-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On February 19, 2008 16:55:27 -0300 Varejante Solphins <[EMAIL PROTECTED]>
wrote:
| Hello,
|
| As documentation says, I trying to importing existing data flow to my new
| (first installation) nfsen. Unfortunately isn't working yet. I did the steps
| bellow.
In nfsen 1.3 you can not import flows from history. The relevant parts in the
documentation have been removed. This "feature"
was removed as most people destroyed their graphs in Nfsen-1.2.x , when
rebuilding a profiles at will.
The only option you have is to use pre-collected data in simulator mode. See
simulation in nfsen-conf.dist.
- Peter
|
| 1- The flows were converted from flow-capture format to nfdump format:
|
| ft2nfdump -r ft.-v05.2007-01-01.091501-0200 | nfdump -w
| nfcapd.v05.2007-01-01.093001-0200
|
| 2- The old flows were copied to the 'live' profile and after that
| reprocessed by nfsen .
|
| cp /old-flows/nfdump* ./nfsen/profiles-data/live/peer1/
| nfsen -r live
| nfsen -l live
|
| Ps. In this directory there are a structure where the nfdump
| automatically save the flows. Like
| ./nfsen/profiles-data/live/peer1/2008/02/19. Well, I don't know there the
| nfsen looks for the flows, so a copied the flows
| to both directories.
|
| The problem is that nfsen didn't see the old flows. I have tried to
| rename the flows with the same format used from nfcapd, but didn't work . I
| tried to create a new profile - historical type - but didn't work either .
| My question is: Why the netflow is not seeing my old flows ? Somebody have
| done it before, or have some tip ?
|
| Thanks
| John
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBR70w2v5AbZRALNr/AQJPzwP/d2Z4J995aBUKLfJlSypTtKY7m/nVruo0
1JifspXW7rlJAXHVqVsOD2qWDhu8W9Jkj14ioodKR9oGq6QuFb4ZmYRKtRnPODOh
Y396/xiePpKKFLI/p0Ggm4uBgNwPGeNWxMQZeNDq5MtL20AKAZ2yoN5ZFJdYbdzv
W10jMeD/n/4=
=QyX4
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
