what I get in the log file when an alert is triggered is something like this:
Oct 27 06:55:16 flow nfsen[26093]: Process alert 'alert2' Oct 27 06:55:16 flow nfsen[26093]: condition 0: evaluated to True Oct 27 06:55:16 flow nfsen[26093]: condition 1: evaluated to True Oct 27 06:55:16 flow nfsen[26093]: condition 2: evaluated to False Oct 27 06:55:16 flow nfsen[26093]: condition 3: evaluated to True Oct 27 06:55:16 flow nfsen[26093]: condition 4: evaluated to False Oct 27 06:55:16 flow nfsen[26093]: condition 5: evaluated to True Oct 27 06:55:16 flow nfsen[26093]: Alert 'alert2' execute action So it seems like nothing is happening.. Peter Haag ha scritto: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > > > Vania La Rocca wrote: > >> I solved the problem related to the graphs (the reason was that I >> switched to netflow version 8 and I did not know it was not >> supported by nfdump). >> >> I still have the problem with the emails, since i'm not receiving >> anything to the address I specified when an alert is triggered. >> Any clue? >> > > Have you checked your log file?? > > - Peter > > >> Peter Haag ha scritto: >> >> >> Vania La Rocca wrote: >> >> >>>>> Hi all. >>>>> I am encountering two problems in using NfSen. >>>>> >>>>> Starting from yesterday afternoon I cannot see anymore the graphs >>>>> updated on my browser, even if I tried to restart nfsen, >>>>> and the data keeps being collected on the server disk. >>>>> Looking at the log file everything seems to be working fine, and >>>>> moreover since the time it stopped i did not apply any configuration >>>>> changes... >>>>> Any clue on wait may be happening???? >>>>> >>>>> >> Have you checked your log file?? >> >> - Peter >> >> >>>>> The other problem is that after setting some alerts I am never receiving >>>>> any email to the address specified in the alert form. What should I do >>>>> in order to get the mail to the provided address? Should I modify some >>>>> configuration file? >>>>> >>>>> I hope some of you can help. >>>>> >>>>> Cheers. >>>>> >>>>> Vania >>>>> >>>>> ------------------------------------------------------------------------- >>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's >>>>> challenge >>>>> Build the coolest Linux based applications with Moblin SDK & win great >>>>> prizes >>>>> Grand prize is a trip for two to an Open Source event anywhere in the >>>>> world >>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >>>>> _______________________________________________ >>>>> Nfsen-discuss mailing list >>>>> [email protected] >>>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss >>>>> >>>>> > > >> ------------------------------------------------------------------------- >> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge >> Build the coolest Linux based applications with Moblin SDK & win great prizes >> Grand prize is a trip for two to an Open Source event anywhere in the world >> http://moblin-contest.org/redirect.php?banner_id=100&url=/ >> _______________________________________________ >> Nfsen-discuss mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss >> > > - -- > _______ SWITCH - The Swiss Education and Research Network ______ > Peter Haag, Security Engineer, Member of SWITCH CERT > PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 > SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland > E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/ > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.5 (Darwin) > > iQCVAwUBSQWvxv5AbZRALNr/AQITlAP9EzoiUnzECZnEf5d3b4bSII7BIt5MlEP3 > pMnve/8oGwLLaPEpX0qdfBoTtkIk2PxckhdVXnJze+mR/fmiU7W8rO71IdvPs9gX > UOj1g7NK1DWKWlj+OzwrntvdIIsU6XT2q0nkVwVvU0mLIG6qaHMshJgt6zyYfc8O > 4iTUj5nvIvg= > =3qQ5 > -----END PGP SIGNATURE----- > ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
