-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Hi Matti,
There is no reason, why it should not work. You may check the log file to see
if the profiler worked correctly. If any
other profile works but this one, then you may check the filter. If no profile
at all works, then you may have a problem
with nfprofile. With no other information, it's difficult to tell.
- Peter
Matti Saarinen wrote:
| I'm wondering what's wrong with my continuous / shadow profile
| configuration (or perhaps my NfSen configuration). I created a
| continuous/shadow profile of the profile file. To the shadow profile I
| defined two channels both of which have different filtes. Everything
| else seems to be fine but the RRD files of the shadow profile aren't
| being updated. What may be causing this?
|
| nfsen-host# /data/nfsen/bin/nfsen -l funet-in-out
| # Traffic to and from Funet
| name funet-in-out
| group (nogroup)
| tcreate Mon May 26 08:45:51 2008
| tstart Mon May 26 08:40:00 2008
| tend Tue May 27 15:20:00 2008
| updated Tue May 27 15:20:00 2008
| expire 0 hours
| size 0
| maxsize 0
| type continuous / shadow
| locked 0
| status OK
| version 130
| channel to-funet sign: + colour: #00FF33 order: 1 sourcelist:
rtr
| channel from-funet sign: - colour: #993399 order: 1 sourcelist:
rtr
|
|
| nfsen-host# ls -lt profiles-stat/funet-in-out
| total 5552
| -rw-rw-r-- 1 netflow www-data 314 May 27 15:25 profile.dat
| -rw-r--r-- 1 netflow www-data 22365 May 27 15:25 flows-day.png
| -rw-r--r-- 1 netflow www-data 22133 May 27 15:25 flows-month.png
| -rw-r--r-- 1 netflow www-data 23259 May 27 15:25 flows-week.png
| -rw-r--r-- 1 netflow www-data 19921 May 27 15:25 flows-year.png
| -rw-r--r-- 1 netflow www-data 22743 May 27 15:25 packets-day.png
| -rw-r--r-- 1 netflow www-data 22374 May 27 15:25 packets-month.png
| -rw-r--r-- 1 netflow www-data 23593 May 27 15:25 packets-week.png
| -rw-r--r-- 1 netflow www-data 20301 May 27 15:25 packets-year.png
| -rw-r--r-- 1 netflow www-data 21944 May 27 15:25 traffic-month.png
| -rw-r--r-- 1 netflow www-data 19810 May 27 15:25 traffic-year.png
| -rw-r--r-- 1 netflow www-data 22238 May 27 15:25 traffic-day.png
| -rw-r--r-- 1 netflow www-data 23104 May 27 15:25 traffic-week.png
| -rw-r--r-- 1 netflow www-data 9 May 27 15:21 from-funet-filter.txt
| -rw-r--r-- 1 netflow www-data 10 May 26 08:47 to-funet-filter.txt
| -rw-rw-r-- 1 netflow www-data 2687696 May 26 08:47 to-funet.rrd
| -rw-rw-r-- 1 netflow www-data 2687696 May 26 08:46 from-funet.rrd
|
|
| As it can be seen, the timestamps of the png files are quite recent but
| the timestamps of the rrd files refer to time when the profile was
| created. The filters should be ok, as I can see correct data if I apply
| the filters to nfdump reading the data from live profile.
|
| Have I just completely misunderstood how continuous / shadow profile
| works?
|
|
| Cheers,
|
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSDzwgv5AbZRALNr/AQJgtwP/eaNTAZhAMi8sq9tNGSn8PEiOlsBulxgQ
rBzum5NOqKnbQXZCzblDWhdlF5LKgoxsVPVa7G9e1zqd/f/IN9Xv4Rla2xytYW1w
m2qWqy47Jq8t5+6ljvgt1HBiX/bVcBfhT0f37LekaTPu3htW3rB6iGcKUzzFo1v9
uASO38cMqkQ=
=iNBg
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2008.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
