-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
- --On November 5, 2007 17:01:44 -0500 Shane Gaumond <[EMAIL PROTECTED]> wrote:
| Wanted to say that nfsen/nfdump handled the time change without
| incident...I'm just curious as to how it did that? If we rolled back 1
| hour i would think that we would double collect for that hour..I'm
| guessing that the nfsen process probably overwrote the existing files
| for that time period. Another question is how will it react when we
| switch the time forward?
Well - it's not that seamless, as it looks like.
nfdump indeed overwrites the files so the first hour 0200 - 0300 disappears.
But NfSen collects the graph data for the first hour from 0200-0300, the second
will
not be accepted, as RRD does not allow time earlier inputs as the last entry.
So you loose data, and data and graph are not synchronous during the daylight
saving
time shift.
And last but not least, there is a small and nasty bug in nfdump, which selects
incorrect files created during the daylight saving period, but looking at them
outside daylight saving. This bug shows up when using -M .. -r and having
subdirs
activated.
As I'm out of the office, I will send the bugfix tomorrow to the list, for those
seeing a strange behaviour for queries in time slices before the last weekend.
So, nfdump keeps track of the time change, but may possibly overwrite the files.
- Peter
|
| FYI: Cacti did not handle the time change as well.
|
| Shane Gaumond
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by: Splunk Inc.
| Still grepping through log files to find problems? Stop.
| Now Search log events and configuration files using AJAX and a browser.
| Download your FREE copy of Splunk now >> http://get.splunk.com/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRzBDnP5AbZRALNr/AQJhHAQAhVyzlJGSmIbLb/HcTy8dv4eXfyx3uf70
xYAOdirub91JhZsv6fcUJ+HTcI/ccLruxJ88+jrWuY4kJ3GQMDdv32emO6knPubO
YjERUGSNClRaDYmDgvSmg15ZfOO2HsKUNd6ELgFYLXflQ040ZzR51IpFc3qTaQp0
efTJLtQ8rXg=
=iO6+
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Splunk Inc.
Still grepping through log files to find problems? Stop.
Now Search log events and configuration files using AJAX and a browser.
Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
