Re: [Nfsen-discuss] Trouble creating profiles

2014-03-26 Thread Peter Haag
On 03/07/2014 04:27 AM, kiko wrote: Hi Peter , I had the same issue. Finally, I got access to a box with the same problem. I will report back as soon, as I have more information. - Peter And I notice something different with your example. In

[Nfsen-discuss] Shadow Profiles not getting updated

2014-03-26 Thread Christian Kildau
Dear nfsen users, I am currently setting up our first nfsen installation on debian wheezy. The live profile is working fine, I am receiving netflow data from our routers (c6500/SUP720 and ASR9k) and graphs are filling up / processing and filtering works. What does not work is an additional

Re: [Nfsen-discuss] Defining alert if exceeds x number of flows

2014-03-26 Thread Patrick Lessard
Hello Chris, I did what you suggested, but the alert never triggers. I put a low value of 10. I see some dstIP with higher than 10 flows, but it doesn’t work. Any idea? Pat The information in this message, including in all attachments, is confidential or privileged. In the event you have

Re: [Nfsen-discuss] Defining alert if exceeds x number of flows

2014-03-26 Thread Patrick Lessard
Ok it’s working now, I had to change the default filter from “not any” to “proto udp” Now I’m getting this error when it tried to send an email Mar 26 11:25:00 netflow01 nfcapd[22729]: Ident: 'RouterA' Flows: 12355, Packets: 70331, Bytes: 5203913, Sequence Errors: 0, Bad Packets: 0 Mar 26

Re: [Nfsen-discuss] nfsen FHS'd on Debian Jessie

2014-03-26 Thread Alfredo Sola
The problem is, software with compile time options is completely unsuitable for that packaging. For nfsen to work, that package must be built with nfprofile. To prevent trouble (and because I run several different instances on the same server and I use nginx with php-fpm instead of

[Nfsen-discuss] NfSen not profiling history

2014-03-26 Thread Peter Haag
Hi all, Find appended a patch, which fixes the problem for not profiling the history data correctly. The bug is triggered, when setting ZIPprofile to 1 in nfsen.conf. A new NfSen release, which fixes some more issues, especially Perl compatibility, will be released soon. Thanks Wim for your