Werner, Thanks so much I got things straight My graphs started ploting this morning. I had to stop both nfsen and softflowd then run them in order, softflowd then nfsen and surely it started running. I am trying to find out what I wasn't doing right, although the three softflow instances I was aware and made them so.
On Thu, December 4, 2008 16:26, Werner Schram wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Nick, > > I think we need some more information to really help you further. > > Nick Wambugu wrote: >> Hi all, >> >> >> I have a big problem here, my NFSEN shows graphs but without any >> activity >> of any flows, what could be causing this? and from nfdump there is no >> flows >> >> /usr/local/bin/nfdump >> Date flow start Duration Proto Src IP Addr:Port >> Dst >> IP Addr:Port Packets Bytes Flows >> >> Also my live profiles have no data, I can't see the flows being >> collected >> though >> # ps -ax |grep soft >> 45 ?? DL 0:10.03 [softdepflush] >> 17681 ?? Ss 21:38.26 softflowd -i bge1 -v 9 -n 127.0.0.1:8188 >> 17714 ?? Ss 22:08.53 softflowd -i bge1 -v 9 -n 127.0.0.1:8818 >> 99879 ?? Ss 34:48.00 softflowd -i bge1 -v 9 -n 127.0.0.1:8818 >> 50317 p1 S+ 0:00.00 grep soft >> > > It seems strange to me that you have three softflowd processes running > on the same interface. Is this intentional? Was intentional. but the port to run on is 8818. > > you can check if netflow is being generated by the softflowd processes > by running tcpdump: > > tcpdump -i lo -n dst port 8188 or dst port 8818 Was being genarated. the rest I had not checked meaning I aint sure. > > Are your nfcapd processes running? > > if this is the case, you can check if the nfcapd files in your live > profile are being filled by running: > > nfdump -R nfcapd.xxxxxxxxxxxx > > on one of the completed nfcapd files in your live profile. > > Regards, > Werner > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2.0.9 (GNU/Linux) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkk32pAACgkQ3ULkMS4OADnO1gCeMfgwfucrT9YoCOaCwrtdFpfp > PtAAoIOJLiQkXqQj/OSd3GXPHKvIATaG > =CfD+ > -----END PGP SIGNATURE----- > > -- > This message has been scanned for viruses and > dangerous content by MailScanner, and is > believed to be clean. > > Nick. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean. ------------------------------------------------------------------------- This SF.Net email is sponsored by the Moblin Your Move Developer's challenge Build the coolest Linux based applications with Moblin SDK & win great prizes Grand prize is a trip for two to an Open Source event anywhere in the world http://moblin-contest.org/redirect.php?banner_id=100&url=/ _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
