Hi,
On 09.09.2008 16:36, Steve Foley wrote:
> Sep 8 23:40:15 anfmon <13>Sep 8 23:40:15 nfsen[5319]: nfsend: exit
> child[18392] Exit: 0, Signal: 9, Core: 0
> Sep 8 23:40:15 anfmon <9>Sep 8 23:40:15 nfsen[5319]: nfprofile failed:
> Sep 8 23:40:15 anfmon <13>Sep 8 23:40:15 nfsen[5319]: System was: /
> opt/netflow/bin/nfprofile -I -t 1220916900 -p /opt/netflow/profiles-
> data -P /opt/netflow/profiles-stat -S 5 -M /opt/netflow/profiles-data/
> live/kuband -r nfcapd.200809082335
NfSen spawns an nfprofile process. According to your logs this child process
was
terminated by a 'kill -9'.
What happens, if you execute the command line stated in the logs directly in a
terminal:
--- snip ---
/opt/netflow/bin/nfprofile -I -t 1220916900 -p /opt/netflow/profiles- data -P
/opt/netflow/profiles-stat -S 5 -M /opt/netflow/profiles-data/live/kuband -r
nfcapd.200809082335
--- snap ---
?
> I saw a post about filters causing similar problems, but the channel
> filters (no filtering on the profile) I have tried are pretty straight
> forward and accepted by both nfdump on the command line, as well as
> nfsen in the Netflow Processing form. Specifically I have tried
> filters of "IN IF 4" and "( DST NET 131.128/16 ) and ( ( OUT IF 14 )
> or ( OUT IF 23 ) )". I have also tried both real and shadow profiles
> that are continuous.
What happens if you enter exactly these filters into the details tab (field
"Filter:") and hit "process"?
Regards -- Till
--
Dipl.-Inform. Till Dörges [EMAIL PROTECTED]
Senior Researcher Phone: +49 (0)700 / PRESECURE
PRESECURE Consulting GmbH, Münster AG Münster, HRB 6581
Geschäftsführer/Managing Director Dr. Klaus-Peter Kossakowski
CarmentiS - Early Warning Expertise
http://www.carmentis.org
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
