There is nothing at all in the var/tmp/ directory where the logfile should be.
I followed the guidelines for building the latest snapshot when I built it. I will try again later today and see what happens. Thx steve -----Original Message----- From: Peter Haag [mailto:[EMAIL PROTECTED] Sent: Tuesday, May 22, 2007 8:24 AM To: Stephen W. Bradley; 'nfsen-discuss ML' Subject: Re: [Nfsen-discuss] Question about Profiles -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - --On May 22, 2007 7:42:45 -0400 "Stephen W. Bradley" <[EMAIL PROTECTED]> wrote: | I switched from having all my streams coming into a single port (2055) to | having 8 devices come in on 8 different ports (2055-2062). | | | | The live profile works just fine but when I add a new profile nothing ever | shows up in the graph and if I click on process it just errors out and says | it cannot find any of the pcap files for any time range for all 8 devices. What does you log file say? Looks like you do not have correct nfprofile. Assuming nfsen-snapshot-20070312, you *must* upgrade to nfdump-snapshot-20070312 and run configure with argument --enable-nfprofile. Otherwise nfprofile is not built and an old nfprofile may remain in place, which can not build new-style profiles. - Peter | | | | My filter is just a vanilla proto tcp and port 80. This all worked before I | switched. The directory structure is okay but there are no pcap files in | any of the directories of the new profile. | | | | | | I'm sure it's me but I don't know what I'm doing wrong. | | | | Any ideas? | | | | | | Thanks | | Steve | | | | | | Stephen W. Bradley GCIH CISSP | | Network Security Specialist | | Miami University | | Information Security Office | | 513-529-8129 | | [EMAIL PROTECTED] | | | | "Those who would give up essential liberty to purchase a little temporary | safety deserve neither liberty nor safety." | | Benjamin Franklin, Historical Review of Pennsylvania, 1759 | | | - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iQCVAwUBRlLg1f5AbZRALNr/AQJi6wP/Wj0H3/vvf8j8PUSpI0DDqvAVKT0SWsQH njHx+0t+irjs2ilSwFyhTjW6uFov8P7ZLkL2l6mbPErovQVF6s8kxUmXXq6f9Eby b3zNlnW7sKZyMrfaz8fajy2rqiunx2WymxH+WUESVqNRne1Q1ACbzDKTTkwUdbko NloTch4znKs= =iCeQ -----END PGP SIGNATURE----- ------------------------------------------------------------------------- This SF.net email is sponsored by DB2 Express Download DB2 Express C - the FREE version of DB2 express and take control of your XML. No limits. Just data. Click to get it now. http://sourceforge.net/powerbar/db2/ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
