I never heard back from anyone on this - does anyone know if it is possible to get nfsen to generate graphs and statistics retroactively on flow data archives imported from nfdump (the data has already been successfully imported)?
Thanks! -- Robert Vineyard, CISSP, RHCE Senior Information Security Engineer Georgia Tech Office of Information Technology 404.385.6900 (office/cell) / 404.894.9548 (fax) On 5/7/2011 7:43 PM, Robert Vineyard wrote: > Tiberiu, > > Thanks for pointing me in the right direction. It looks as though after > moving the files into the correct place and running the command you > mentioned that nfsen is now aware of my imported data (this is reflected in > the web interface as well) as you can see in the output below. > > Now, how do I get nfsen to regenerate its pretty graphs against all this > newly-imported flow data? :-) > > [root@zuul ~]# /data/nfsen/bin/nfsen -r live > name live > group (nogroup) > tcreate Mon Apr 11 20:20:00 2011 > tstart Thu Apr 22 00:00:00 2010 > tend Sat May 7 19:30:00 2011 > updated Sat May 7 19:30:00 2011 > expire 395 days 0 hours > size 9.6 TB > maxsize 0 > type live > locked 0 > status OK > version 130 > channel campus2-rtr sign: + colour: #0000ff order: 1 sourcelist: > campus2-rtr Files: 109061 Size: 10607110901760 > > -- > Robert Vineyard, CISSP, RHCE > Senior Information Security Engineer > Georgia Tech Office of Information Technology > 404.385.6900 (office/cell) / 404.894.9548 (fax) > > > On 4/14/2011 3:47 AM, Tiberiu Vicol wrote: >> >> From here http://code.google.com/p/installnfsen/wiki/InstallNetFlowWithNfSen >> >> >> ¨Integration of Existing Data >> >> If you have existing netflow data, it can be added to the new nfsen >> installation by following steps 1. go to the profile directory (normally it >> is $NFSEN/profiles-data/live) 2. copy all the existing data to the folder or >> make sym link to the existing data 3. use command: a. >> /usr/local/nfsen/bin/nfsen –r live 4. The live profile is now setup with the >> existing data. You can always check it using a. /usr/local/nfsen/bin/nfsen >> –l live¨ >> >> Hope this helps ! >> >> Regards, >> Tibi >> >> >>> Date: Wed, 13 Apr 2011 08:57:46 -0400 >>> From: robert.viney...@oit.gatech.edu >>> To: nfsen-discuss@lists.sourceforge.net >>> Subject: [Nfsen-discuss] importing pre-nfsen data from nfdump >>> >>> I have been running nfdump for about a year and recently decided to give >>> nfsen a try. I've been fairly pleased with it so far, however I could not >>> figure out a way to attach nfsen to my existing nfdump/nfcapd infrastructure >>> (nfsen seems to want to manage those processes itself, so I eventually gave >>> in and let it do so) so I am looking for a way of importing my old nfdump >>> data into nfsen. >>> >>> I have about a year's worth of flows in nfdump 1.6.x format that I'd like to >>> somehow bring into nfsen so that I can use the graphs, plugins, and >>> analytics features. Is there a straightforward way to accomplish this? >>> >>> Thanks! >>> >>> -- >>> Robert Vineyard, CISSP, RHCE, Security+ >>> Senior Information Security Engineer >>> 404-385-6900 (office/cell) >>> 404-894-9548 (fax) >>> >>> ------------------------------------------------------------------------------ >>> Forrester Wave Report - Recovery time is now measured in hours and minutes >>> not days. Key insights are discussed in the 2010 Forrester Wave Report as >>> part of an in-depth evaluation of disaster recovery service providers. >>> Forrester found the best-in-class provider in terms of services and vision. >>> Read this report now! http://p.sf.net/sfu/ibm-webcastpromo >>> _______________________________________________ >>> Nfsen-discuss mailing list >>> Nfsen-discuss@lists.sourceforge.net >>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > > ------------------------------------------------------------------------------ > WhatsUp Gold - Download Free Network Management Software > The most intuitive, comprehensive, and cost-effective network > management toolset available today. Delivers lowest initial > acquisition cost and overall TCO of any competing solution. > http://p.sf.net/sfu/whatsupgold-sd > _______________________________________________ > Nfsen-discuss mailing list > Nfsen-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss ------------------------------------------------------------------------------ What Every C/C++ and Fortran developer Should Know! Read this article and learn how Intel has extended the reach of its next-generation tools to help Windows* and Linux* C/C++ and Fortran developers boost performance applications - including clusters. http://p.sf.net/sfu/intel-dev2devmay _______________________________________________ Nfsen-discuss mailing list Nfsen-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
