | chelo > | > | > | -- > | "Se puede admitir la fuerza bruta, pero la razón bruta es > insoportable.". > | Oscar Wilde > | > | > | > | > ------------------------------------------------------------------------- > | Take Surveys. Earn Cash. Influence the Future of IT > | Join SourceForge.net's Techsay panel and you'll get the chance to > share your > | opinions on IT & business topics through brief surveys-and earn cash > | > http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV > | _______________________________________________ > | Nfsen-discuss mailing list > | [email protected] > | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > > > ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss -- "Se puede admitir la fuerza bruta, pero la razón bruta es insoportable.". Oscar Wilde ------------------------------------------------------------------------- Take Surveys. Earn Cash. Influence the Future of IT Join SourceForge.net's Techsay panel and you'll get the chance to share your opinions on IT & business topics through brief surveys-and earn cash http://www.techsay.com/default.php?page=join.php&p=sourceforge&CID=DEVDEV _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
