> -----Original Message----- > From: Stan Gammons [mailto:sg063...@gmail.com] > > On Oct 10, 2014 12:48 PM, "Steven Surdock" <ssurd...@engineered-net.com> > wrote: > > > > > -----Original Message----- > > > From: Josh Grosse [mailto:j...@jggimi.homeip.net] > > > > > > On Fri, Oct 10, 2014 at 04:52:18PM +0000, Steven Surdock wrote: > > > > Anybody successfully using nfsen? > > > > > > > > It was working on 5.4 (except for the portTracker plugin) and now > > > > under 5.5 the rrd's are not being updated. I uninstalled and > > > > re-initialized and still no luck. > > > > > > > > -Steve S. > > > > > > > I've been using it since before 5.5, and it works fine for me. Two > > > considerations: > > > > > > If your webserver is chrooted, rrdtool must be included in the chroot, > per > > > /usr/local/share/doc/pkg-readmes/rrdtool-*. The rrdtool-chroot script > > > makes this easy. > > > > > > Your pflow(4) device must use a version of netflow protocol compatible > > > with nfcapd, which are versions 1,5,7, and 9. The pflow driver > supports > > > protocol versions 5 and 10. Use 5, which is the default. > > > > Not chrooted. Flow records are being updated and stored correctly. The > RRD and associated PNGs aren't being updated. I can still use the rrd > generated images to look at flows. I've never gotten PortTracker working > as it says it segfault in the log. > > > Does syslog have a message saying "unable to create graph: no such file or > directory? That's what is happening for me on the Oct 3 snapshot of > OpenBSD 5.6 I figured it was operator malfunction :)
I have only one source (OBSD 5.5). 'messages' shows only information shorty after starting nfsen. I can't gracefully stop nfsen as it just hangs when I try to do so. /var/log/daemon: Oct 10 15:00:12 builder02 nfcapd[27716]: Ident: 'wall' Flows: 1966, Packets: 14157, Bytes: 8823380, Sequence Errors: 0, Bad Packets: 0 Oct 10 15:00:12 builder02 nfcapd[27716]: Total ignored packets: 0 Oct 10 15:05:11 builder02 nfcapd[27716]: Ident: 'wall' Flows: 2540, Packets: 6518, Bytes: 1422175, Sequence Errors: 0, Bad Packets: 0 Oct 10 15:05:11 builder02 nfcapd[27716]: Total ignored packets: 0 /var/log/messages: Oct 10 11:19:57 builder02 nfsen[20794]: Behind schedule Oct 10 11:19:57 builder02 nfsen[20794]: expected exit of child Comm Server[1931]. Process died. Oct 10 11:20:10 builder02 nfsen[8882]: Error reading channel stat information. Missing key 'first'
