-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
Vania La Rocca wrote:
> what I get in the log file when an alert is triggered is something like
> this:
>
> Oct 27 06:55:16 flow nfsen[26093]: Process alert 'alert2'
> Oct 27 06:55:16 flow nfsen[26093]: condition 0: evaluated to True
> Oct 27 06:55:16 flow nfsen[26093]: condition 1: evaluated to True
> Oct 27 06:55:16 flow nfsen[26093]: condition 2: evaluated to False
> Oct 27 06:55:16 flow nfsen[26093]: condition 3: evaluated to True
> Oct 27 06:55:16 flow nfsen[26093]: condition 4: evaluated to False
> Oct 27 06:55:16 flow nfsen[26093]: condition 5: evaluated to True
> Oct 27 06:55:16 flow nfsen[26093]: Alert 'alert2' execute action
At least it says, that the action got executed. Does your mail stick somewhere
in a queue?
- From NfSen perspective, this looks ok.
- Peter
>
> So it seems like nothing is happening..
>
>
>
> Peter Haag ha scritto:
>
>
> Vania La Rocca wrote:
>
>>>> I solved the problem related to the graphs (the reason was that I
>>>> switched to netflow version 8 and I did not know it was not
>>>> supported by nfdump).
>>>>
>>>> I still have the problem with the emails, since i'm not receiving
>>>> anything to the address I specified when an alert is triggered.
>>>> Any clue?
>>>>
> Have you checked your log file??
>
> - Peter
>
>
>>>> Peter Haag ha scritto:
>>>>
>>>>
>>>> Vania La Rocca wrote:
>>>>
>>>>
>>>>>>> Hi all.
>>>>>>> I am encountering two problems in using NfSen.
>>>>>>>
>>>>>>> Starting from yesterday afternoon I cannot see anymore the graphs
>>>>>>> updated on my browser, even if I tried to restart nfsen,
>>>>>>> and the data keeps being collected on the server disk.
>>>>>>> Looking at the log file everything seems to be working fine, and
>>>>>>> moreover since the time it stopped i did not apply any configuration
>>>>>>> changes...
>>>>>>> Any clue on wait may be happening????
>>>>>>>
>>>>>>>
>>>> Have you checked your log file??
>>>>
>>>> - Peter
>>>>
>>>>
>>>>>>> The other problem is that after setting some alerts I am never receiving
>>>>>>> any email to the address specified in the alert form. What should I do
>>>>>>> in order to get the mail to the provided address? Should I modify some
>>>>>>> configuration file?
>>>>>>>
>>>>>>> I hope some of you can help.
>>>>>>>
>>>>>>> Cheers.
>>>>>>>
>>>>>>> Vania
>>>>>>>
>>>>>>> -------------------------------------------------------------------------
>>>>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>>>>>>> challenge
>>>>>>> Build the coolest Linux based applications with Moblin SDK & win great
>>>>>>> prizes
>>>>>>> Grand prize is a trip for two to an Open Source event anywhere in the
>>>>>>> world
>>>>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>>>>>> _______________________________________________
>>>>>>> Nfsen-discuss mailing list
>>>>>>> [email protected]
>>>>>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>>>>>>
>>>>>>>
>
>>>> -------------------------------------------------------------------------
>>>> This SF.Net email is sponsored by the Moblin Your Move Developer's
>>>> challenge
>>>> Build the coolest Linux based applications with Moblin SDK & win great
>>>> prizes
>>>> Grand prize is a trip for two to an Open Source event anywhere in the world
>>>> http://moblin-contest.org/redirect.php?banner_id=100&url=/
>>>> _______________________________________________
>>>> Nfsen-discuss mailing list
>>>> [email protected]
>>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>>>
> -------------------------------------------------------------------------
> This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
> Build the coolest Linux based applications with Moblin SDK & win great prizes
> Grand prize is a trip for two to an Open Source event anywhere in the world
> http://moblin-contest.org/redirect.php?banner_id=100&url=/
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [EMAIL PROTECTED] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBSQW97v5AbZRALNr/AQLSvgP/TebmYDpT6SmfyqLsvQX70i9QaXpC+ShY
UCArYFyiLMRP1mKGpgFobrQX/qM3gnFEmS5zUl6yko/d2rLm1DsqSxHuvdkjJ2wI
TKGJweX3gxDlXpVTN7D1HtCXfyJqU5f9KP+FQMwZAR8ARpE2xHEkzDESK5DnN+8M
5TDXnlQ0aTw=
=DYEk
-----END PGP SIGNATURE-----
-------------------------------------------------------------------------
This SF.Net email is sponsored by the Moblin Your Move Developer's challenge
Build the coolest Linux based applications with Moblin SDK & win great prizes
Grand prize is a trip for two to an Open Source event anywhere in the world
http://moblin-contest.org/redirect.php?banner_id=100&url=/
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
