Hi all, In the past, there were some reported errors regarding PortTracker. With the help of Asbjørn, I could track down the problem and created a patch:
In order to iinclude better loggiing for nfrack, apply the small patch below to
your PortTracker.pm file:
--- PortTracker.pm.orig 2010-12-11 16:02:45.000000000 +0100
+++ PortTracker.pm 2010-12-11 16:00:44.000000000 +0100
@@ -291,7 +291,7 @@
#
# process all sources of this profile at once
- my $command = "$nftrack -M $netflow_sources -r nfcapd.$timeslot -d
$PORTSDBDIR -A -t $timeslot -s -p -w
+ my $command = "$nftrack -L $NfConf::syslog_facility -M
$netflow_sources -r nfcapd.$timeslot -d $PORTSDBDIR -A
-t $timeslot -s -p -w $PORTSDBDIR/portstat.txt";
$PORTSDBDIR/portstat.txt";
nftrack_execute($command);
$command = "$nftrack -d $PORTSDBDIR -S -p -w
$PORTSDBDIR/portstat24.txt";
Do not forget the reload nfsen after applying the patch: ./nfsen reload
Replace the sources of nftrack in contrib/PortTracker of nfsen-1.3.5 with
the one appended in the tar file and rebuild nftrack and reinstall nftrack.
Watch the log file for the next cycle. nftrack may complain about out of
sync issues and automatically adjust things correctly.
Many thank and sorry for the inconvenience.
- Peter
--
Be nice to your netflow data
nftrack.tgz
Description: GNU Zip compressed data
------------------------------------------------------------------------------ Oracle to DB2 Conversion Guide: Learn learn about native support for PL/SQL, new data types, scalar functions, improved concurrency, built-in packages, OCI, SQL*Plus, data movement tools, best practices and more. http://p.sf.net/sfu/oracle-sfdev2dev
_______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
