Hi Robert,
Thanks for the feedback. Yes - I understand your point. As nfsen is due for a
next bug fix release, I will integrate
that, to rebuild profiles from pre-collected data. I need another week or two,
as I'm pretty busy at the moment.
Thanks
- Peter
On 5/21/11 3:06, Robert Vineyard wrote:
> On 5/19/2011 10:31 AM, Peter Haag wrote:
>> NfSen has a tiny simulator built-in. Look at the bottom of nfsen.conf. If
>> you have
>> properly placed your pre-collected data, let the simulation run - this also
>> builds the
>> graphs.
>
> Peter,
>
> I have just now had a chance to look at the nfsen.conf file as you
> recommended, and I'm not sure that I follow all of the steps I'm supposed to
> perform.
>
> It sounds like I need to create a separate instance of nfsen (can I just
> make a copy of the relevant directory hierarchy from my current install?) in
> which to run the simulation, with the data and configuration inserted into
> the live profile locations. I'm fairly confident I can do this, but
> unfortunately I do not have the disk space available to make a copy of the
> data - it's over 12TB and I only have about 9TB free on my flow collector.
> Would moving or symlinking the data temporarily work for this purpose?
>
> Ideally I need to find a way to do this without having to stop the live flow
> collection on my production nfsen installation. If this is possible, what
> would I need to do after the simulation completes in order to merge the
> freshly-graphed archive flow data back into my existing live profile?
>
> Thank you for your help with this, I think that nfsen could be a lot more
> useful for us if we can find a workable solution for graphing our imported
> nfdump flow data without impacting real-time collection :-)
>
> --
> Robert Vineyard, CISSP, RHCE
> Senior Information Security Engineer
> Georgia Tech Office of Information Technology
> 404.385.6900 (office/cell) / 404.894.9548 (fax)
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
--
Be nice to your netflow data
------------------------------------------------------------------------------
vRanger cuts backup time in half-while increasing security.
With the market-leading solution for virtual backup and recovery,
you get blazing-fast, flexible, and affordable data protection.
Download your free trial now.
http://p.sf.net/sfu/quest-d2dcopy1
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
