-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
On 6/7/10 21:43, Samuel Petreski wrote:
> I have nfsen-1.3.3 and nfdump-1.6.1 (compiled with --enable-nfprofile) and
> I'm running into problems with getting any alerts triggered. Also the live
> profile works fine and the graphs are getting generated, however when I
> attempt to create a new profile the graphs are empty.
>
> In the logs I get the following messages,
>
> Jun 7 15:40:00 netflow nfcapd[10315]: Total ignored packets: 0
> Jun 7 15:40:15 netflow nfsen[18252]: 1 channels/alerts to profile
> Jun 7 15:40:15 netflow nfprofile[18290]: Process line
> '.#~test#8#test#core-rtr '
> Jun 7 15:40:15 netflow nfprofile[18290]: Setup channel 'test' in profile
> '~test' group '.', channellist 'core-rtr'
> Jun 7 15:40:15 netflow nfsen[18252]: Update profile live in group .
> Jun 7 15:40:15 netflow nfsen[18252]: Process alert 'test'
> Jun 7 15:40:15 netflow nfsen[18252]: condition 0: evaluated to False
> Jun 7 15:40:15 netflow nfsen[18252]: condition 1: evaluated to False
> Jun 7 15:40:15 netflow nfsen[18252]: Run expire at Mon Jun 7 15:40:00 2010
> Jun 7 15:40:15 netflow nfsen[18252]: Expire profile live group . low water
> mark: 90%%
> Jun 7 15:40:15 netflow nfsen[18252]: End expire at Mon Jun 7 15:40:00 2010
>
> Also in the web interface I'm getting the following error in red "ERROR:
> Illegal value 'auto' for 'output'!"
When does it show this error?
- Peter
>
> Thanks for your help in advance.
>
> --Samuel
>
> --
> Samuel Petreski
> Sr. Security Analyst
> Georgetown University
>
>
>
>
> ------------------------------------------------------------------------------
> ThinkGeek and WIRED's GeekDad team up for the Ultimate
> GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
> lucky parental unit. See the prize list and enter to win:
> http://p.sf.net/sfu/thinkgeek-promo
>
>
>
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag, Security Engineer, Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box, CH-8021 Zurich, Switzerland
E-mail: [email protected] Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (Darwin)
iQCVAwUBTA5U3f5AbZRALNr/AQLKLAP/ZyWWVTPaAlJctiOSMvZc5PvRcoMt8XBJ
7XUm+Z8O5qJKUYriGk09wEkjcIAqOCgkO/CjKu+uhN8GYliy3hsdWQ+ZcItj67Ec
tSqRdESKE2pTyxWJ55J+enG7GLRJlDjTP9QX6PlvF2jNeBy4Tvl9tHzgsPcIuv/F
d9C1TmmLdAM=
=sFro
-----END PGP SIGNATURE-----
------------------------------------------------------------------------------
ThinkGeek and WIRED's GeekDad team up for the Ultimate
GeekDad Father's Day Giveaway. ONE MASSIVE PRIZE to the
lucky parental unit. See the prize list and enter to win:
http://p.sf.net/sfu/thinkgeek-promo
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss