-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On May 24, 2007 15:37:49 -0300 Nicolas Macia <[EMAIL PROTECTED]> wrote:
| I have a similar situation with latest snapshot. My problem begin when i
| start to configure some of my sources (order and sign "+/-") and after 2
| days working ok, the same situation ocurrs.
|
| I noticed that when this happends, my live profile was locked. To force
| it to plot again i have to rebuild my live profile with "nfsen -r live".
What does your logfile say?
- Peter
|
| Now i do it all nights in a crontab job and it's seems to work ok
|
| Nicolas Macia
|
|
|
| Ehab Fahmi wrote:
| > hello all,
| >
| > im having problems with graphs not showing at all, but the raw files are
| > generatated correctly and i can read them with nfdump -r
| >
| > i have nfsen 1.2.4 , nfdump 1.5.2 rrdtools 1.2.23.
| >
| > SunOS netflow 5.10 Generic_118822-20 sun4u sparc SUNW,UltraAX-i2
| >
| > in the stats page i also get :
| > Size: 0 B
| >
| > even though flows are incoming
| >
| > -rwxrwxrwx 1 netflow www 6255972 May 24 12:20 nfcapd.200705241215
| > -rwxrwxrwx 1 netflow www 6140532 May 24 12:25 nfcapd.200705241220
| > -rw-r--r-- 1 netflow www 6015732 May 24 12:30 nfcapd.200705241225
| > -rw-r--r-- 1 netflow www 5875320 May 24 12:34 nfcapd.current.19526
| >
| > are the perms there correct ?
| >
| > also on the details page
| > Statistics timeslot May 24 2007 - 00:25
| > Source: Flows: Packets: Traffic:
| > all: tcp: udp: icmp: other: all: tcp: udp: icmp:
other:
| > access No Data available!
| >
| > when i come to do netflow processing to list the first 100 flows with Any
| > as a filter the flows are correctly showed "details page"
| >
| > /usr/local/bin/nfdump -r
| > /spare/nfsen/profiles/live/access/nfcapd.200705240025 -o extended -m -c
| > 100 -a 'Any'
| >
| > Date flow start Duration Proto Src IP Addr:Port Dst
| > IP Addr:Port Flags Tos Packets Bytes pps bps Bpp Flows
| > 2007-05-24 00:28:07.695 206.313 TCP x.x.x.x:2119 -> x.x.x.x:80
| > .A.... 0 443 18260 2 708 41 3
| > 2007-05-24 00:28:08.659 175.792 TCP x.x.x.x:2317 -> x.x.x.x:80
| > .AP.S. 0 12 4463 0 203 371 2
| >
| > did anyone pass by this problem before , what am i missing ?
| >
| > Cheers,
| > Ehab Fahmi (Systems Security Engineer)
| > Eccsolutions
| >
| >
| > -------------------------------------------------------------------------
| > This SF.net email is sponsored by DB2 Express
| > Download DB2 Express C - the FREE version of DB2 express and take
| > control of your XML. No limits. Just data. Click to get it now.
| > http://sourceforge.net/powerbar/db2/
| > _______________________________________________
| > Nfsen-discuss mailing list
| > [email protected]
| > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
| >
| >
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by DB2 Express
| Download DB2 Express C - the FREE version of DB2 express and take
| control of your XML. No limits. Just data. Click to get it now.
| http://sourceforge.net/powerbar/db2/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRlbpS/5AbZRALNr/AQLN/AP+NdYs866iXhE5+yueX1uRn1apLxCBxjIx
gLfKqAYFdAwRqdT0uVPmggSr2cB7DRsHKSjn9aHAtsAxR2Dvb/fYNcxVh3ZCEDNj
l4aIQWLbCVrT4SKaRm81MrZsZANvVkiNLmnQ+2vKQ+3TXO/NHk9ITX9sH+isj01v
Dyd7vXTPwh0=
=ZRGZ
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
