I have nfsen-1.3.3 and nfdump-1.6.1 (compiled with --enable-nfprofile) and I'm running into problems with getting any alerts triggered. Also the live profile works fine and the graphs are getting generated, however when I attempt to create a new profile the graphs are empty.
In the logs I get the following messages, Jun 7 15:40:00 netflow nfcapd[10315]: Total ignored packets: 0 Jun 7 15:40:15 netflow nfsen[18252]: 1 channels/alerts to profile Jun 7 15:40:15 netflow nfprofile[18290]: Process line '.#~test#8#test#core-rtr ' Jun 7 15:40:15 netflow nfprofile[18290]: Setup channel 'test' in profile '~test' group '.', channellist 'core-rtr' Jun 7 15:40:15 netflow nfsen[18252]: Update profile live in group . Jun 7 15:40:15 netflow nfsen[18252]: Process alert 'test' Jun 7 15:40:15 netflow nfsen[18252]: condition 0: evaluated to False Jun 7 15:40:15 netflow nfsen[18252]: condition 1: evaluated to False Jun 7 15:40:15 netflow nfsen[18252]: Run expire at Mon Jun 7 15:40:00 2010 Jun 7 15:40:15 netflow nfsen[18252]: Expire profile live group . low water mark: 90%% Jun 7 15:40:15 netflow nfsen[18252]: End expire at Mon Jun 7 15:40:00 2010 Also in the web interface I'm getting the following error in red "ERROR: Illegal value 'auto' for 'output'!" Thanks for your help in advance. --Samuel -- Samuel Petreski Sr. Security Analyst Georgetown University
pgpyxdzF0GQLG.pgp
Description: PGP signature
------------------------------------------------------------------------------ ThinkGeek and WIRED's GeekDad team up for the Ultimate GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the lucky parental unit. See the prize list and enter to win: http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
