-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


Jose Bogarin Solano wrote:
| Werner Schram wrote:
|> Jose Bogarin Solano wrote:
|>> Jose Bogarin Solano wrote:
|>>
|>>> Peter Haag wrote:
|>>>
|>>>> Jose Bogarin Solano wrote:
|>>>> | Peter Haag wrote:
|>>>> |> Hi Jose,
|>>>> |> Most likely this is a problem with nfprofile and how it is liked
|>>>> with
|>>>> |> librrd.
|>>>> |> Make sure nfprofile works on the command line ( no link error ) and
|>>>> |> that the perl module for RRD works properly.
|>>>> |>
|>>>> |>     - Peter
|>>>> |>
|>>>> |
|>>>> | Peter and Lance,
|>>>> |
|>>>> | I've been checking this but haven't got it to work.
|>>>> |
|>>>> | I checked the nfprofile and it's ok.
|>>>> |
|>>>> | When I do a ./nfsen -l TCP i get
|>>>> |
|>>>> |
|>>>> | ERR Channel info file missing for channel '182' in 'TCP'
|>>>>
|>>>> This channel error message is harmless and will disappear as soon
|>>>> as you set either a max size or a lifetime value.
|>>>> However, the profile information should be printed in any case.
|>>>>
|>>>>
|>>> Thanks Peter.
|>>>
|>>> I'm back to zero again, then, I'll run some more tests to see if I
|>>> can determine the cause of the issue.
|>>>
|>> Is there a way to debug nfsen other than configuring debug info on
|>> the nfsen.conf file.
|>>
|>> I have that in place but it is not as deep debugging as I will like.
|>> I'm still fighting with this issue and haven't figure out where the
|>> problem can be.
|>>
|>> Thanks
|>>
|> Hi Jose,
|>
|> It think the cause of your problem lies in the naming of your channel.
|> If I do:
|>
|> nfdump -Z "ident 182"
|>
|> the result is:
|>
|> line 1: syntax error at '182'
|>
|> And because nfprofile uses the same parser, it bails out silently
|> during the profiler phase.
|>
|> I walked into a similar problem some time ago with channels called
|> 'in' and 'out'. According to grammar.y, 'ident' should be followed by
|> a string, but '182' is recognized as an integer. Values like 'in',
|> 'out' and 'tcp' are considered filter primitives. And both integers
|> and filter primitives are not considered strings. My quick and dirty
|> solution was simply renaming the channels, but maybe this issue
|> requires some more attention? Note that NfDump 1.5.6 and before did
|> accept filter primitives as valid values for the ident field (I don't
|> know if it handles integers).
|
| Werner,
|
| That made the trick. That was a weird error/bug/feature.
| I reconfigure my nfsen.conf to complete names, including letters,
| deleted old profiles and created new ones, and everything is working as
| it is supposed to.
|

Well - I need to check, how to prevent these errors. That's indeed a bit ugly.
Thanks for all the input and sorry for the trouble.

        - Peter

| Thanks a lot for everybody's comments and help.
|
| Great community around a marvelous software.
|
| Regards,
|
| - Jose
|
|> - Werner
|>>
|>>> Jose
|>>>
|>>>
|>>>
|>>>>     - Peter
|>>>> |
|>>>> | Will research even more.
|>>>> |
|>>>> | Thanks,
|>>>> |
|>>>> |> Jose Bogarin Solano wrote:
|>>>> |> | Hi all,
|>>>> |> |
|>>>> |> | I have nfdump/nfsen running with 6 sources. Live profile is
|>>>> running ok,
|>>>> |> | however the continous profiles that I configure on nfsen
|>>>> interface are
|>>>> |> | not working correctly, they are not getting filled by the live
|>>>> profile
|>>>> |> | information. They are completely empty.
|>>>> |> |
|>>>> |> | This is my software information.
|>>>> |> |
|>>>> |> | nfdump: Version: 1.5.7
|>>>> |> | nfsen: 1.3
|>>>> |> |
|>>>> |> | With --nfprofile enabled.
|>>>> |> |
|>>>> |> | and example of one of my Profiles is:
|>>>> |> |
|>>>> |> | #
|>>>> |> | name = Port80
|>>>> |> | group = .
|>>>> |> | tbegin = 1212732000
|>>>> |> | tcreate = 1212776783
|>>>> |> | tstart = 1213221233
|>>>> |> | tend = 1214007900
|>>>> |> | updated = 1214007900
|>>>> |> | expire = 0
|>>>> |> | maxsize = 0
|>>>> |> | size = 0
|>>>> |> | type = 2
|>>>> |> | locked = 0
|>>>> |> | status = OK
|>>>> |> | version = 130
|>>>> |> | channel = 7200:+:#0000ff:3:7200
|>>>> |> | channel = 185:+:#ff0000:2:185
|>>>> |> | channel = 183:+:#00ff00:1:183
|>>>> |> |
|>>>> |> |
|>>>> |> |
|>>>> |> | and the info for the live profile is:
|>>>> |> |
|>>>> |> | name = live
|>>>> |> | group = .
|>>>> |> | tbegin = 1212715800
|>>>> |> | tcreate = 1212715800
|>>>> |> | tstart = 1212892500
|>>>> |> | tend = 1214007900
|>>>> |> | updated = 1214007900
|>>>> |> | expire = 336
|>>>> |> | maxsize = 0
|>>>> |> | size = 10066419712
|>>>> |> | type = 0
|>>>> |> | locked = 0
|>>>> |> | status = OK
|>>>> |> | version = 130
|>>>> |> | channel = willawaw:+:#64FF45:4:willawaw
|>>>> |> | channel = 7200:+:#0000ff:1:7200
|>>>> |> | channel = tarmonter:+:#FFFF60:5:tarmonter
|>>>> |> | channel = 185:+:#ff0000:2:185
|>>>> |> | channel = jaguaro:+:#3D2BFF:6:jaguaro
|>>>> |> | channel = 183:+:#00ff00:3:183
|>>>> |> |
|>>>> |> |
|>>>> |> | Any ideas what can I do to get this up and running?
|>>>> |> |
|>>>> |> | thanks,
|>>>> |> |
|>>>> |> | Jose Bogarín
|>>>> |> |
|>>>> |> |
|>>>> |>
|>>>> -------------------------------------------------------------------------
|>>>>
|>>>> |> | Check out the new SourceForge.net Marketplace.
|>>>> |> | It's the best place to buy or sell services for
|>>>> |> | just about anything Open Source.
|>>>> |> | http://sourceforge.net/services/buy/index.php
|>>>> |> | _______________________________________________
|>>>> |> | Nfsen-discuss mailing list
|>>>> |> | [email protected]
|>>>> |> | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|>>>> |>
|>>>> |
|>>>> |
|>>>> |
|>>>> -------------------------------------------------------------------------
|>>>>
|>>>> | Check out the new SourceForge.net Marketplace.
|>>>> | It's the best place to buy or sell services for
|>>>> | just about anything Open Source.
|>>>> | http://sourceforge.net/services/buy/index.php
|>>>> | _______________________________________________
|>>>> | Nfsen-discuss mailing list
|>>>> | [email protected]
|>>>> | https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|>>>>
|>>>>
|>>> -------------------------------------------------------------------------
|>>>
|>>> Check out the new SourceForge.net Marketplace.
|>>> It's the best place to buy or sell services for
|>>> just about anything Open Source.
|>>> http://sourceforge.net/services/buy/index.php
|>>> _______________________________________________
|>>> Nfsen-discuss mailing list
|>>> [email protected]
|>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|>>>
|>>
|>> -------------------------------------------------------------------------
|>>
|>> Check out the new SourceForge.net Marketplace.
|>> It's the best place to buy or sell services for
|>> just about anything Open Source.
|>> http://sourceforge.net/services/buy/index.php
|>> _______________________________________________
|>> Nfsen-discuss mailing list
|>> [email protected]
|>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
|>>
|
|
| -------------------------------------------------------------------------
| Check out the new SourceForge.net Marketplace.
| It's the best place to buy or sell services for
| just about anything Open Source.
| http://sourceforge.net/services/buy/index.php
| _______________________________________________
| Nfsen-discuss mailing list
| [email protected]
| https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)

iQCVAwUBSGUI7v5AbZRALNr/AQLk2QP/cD85MG4dYH0WNHkyOSAH8LUJ942pxu0D
4FM948eTZGzSFuLun3GgqssfAikKBAN5CyIvEmyh3XwNCj3LtB7nzmh84dXLSXyW
+7E1JSKytQIdjYZsBYA6KgIUWgVSU/SCWsB+G6CanZU2lEC/Y8LfjlOyTIJJVKsP
sCCQjHg+AEM=
=qPoH
-----END PGP SIGNATURE-----

-------------------------------------------------------------------------
Check out the new SourceForge.net Marketplace.
It's the best place to buy or sell services for
just about anything Open Source.
http://sourceforge.net/services/buy/index.php
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to