-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Find appended the patch for nfdump-1.5.6 correcting the daylight saving bug. It's required if you work with data created during daylight saving time.
- Peter
- --On November 6, 2007 11:36:04 +0100 Peter Haag <[EMAIL PROTECTED]>
wrote:
| -----BEGIN PGP SIGNED MESSAGE-----
| Hash: SHA1
|
|
|
| - --On November 5, 2007 17:01:44 -0500 Shane Gaumond
| <[EMAIL PROTECTED]> wrote:
|
| | Wanted to say that nfsen/nfdump handled the time change without
| | incident...I'm just curious as to how it did that? If we rolled back 1
| | hour i would think that we would double collect for that hour..I'm
| | guessing that the nfsen process probably overwrote the existing files
| | for that time period. Another question is how will it react when we
| | switch the time forward?
|
| Well - it's not that seamless, as it looks like.
| nfdump indeed overwrites the files so the first hour 0200 - 0300
| disappears. But NfSen collects the graph data for the first hour from
| 0200-0300, the second will not be accepted, as RRD does not allow time
| earlier inputs as the last entry.
|
| So you loose data, and data and graph are not synchronous during the
| daylight saving time shift.
|
| And last but not least, there is a small and nasty bug in nfdump, which
| selects incorrect files created during the daylight saving period, but
| looking at them outside daylight saving. This bug shows up when using -M
| .. -r and having subdirs activated.
|
| As I'm out of the office, I will send the bugfix tomorrow to the list,
| for those seeing a strange behaviour for queries in time slices before
| the last weekend.
|
| So, nfdump keeps track of the time change, but may possibly overwrite the
| files.
|
| - Peter
|
|
| |
| | FYI: Cacti did not handle the time change as well.
| |
| | Shane Gaumond
| |
| |
| | -----------------------------------------------------------------------
| | -- This SF.net email is sponsored by: Splunk Inc.
| | Still grepping through log files to find problems? Stop.
| | Now Search log events and configuration files using AJAX and a browser.
| | Download your FREE copy of Splunk now >> http://get.splunk.com/
| | _______________________________________________
| | Nfsen-discuss mailing list
| | [email protected]
| | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|
|
|
| - --
| _______ SWITCH - The Swiss Education and Research Network ______
| Peter Haag, Security Engineer, Member of SWITCH CERT
| PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
| SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
| E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
| -----BEGIN PGP SIGNATURE-----
| Version: GnuPG v1.4.3 (Darwin)
|
| iQCVAwUBRzBDnP5AbZRALNr/AQJhHAQAhVyzlJGSmIbLb/HcTy8dv4eXfyx3uf70
| xYAOdirub91JhZsv6fcUJ+HTcI/ccLruxJ88+jrWuY4kJ3GQMDdv32emO6knPubO
| YjERUGSNClRaDYmDgvSmg15ZfOO2HsKUNd6ELgFYLXflQ040ZzR51IpFc3qTaQp0
| efTJLtQ8rXg=
| =iO6+
| -----END PGP SIGNATURE-----
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by: Splunk Inc.
| Still grepping through log files to find problems? Stop.
| Now Search log events and configuration files using AJAX and a browser.
| Download your FREE copy of Splunk now >> http://get.splunk.com/
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)
iQCVAwUBRzGK1f5AbZRALNr/AQI8SgP/eJInFUVpKaGCTjUDUaOcm7wI+VD7c03d
bRo7zUtLnthTPc3V5ZXYhiV8umHdnulF9IUyyHpkiCBCB7EzikBFq0kWy/CKXdtn
tAQkMAePdYmn1p8GALXqhDUc7BfJ4gJfU0e9mGL0u398HxlcqR65xDN5T3HAMrCO
9BNZbh2+HJQ=
=yd7H
-----END PGP SIGNATURE-----
--- util.c.orig Mon Oct 15 08:34:23 2007
+++ util.c Thu Nov 1 15:07:04 2007
@@ -301,6 +301,7 @@
static char timestring[16];
when = localtime(&t);
+ when->tm_isdst = -1;
snprintf(timestring, 15, "%i%02i%02i%02i%02i",
when->tm_year + 1900, when->tm_mon + 1, when->tm_mday,
when->tm_hour, when->tm_min);
timestring[15] = '\0';
@@ -320,6 +321,7 @@
when.tm_sec = 0;
when.tm_wday = 0;
when.tm_yday = 0;
+ when.tm_isdst = -1;
if ( strlen(timestring) != 12 ) {
LogError( "Wrong time format '%s'\n", timestring);
pgpPPYhhjC43W.pgp
Description: PGP signature
------------------------------------------------------------------------- This SF.net email is sponsored by: Splunk Inc. Still grepping through log files to find problems? Stop. Now Search log events and configuration files using AJAX and a browser. Download your FREE copy of Splunk now >> http://get.splunk.com/
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
