----- Forwarded Message ---- From: jay alvarez <[EMAIL PROTECTED]> To: Joe Loiacono <[EMAIL PROTECTED]> Sent: Monday, January 8, 2007 10:10:00 AM Subject: Flowviewer does the same like flowscan/CUflow?? (Re: No graphs created after flow-capturing a month)
Hi, I've been recommended to use Flowviewer twice now. Does anyone here have a good experience with Flowviewer? Does it do the same thing like that of Flowscan with CUflow module? I mean processing each flow and extracting wanted informations using the flowscan modules and then storing it in rrds in every five minute? I can't seem to find the flowviewer mailing list, is there any? Is there any chance that I may not experience that "illegal attempt to update time" error? I'm downloading flowviewer now at the rate of 1.7K/s... why such a slow rate? Thanks. -jay ----- Original Message ---- From: Joe Loiacono <[EMAIL PROTECTED]> To: jay alvarez <[EMAIL PROTECTED]> Sent: Thursday, January 4, 2007 7:41:05 PM Subject: Re: [Flow-tools] No graphs created after flow-capturing a month of flows (Illegal attempt to update using time) Hi Jay, >Don't know if it addresses your requirements, but you might also consider the FlowTracker component of FlowViewer for keeping long >term netflow graphs. It collects data and builds the graphs every 5 minutes, in a manner similar to how MRTG works, but using >user-filtered netflow data. FlowGrapher would permit you to 're-create' graphs from December, albeit for shorter time-periods. > There's some screenshots at: >http://ensight.eos.nasa.gov/FlowViewer >Joe jay alvarez <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 01/03/2007 06:04 PM To [email protected] cc Subject [Flow-tools] No graphs created after flow-capturing a month of flows (Illegal attempt to update using time) Hi, I hope you can help me on this on. We badly needed the traffic graphs from our netflows as we are using it for billing our customers. I'm using flow-capture to capture a whole month of flows. My setup is the one described here: http://www.dynamicnetworks.us/netflow/5-configure-flow-tools.html I have a directory full of around 9000 five minute-flows. It represents a whole month (Dec2006) of netflows collected. I decided not to run flowscan before and just let the directory grow up until 1 month has passed. Then when I run flowscan yesterday trying to graph the whole month of December, to my surprise, most flows if not all, that it is processing gives an error in the logs that looks like this: ERROR updating /var/rrd/pi-cbu-g002/service_ms-netbios_dst.rrd: illegal attempt to update using time 1166113200 when last update time is 1167813900 (minimum one second step) Does this mean all those log files are unusable anymore? I've seen some users in google search having the same problem with their rrds as well however there's not much information given as to why this is happening.. I hope you can explain all of these once and for all.. =) Would you kindly explain or at least point me somewhere I can learn about this error message and how to fix it. As far as i can understand, that error above says it cannot add the new data into the rrd because it sees that the timestamp when the rrd was last updated was newer than the one I am trying to add.. Why is this happening? Can you further explain the process of storing the flows into the rrds. Is it because those created symlinks to those flows which I am feeding the flowscan right now has a new timestamp which doesn't correspond to the date of creation of the flows they are pointing to? If there's any fix to this, please let me know and I'm willing to bang my head against the wall just to produce the graphs we needed. :-( Right now, flowscan is still processing until Dec15 but when I launch my CUGrapher.pl, not an inch of graphs is seen.. =( I hope you can help me. Thank you very much Sincerely, jay __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com
_______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
