I was able to get conf.php installed after fixing my setlogsock options, but
that doesn't explain the errors I'm getting when accessing nfsen.php.
ERROR: nfsend connect() error: No such file or directory! ERROR: nfsend -
connection failed!! ERROR: Can not initialize globals!What file is it
looking for that it can't find? What connection is failing, nfsend is
running.
Also, I am still unsure as to why nfsend is running; yet is not listening on
the UDP source ports specified.
On 8/10/07, Peter Haag <[EMAIL PROTECTED]> wrote:
>
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
>
>
> - --On August 10, 2007 1:17:59 PM -0700 Eric Cables <[EMAIL PROTECTED]>
> wrote:
>
> | After getting sockets enabled in PHP, and fixing a number of other
> problems,
> | I finally got an output from nfsen.php in my browser, and it's identical
> to
> | what Kevin is reporting:
> |
> | ERROR: nfsend connect() error: No such file or directory! ERROR: nfsend
> -
> | connection failed!! ERROR: Can not initialize globals!nfsend is running
>
> while installing, a config file config.php is automatically created in you
> HTML
> directory, where all other NfSen php files are store. This file contains
> the path
> of the comm socket required for PHP. If PHP does not see that file apache
> may be
> chroot'ed or so ... But in any case the file is there.
>
>
> | (albeit none of the UDP ports are actually listening, as verified by
> | netstat), and I don't see any additional log information to troubleshoot
> | further. This is an fresh install of 1.3b, I cleared everything from
> the
> | 1.2.4 directory structure out before installing, and this is what I'm
> | seeing.
> |
> | Any tips?
> |
> | On 8/10/07, Kevin Cruse <[EMAIL PROTECTED]> wrote:
> | >
> | > I just upgraded from nfdump 1.5.2 and nfsen1.2.4 to
> | > nfdumpsnapshot-20070808 and nfsen1.3b-20070719
> | >
> | > after i updated (without any errors), when i connect to the webpage
> | > http://server/nfsen/nfsen.php
> | >
> | > I get the following errors:
> | >
> | > ERROR: nfsend connect() error: No such file or directory!
> | > ERROR: nfsend - connection failed!!
> | > ERROR: Can not initialize globals!
> | >
> | > it seems like the upgrade completely broke my perfectly working 1.2.4
> | > install
> | >
> | > any ideas?
> | >
> | > Im a total newbie at linux and nfdump/nfsen, sorry for all the
> questions!
> | >
> | > thanks
> | >
> | > kevin
> | >
> | >
> | >
> | >
> | >
> | > ----- Original Message ----
> | > From: Peter Haag <[EMAIL PROTECTED]>
> | > To: Eric Cables <[EMAIL PROTECTED]>
> | > Cc: nfsen-discuss@lists.sourceforge.net
> | > Sent: Friday, August 10, 2007 4:55:14 AM
> | > Subject: Re: [Nfsen-discuss] Upgrading NFSEN
> | >
> | > -----BEGIN PGP SIGNED MESSAGE-----
> | > Hash: SHA1
> | >
> | > Eric,
> | > The new snapshot 20070808 on sourceforge compiles on Solaris. Please
> use
> | > that one.
> | >
> | > - Peter
> | >
> | > - --On August 9, 2007 11:39:29 -0700 Eric Cables <[EMAIL PROTECTED]>
> | > wrote:
> | >
> | > | I'm doing the same, but ran into compilation problems w/ the latest
> | > | snapshot:
> | > |
> | > | Configure options:
> | > | ./configure --enable-nfprofile --with-rrdpath=/usr/local
> | > |
> | > | Error:
> | > | gcc -g -O2 -Wall -Wstrict-prototypes -Wmissing-prototypes
> | > | -Wmissing-declarations -Wmissing-noreturn -o nfcapd nfcapd.o
> | > | nffile.onf_common.o
> | > | util.o flist.o panonymizer.o rijndael.o fts_compat.o
> nfnet.onetflow_v9.o
> | > | netflow_v5_v7.o launch.o bookkeeper.o expire.o nfstatfile.o-L
> /usr/local/lib
> | > | Undefined first referenced
> | > | symbol in file
> | > | bind nfnet.o
> | > | listen nfnet.o
> | > | sendto nfcapd.o
> | > | socket nfnet.o
> | > | setsockopt nfnet.o
> | > | getsockopt nfnet.o
> | > | connect nfnet.o
> | > | getaddrinfo nfnet.o
> | > | recvfrom nfcapd.o
> | > | freeaddrinfo nfnet.o
> | > | inet_ntop nf_common.o
> | > | gai_strerror nfnet.o
> | > | ld: fatal: Symbol referencing errors. No output written to nfcapd
> | > | collect2: ld returned 1 exit status
> | > | *** Error code 1
> | > | make: Fatal error: Command failed for target `nfcapd'
> | > |
> | > | On 8/9/07, Peter Haag <[EMAIL PROTECTED]> wrote:
> | > | >
> | > | > -----BEGIN PGP SIGNED MESSAGE-----
> | > | > Hash: SHA1
> | > | >
> | > | > Use latest nfdump snapshot.
> | > | >
> | > | > - Peter
> | > | >
> | > | >
> | > | > - --On August 9, 2007 7:55:28 -0700 Kevin Cruse <[EMAIL PROTECTED]
> >
> | > wrote:
> | > | >
> | > | > | Hello all,
> | > | > |
> | > | > | quick question. I currently have nfdum 1.5.2 and nfsen
> 1.2.4installed.
> | > | > I would
> | > | > | like to upgrade nfsen to
> | > | > | nfsen-1.3b-20070720.tar.gz(obtained from sourceforge),
> documentation
> | > on
> | > | > | sourceforge says i need to update nfdump
> | > | > to 'stable'
> | > | > | 1.6. The problem is....i can't find 1.6 anywhere. Does anyone
> know
> | > if
> | > | > this is
> | > | > | really required and or know where i can download a copy. Thanks.
> | > | > |
> | > | > | Kevin
> | > | > |
> | > | > | ----- Original Message ----
> | > | > | From: Peter Haag <[EMAIL PROTECTED]>
> | > | > | To: Jon Spinney <[EMAIL PROTECTED]>
> | > | > | Cc: nfsen-discuss@lists.sourceforge.net
> | > | > | Sent: Thursday, August 9, 2007 4:47:23 AM
> | > | > | Subject: Re: [Nfsen-discuss] Issues with website
> | > | > |
> | > | > | -----BEGIN PGP SIGNED MESSAGE-----
> | > | > | Hash: SHA1
> | > | > |
> | > | > |
> | > | > |
> | > | > | - --On August 8, 2007 20:59:46 -0400 Jon Spinney <
> | > | > [EMAIL PROTECTED]> wrote:
> | > | > |
> | > | > | | I am running nfdump version 1.5.2 and nfsen version 1.2.4
> . I
> | > tried
> | > | > more
> | > | > | | recent versions, but ran into website problems as well. As
> far as
> | > the
> | > | > | | syslog file goes, I'm not sure what file you are referring
> | > to. There
> | > | > didn't
> | > | > | | seem to be any log files under data/nfsen and I could not find
> any
> | > | > relevant
> | > | > | | syslog files any where else.
> | > | > |
> | > | > | In nfsen.conf, there is a syslog config option:
> | > | > |
> | > | > | $syslog_facility = 'local3';
> | > | > |
> | > | > | You need to configure syslogd, to log all those messages in a
> file.
> | > | > Check this file.
> | > | > |
> | > | > | Anyway - for 1.2.4 I assume your web server uid is not allowed
> to
> | > run
> | > | > the nfsen
> | > | > | command, which results in a failure like this. Make sure the uid
> of
> | > the
> | > | > web server
> | > | > | can run 'nfsen'.
> | > | > |
> | > | > | - Peter
> | > | > |
> | > | > | |
> | > | > | | Jon
> | > | > | |
> | > | > | | On 8/8/07, Peter Haag <[EMAIL PROTECTED]> wrote:
> | > | > | | >
> | > | > | | > -----BEGIN PGP SIGNED MESSAGE-----
> | > | > | | > Hash: SHA1
> | > | > | | >
> | > | > | | > Jon,
> | > | > | | > Which version are you using? What does your syslog log file
> say?
> | > | > | | >
> | > | > | | > - Peter
> | > | > | | >
> | > | > | | > - --On August 7, 2007 16:21:49 -0400 Jon Spinney <
> | > | > | | > [EMAIL PROTECTED]> wrote:
> | > | > | | >
> | > | > | | > | Hi all
> | > | > | | > |
> | > | > | | > | I am having some issues with the nfsen web. I'm not
> sure
> | > if
> | > | > I'm
> | > | > | | > missing
> | > | > | | > | something or what. When I load the website, it shows me
> all
> | > the
> | > | > graphs
> | > | > | | > and
> | > | > | | > | the systems that I want monitored with their associated
> | > colors,
> | > | > and the
> | > | > | | > | graphs update. For some reason the profiles drop down box
> is
> | > not
> | > | > | | > working.
> | > | > | | > | Next to 'Selected profile:', it says <No Profiles
> | > Available>. If
> | > | > I drop
> | > | > | | > it
> | > | > | | > | down, there is not option to add one. I thought it was a
> | > Firefox
> | > | > issue,
> | > | > | | > but
> | > | > | | > | when I tried it on IE, I got the same thing. On my box, I
> | > browsed
> | > | > to
> | > | > | | > | data/nfsen/profiles and there is a live directory with all
> of
> | > my
> | > | > | | > systems.
> | > | > | | > | Any ideas would be appreciated.
> | > | > | | > |
> | > | > | | > | Jon
> | > | > | | >
> | > | > | | >
> | > | > | | >
> | > | > | | > - --
> | > | > | | > _______ SWITCH - The Swiss Education and Research Network
> ______
> | > | > | | > Peter Haag, Security Engineer, Member of SWITCH CERT
> | > | > | | > PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC
> 5D
> | > D7
> | > | > | | > SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich,
> Switzerland
> | > | > | | > E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
> | > | > | | > -----BEGIN PGP SIGNATURE-----
> | > | > | | > Version: GnuPG v1.4.3 (Darwin)
> | > | > | | >
> | > | > | | >
> iQCVAwUBRrlnc/5AbZRALNr/AQJpsQP+PsdwEciOhcNcoDE4BEC6R/19TRNjIh20
> | > | > | | >
> Xx6vfDVKSGyXqbPKax76DpAtXS/U/PX3rFI6rn8jPpY6S5j4LQCyESrsTQgsHFLl
> | > | > | | >
> 8S+qm/PHny9NwKCCsMBWmEa+9xTcCTGhi3nTCZbugaSqhxjvJ48ISupTZCaMhoWv
> | > | > | | > ucaCHx12yaI=
> | > | > | | > =ATeg
> | > | > | | > -----END PGP SIGNATURE-----
> | > | > | | >
> | > | > | | >
> | > | > |
> | > | > |
> | > | > |
> | > | > | - --
> | > | > | _______ SWITCH - The Swiss Education and Research Network ______
> | > | > | Peter Haag, Security Engineer, Member of SWITCH CERT
> | > | > | PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D
> D7
> | > | > | SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
> | > | > | E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
> | > | > | -----BEGIN PGP SIGNATURE-----
> | > | > | Version: GnuPG v1.4.3 (Darwin)
> | > | > |
> | > | > | iQCVAwUBRrrUoP5AbZRALNr/AQLlaQP+JwfyhIK97LkEckDJaOq9R6duRfE8REqg
> | > | > | UVrKULD8K+1+DbR4jUJ2AKrXrgdPHbfiiCMH/DDjiTqe8vaQ/sw1uAtc+eOzSCtm
> | > | > | hJZFhTcz9Fzq7DgNlJpom9fjuaaucfxp0r+PbNkD8/YnBB4HTc9peZfkXYEefCZ2
> | > | > | c4D9Xm8s1eQ=
> | > | > | =yN2S
> | > | > | -----END PGP SIGNATURE-----
> | > | > |
> | > | > |
> | > | > |
> | > | >
> | >
> -------------------------------------------------------------------------
> | > | > | This SF.net email is sponsored by: Splunk Inc.
> | > | > | Still grepping through log files to find problems? Stop.
> | > | > | Now Search log events and configuration files using AJAX and a
> | > browser.
> | > | > | Download your FREE copy of Splunk now >> http://get.splunk.com/
> | > | > | _______________________________________________
> | > | > | Nfsen-discuss mailing list
> | > | > | Nfsen-discuss@lists.sourceforge.net
> | > | > | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> | > | > |
> | > | > |
> | > | > |
> | > | > |
> | > | > |
> | > | > |
> | > | > |
> | > | >
> | >
> _________________________________________________________________________________
> | > | > ___
> | > | > | Pinpoint customers who are looking for what you sell.
> | > | > | http://searchmarketing.yahoo.com/
> | > | > |
> | > | > |
> | > | >
> | >
> -------------------------------------------------------------------------
> | > | > | This SF.net email is sponsored by: Splunk Inc.
> | > | > | Still grepping through log files to find problems? Stop.
> | > | > | Now Search log events and configuration files using AJAX and a
> | > browser.
> | > | > | Download your FREE copy of Splunk now >> http://get.splunk.com/
> | > | > | _______________________________________________
> | > | > | Nfsen-discuss mailing list
> | > | > | Nfsen-discuss@lists.sourceforge.net
> | > | > | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> | > | >
> | > | >
> | > | >
> | > | > - --
> | > | > _______ SWITCH - The Swiss Education and Research Network ______
> | > | > Peter Haag, Security Engineer, Member of SWITCH CERT
> | > | > PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
> | > | > SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
> | > | > E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
> | > | > -----BEGIN PGP SIGNATURE-----
> | > | > Version: GnuPG v1.4.3 (Darwin)
> | > | >
> | > | > iQCVAwUBRrssQP5AbZRALNr/AQLFCAP+OvX65z8wnHZZHJ3NkUHr1wniekOPtGsj
> | > | > 3fSIQ+ifyi0f2WFiLrizaUcLeVV2cGmTvryAdJbeJxWAWXi1zfVH9jSuGX1sXlXu
> | > | > WhgZHdol+Bm2LiE/yqqpvlGzawp2M5E6wknkGBUrVAgCXhqr9HzZo3kV34y4MSkE
> | > | > cQtlElPfFVE=
> | > | > =jcGC
> | > | > -----END PGP SIGNATURE-----
> | > | >
> | > | >
> | > | >
> | >
> -------------------------------------------------------------------------
> | > | > This SF.net email is sponsored by: Splunk Inc.
> | > | > Still grepping through log files to find problems? Stop.
> | > | > Now Search log events and configuration files using AJAX and a
> | > browser.
> | > | > Download your FREE copy of Splunk now >> http://get.splunk.com/
> | > | > _______________________________________________
> | > | > Nfsen-discuss mailing list
> | > | > Nfsen-discuss@lists.sourceforge.net
> | > | > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> | > | >
> | > |
> | > |
> | > |
> | > | --
> | > | Eric Cables
> | >
> | >
> | >
> | > - --
> | > _______ SWITCH - The Swiss Education and Research Network ______
> | > Peter Haag, Security Engineer, Member of SWITCH CERT
> | > PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
> | > SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
> | > E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
> | > -----BEGIN PGP SIGNATURE-----
> | > Version: GnuPG v1.4.3 (Darwin)
> | >
> | > iQCVAwUBRrwn+P5AbZRALNr/AQKFXQP/cMffGlx1zBSuAivi2xIzs7e05v9We9OH
> | > W9bJWgLW3SkyIH//4JWbfwrB3fwX9+G1fX9xqkV5Y8GXcILVW0N7QXFHvZUpM7lk
> | > /irpqN4xa/xfxChk81KtUTA1Bpztepglum/VKkXvZSoq97HiOC680VjBnCAj+98N
> | > 6MtYDaL/KE8=
> | > =Lxhw
> | > -----END PGP SIGNATURE-----
> | >
> | >
> | >
> -------------------------------------------------------------------------
> | > This SF.net email is sponsored by: Splunk Inc.
> | > Still grepping through log files to find problems? Stop.
> | > Now Search log events and configuration files using AJAX and a
> browser.
> | > Download your FREE copy of Splunk now >> http://get.splunk.com/
> | > _______________________________________________
> | > Nfsen-discuss mailing list
> | > Nfsen-discuss@lists.sourceforge.net
> | > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> | >
> | >
> | >
> | >
> | >
> | >
> | >
> ____________________________________________________________________________________
> | > Park yourself in front of a world of choices in alternative vehicles.
> | > Visit the Yahoo! Auto Green Center.
> | > http://autos.yahoo.com/green_center/
> | >
> |
> |
> |
> | --
> | Eric Cables
>
>
>
> - --
> _______ SWITCH - The Swiss Education and Research Network ______
> Peter Haag, Security Engineer, Member of SWITCH CERT
> PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
> SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
> E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v1.4.5 (Darwin)
>
> iQCVAwUBRrzYrv5AbZRALNr/AQLSwQQAiS7tCfM/p9f7uuxf5FOAerygnU7XzS4B
> a6sKzt6Yiipq8BdkEKflPvkC8rWGnPzCFeYITLeU2Lhvp7f+hNO0ftPKH/Pluhzl
> /VQubRKOi3FXZrNbbKfvGNvqRa++RN3Bg0t9LlEd3fHMSnWhGBO8tiutGOqPumbg
> hkwOHuRlFX0=
> =eCha
> -----END PGP SIGNATURE-----
>
>
--
Eric Cables
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
