On 5/19/11 15:29, Robert Vineyard wrote:
> I never heard back from anyone on this - does anyone know if it is possible
> to get nfsen to generate graphs and statistics retroactively on flow data
> archives imported from nfdump (the data has already been successfully
> imported)?
NfSen has a tiny simulator built-in. Look at the bottom of nfsen.conf. If you
have
properly placed your pre-collected data, let the simulation run - this also
builds the
graphs.
- Peter
>
> Thanks!
>
> --
> Robert Vineyard, CISSP, RHCE
> Senior Information Security Engineer
> Georgia Tech Office of Information Technology
> 404.385.6900 (office/cell) / 404.894.9548 (fax)
>
> On 5/7/2011 7:43 PM, Robert Vineyard wrote:
>> Tiberiu,
>>
>> Thanks for pointing me in the right direction. It looks as though after
>> moving the files into the correct place and running the command you
>> mentioned that nfsen is now aware of my imported data (this is reflected in
>> the web interface as well) as you can see in the output below.
>>
>> Now, how do I get nfsen to regenerate its pretty graphs against all this
>> newly-imported flow data? :-)
>>
>> [root@zuul ~]# /data/nfsen/bin/nfsen -r live
>> name live
>> group (nogroup)
>> tcreate Mon Apr 11 20:20:00 2011
>> tstart Thu Apr 22 00:00:00 2010
>> tend Sat May 7 19:30:00 2011
>> updated Sat May 7 19:30:00 2011
>> expire 395 days 0 hours
>> size 9.6 TB
>> maxsize 0
>> type live
>> locked 0
>> status OK
>> version 130
>> channel campus2-rtr sign: + colour: #0000ff order: 1 sourcelist:
>> campus2-rtr Files: 109061 Size: 10607110901760
>>
>> --
>> Robert Vineyard, CISSP, RHCE
>> Senior Information Security Engineer
>> Georgia Tech Office of Information Technology
>> 404.385.6900 (office/cell) / 404.894.9548 (fax)
>>
>>
>> On 4/14/2011 3:47 AM, Tiberiu Vicol wrote:
>>>
>>> From here http://code.google.com/p/installnfsen/wiki/InstallNetFlowWithNfSen
>>>
>>>
>>> ¨Integration of Existing Data
>>>
>>> If you have existing netflow data, it can be added to the new nfsen
>>> installation by following steps 1. go to the profile directory (normally it
>>> is $NFSEN/profiles-data/live) 2. copy all the existing data to the folder or
>>> make sym link to the existing data 3. use command: a.
>>> /usr/local/nfsen/bin/nfsen –r live 4. The live profile is now setup with the
>>> existing data. You can always check it using a. /usr/local/nfsen/bin/nfsen
>>> –l live¨
>>>
>>> Hope this helps !
>>>
>>> Regards,
>>> Tibi
>>>
>>>
>>>> Date: Wed, 13 Apr 2011 08:57:46 -0400
>>>> From: robert.viney...@oit.gatech.edu
>>>> To: nfsen-discuss@lists.sourceforge.net
>>>> Subject: [Nfsen-discuss] importing pre-nfsen data from nfdump
>>>>
>>>> I have been running nfdump for about a year and recently decided to give
>>>> nfsen a try. I've been fairly pleased with it so far, however I could not
>>>> figure out a way to attach nfsen to my existing nfdump/nfcapd
>>>> infrastructure
>>>> (nfsen seems to want to manage those processes itself, so I eventually gave
>>>> in and let it do so) so I am looking for a way of importing my old nfdump
>>>> data into nfsen.
>>>>
>>>> I have about a year's worth of flows in nfdump 1.6.x format that I'd like
>>>> to
>>>> somehow bring into nfsen so that I can use the graphs, plugins, and
>>>> analytics features. Is there a straightforward way to accomplish this?
>>>>
>>>> Thanks!
>>>>
>>>> --
>>>> Robert Vineyard, CISSP, RHCE, Security+
>>>> Senior Information Security Engineer
>>>> 404-385-6900 (office/cell)
>>>> 404-894-9548 (fax)
>>>>
>>>> ------------------------------------------------------------------------------
>>>> Forrester Wave Report - Recovery time is now measured in hours and minutes
>>>> not days. Key insights are discussed in the 2010 Forrester Wave Report as
>>>> part of an in-depth evaluation of disaster recovery service providers.
>>>> Forrester found the best-in-class provider in terms of services and vision.
>>>> Read this report now! http://p.sf.net/sfu/ibm-webcastpromo
>>>> _______________________________________________
>>>> Nfsen-discuss mailing list
>>>> Nfsen-discuss@lists.sourceforge.net
>>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>> ------------------------------------------------------------------------------
>> WhatsUp Gold - Download Free Network Management Software
>> The most intuitive, comprehensive, and cost-effective network
>> management toolset available today. Delivers lowest initial
>> acquisition cost and overall TCO of any competing solution.
>> http://p.sf.net/sfu/whatsupgold-sd
>> _______________________________________________
>> Nfsen-discuss mailing list
>> Nfsen-discuss@lists.sourceforge.net
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
