What does this tell me about my troubles?
" nfsen[13856]: Channel info file missing for channel .... "
My "live" profile is working fine and tracking all data , but shadow
profiles and graphs never track any data just empty repositories and
blank graphs .. The above message is one of a set.. I get one for each router
..
"RouteReflect1" is a valid router in , and a member of my live profile..
I'm very much regretting upgrading to 64bit, but needed to exceed the per user
memory limits posed in 32bit. I'm running RHEL 5.3 x86_64
I've recompiled all binaries involved and am running the latest nfdump/nfsen
code.
Since my move to 64bit i've got a live profile working normally, but no new
profiles or alerts or plugins behave.
local3 10:50:23 nfsen[9253]: End expire at Tue Jun 23 10:50:00
2009
local3 10:50:23 nfsen[9253]: Expire profile live group . low
water mark: 75%%
local3 10:50:22 nfsen[9253]: Expire profile Cookie group . low
water mark: 75%%
local3 10:50:22 nfsen[9253]: Run expire at Tue Jun 23 10:50:00
2009
local3 10:50:22 nfsen[9253]: Error reading statinfo of
'botnets': No flow file for requested time slot
local3 10:50:22 nfsen[9253]: Process alert 'botnets'
local3 10:50:22 nfsen[9622]: Plugin Cycle: Time: 200906231045,
Profile: live, Group: ., Module: Events,
local3 10:50:21 nfsen[9253]: Update profile live in group .
local3 10:50:20 nfsen[9253]: Update profile ServerNets in group
.
local3 10:50:19 nfsen[9253]: Update profile Pookie in group .
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Routerwing' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Router100sen' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'RouteReflect1' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'RouterWarner' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Router2laf' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Routerwpl' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Routerc22' in './Mookie'
local3 10:50:19 nfsen[9253]: Channel info file missing for
channel 'Routercap' in './Mookie'
local3 10:50:18 nfsen[9253]: Channel info file missing for
channel 'Router15met' in './Mookie'
local3 10:50:18 nfsen[9253]: Channel info file missing for
channel 'Routeratt' in './Mookie'
local3 10:50:18 nfsen[9253]: Channel info file missing for
channel 'Routercogent' in './Mookie'
local3 10:50:18 nfsen[9253]: Channel info file missing for
channel 'RouterG_Tech' in './Mookie'
local3 10:50:18 nfsen[9253]: Update profile Mookie in group .
local3 10:50:17 nfsen[9253]: Update profile Dookie in group .
local3 10:50:17 last message repeated 11 times
local3 10:50:17 nfsen[9253]: Error reading channel stat
information. Missing key 'first'
local3 10:50:16 nfsen[9253]: Update profile Cookie in group .
local3 10:50:15 nfsen[9253]: 50 channels/alerts to profile
daemon 10:50:10 /usr/local/bin/nfcapd[9218]: Total ignored
packets: 0
daemon 10:50:10 /usr/local/bin/nfcapd[9218]: Ident:
'RouterG_Tech' Flows: 24, Packets: 183, Bytes: 10974, Sequence Errors: 12, Bad
Packets: 0
daemon 10:50:05 /usr/local/bin/nfcapd[9239]: Total ignored
packets: 0
daemon 10:50:05 /usr/local/bin/nfcapd[9239]: Ident:
'Router2laf' Flows: 769, Packets: 5087637, Bytes: 2256297523, Sequence Errors:
0, Bad Packets: 0
daemon 10:50:02 /usr/local/bin/nfcapd[9230]: Total ignored
packets: 0
daemon 10:50:02 /usr/local/bin/nfcapd[9230]: Ident: 'Routercap'
Flows: 12644, Packets: 8721169, Bytes: 3308263407, Sequence Errors: 0, Bad
Packets: 0
daemon 10:50:01 /usr/local/bin/nfcapd[9227]: Total ignored
packets: 0
daemon 10:50:01 /usr/local/bin/nfcapd[9227]: Ident: 'Routerc22'
Flows: 11937, Packets: 11231279, Bytes: 5472391616, Sequence Errors: 0, Bad
Packets: 0
daemon 10:50:01 /usr/local/bin/nfcapd[9251]: Total ignored
packets: 0
daemon 10:50:01 /usr/local/bin/nfcapd[9251]: Ident:
'Router100sen' Flows: 1048, Packets: 1674423, Bytes: 936777615, Sequence
Errors: 0, Bad Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9224]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9224]: Ident:
'Router15met' Flows: 6644, Packets: 4546867, Bytes: 2135841733, Sequence
Errors: 0, Bad Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9245]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9245]: Ident:
'RouteReflect1' Flows: 0, Packets: 0, Bytes: 0, Sequence Errors: 0, Bad
Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9242]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9242]: Ident:
'TimeWarner' Flows: 295980, Packets: 7668673, Bytes: 5035803183, Sequence
Errors: 0, Bad Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9248]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9248]: Ident:
'Routerbwing' Flows: 278310, Packets: 5924814, Bytes: 5642547873, Sequence
Errors: 0, Bad Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9236]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9236]: Ident: 'Routerwpl'
Flows: 4582, Packets: 1665665, Bytes: 689980205, Sequence Errors: 0, Bad
Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9233]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9233]: Ident: 'Routeratt'
Flows: 238200, Packets: 3813227, Bytes: 1356438479, Sequence Errors: 0, Bad
Packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9221]: Total ignored
packets: 0
daemon 10:50:00 /usr/local/bin/nfcapd[9221]: Ident:
'Routercogent' Flows: 732270, Packets: 16143537, Bytes: 7453599742, Sequence
Errors: 0, Bad Packets: 0
Thanks
This e-mail, including any attachments, may be confidential, privileged or
otherwise legally protected. It is intended only for the addressee. If you
received this e-mail in error or from someone who was not authorized to send it
to you, do not disseminate, copy or otherwise use this e-mail or its
attachments. Please notify the sender immediately by reply e-mail and delete
the e-mail from your system.
------------------------------------------------------------------------------
Are you an open source citizen? Join us for the Open Source Bridge conference!
Portland, OR, June 17-19. Two days of sessions, one day of unconference: $250.
Need another reason to go? 24-hour hacker lounge. Register today!
http://ad.doubleclick.net/clk;215844324;13503038;v?http://opensourcebridge.org
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
