-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On May 24, 2007 12:41:22 +0300 Ehab Fahmi <[EMAIL PROTECTED]> wrote:
| hello all,
|
| im having problems with graphs not showing at all, but the raw files are
| generatated correctly and i can read them with nfdump -r
|
| i have nfsen 1.2.4 , nfdump 1.5.2 rrdtools 1.2.23.
|
| SunOS netflow 5.10 Generic_118822-20 sun4u sparc SUNW,UltraAX-i2
|
| in the stats page i also get :
| Size: 0 B
|
| even though flows are incoming
|
| -rwxrwxrwx 1 netflow www 6255972 May 24 12:20 nfcapd.200705241215
| -rwxrwxrwx 1 netflow www 6140532 May 24 12:25 nfcapd.200705241220
| -rw-r--r-- 1 netflow www 6015732 May 24 12:30 nfcapd.200705241225
| -rw-r--r-- 1 netflow www 5875320 May 24 12:34 nfcapd.current.19526
|
| are the perms there correct ?
These look good. but check also those in the profile directory.
What does your log file say?
- Peter
|
| also on the details page
| Statistics timeslot May 24 2007 - 00:25
| Source: Flows: Packets: Traffic:
| all: tcp: udp: icmp: other: all: tcp: udp: icmp: other:
| access No Data available!
|
| when i come to do netflow processing to list the first 100 flows with Any
| as a filter the flows are correctly showed "details page"
|
| /usr/local/bin/nfdump -r
| /spare/nfsen/profiles/live/access/nfcapd.200705240025 -o extended -m -c
| 100 -a 'Any'
|
| Date flow start Duration Proto Src IP Addr:Port Dst
| IP Addr:Port Flags Tos Packets Bytes pps bps Bpp Flows
| 2007-05-24 00:28:07.695 206.313 TCP x.x.x.x:2119 -> x.x.x.x:80
| .A.... 0 443 18260 2 708 41 3
| 2007-05-24 00:28:08.659 175.792 TCP x.x.x.x:2317 -> x.x.x.x:80
| .AP.S. 0 12 4463 0 203 371 2
|
| did anyone pass by this problem before , what am i missing ?
|
| Cheers,
| Ehab Fahmi (Systems Security Engineer)
| Eccsolutions
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by DB2 Express
| Download DB2 Express C - the FREE version of DB2 express and take
| control of your XML. No limits. Just data. Click to get it now.
| http://sourceforge.net/powerbar/db2/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRlWF4P5AbZRALNr/AQI2rgP/dGxr1s/Zz9iV+/rS1BESDFz9WqiUHtGx
3m6v7tjUtdASHz6Kk/U7Ng1aZ8ah9cilghTTU1PA7q7ybNNoFDNbCYivtLqWB7oF
BImnNPVZxEdoWsqNU3VV8QB2IvcVFxSbToIJ4qhxkbLuuBGXLDzCGa7IVAHtSOqz
gbbFWr6NTps=
=pDUQ
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
