Hi Jan,
Thanks for a response. I feel that I am close but I just cant seem to get your
solution to work. I have created an empty profile. I then copied the .rrd from
that empty profile to my two switches under my "live" profile. Then I made the
changes to the live/profile.dat file you have below.
When going to the stat page and clicking the green check mark I get the
following message:
"
ERROR: nfsend: Profile 'live' not a new profile. Nothing to confirm.!"
I have the following for my live/profile.dat file:
name = live
group = .
tbegin = 1305148200
tcreate = 1305148200
tstart = 1279816500
tend = 1305827700
updated = 1305827700
expire = 0
maxsize = 0
size = 389701632
type = 2
locked = 0
status = new
version = 130
channel = test-switch-1:+:#f00000:2:test-switch-1
channel = test-switch-2:+:#0000ff:1:test-switch-2
Any thoughts on what I'm missing?
-Joe
________________________________
From: Jan Pazdera <[email protected]>
To: [email protected]
Sent: Thu, May 19, 2011 8:44:33 AM
Subject: Re: [Nfsen-discuss] importing pre-nfsen data from nfdump
Hi,
I do this by modifing the profile.dat file. First you need to change the
profile status to new by modifiing the following rows:
type = 2
locked = 0
status = new
Next, you need to replace all .rrd files of your profile by emtpy ones. You
can obtain them by creating brand new profile and replace all .rrds with
new
empty .rrd file from the new profile.
Then navigate to nfsen Stat tab of this profile. You will be able to click
on the green Tick symbol which starts the rebuild of the whole profile.
This works for me very well.
Enjoy,
Jan
Dne 19.5.2011 16:29, JS napsal(a):
I would like to second this info request as I have been watching this
post very carefully. I am in the exact same situation. I have
imported
some older nfdump data, and the import process works just fine. I can
even query it from the webpage just fine. However I would really
really like to know is there a way to rebuild my graphics to reflect
the new data.
>
>At this point I would even take a brute force way of doing it. i.e.
>delete all existing graphics, and regenerate them all from my
>profile-live data directories.
>
>If anyone has a process to do this please let us know.
>
>
>
>
________________________________
From: Robert Vineyard <[email protected]>
>To: [email protected]
>Sent: Thu, May 19, 2011 6:29:41 AM
>Subject: Re: [Nfsen-discuss] importing pre-nfsen data from nfdump
>
>I never heard back from anyone on this - does anyone know if it is
>possible
>to get nfsen to generate graphs and statistics retroactively on
>flow
>data
>archives imported from nfdump (the data has already been
>successfully imported)?
>
>Thanks!
>
>--
>Robert Vineyard, CISSP, RHCE
>Senior Information Security Engineer
>Georgia Tech Office of Information Technology
>404.385.6900 (office/cell) / 404.894.9548 (fax)
>
>On 5/7/2011 7:43 PM, Robert Vineyard wrote:
>> Tiberiu,
>>
>> Thanks for pointing me in the right direction. It looks as
>> though
>>after
>> moving the files into the correct place and running the command
>you
>> mentioned that nfsen is now aware of my imported data (this is
>>reflected in
>> the web interface as well) as you can see in the output below.
>>
>> Now, how do I get nfsen to regenerate its pretty graphs against
>> all
>>this
>> newly-imported flow data? :-)
>>
>> [root@zuul ~]# /data/nfsen/bin/nfsen -r live
>> name live
>> group (nogroup)
>> tcreate Mon Apr 11 20:20:00 2011
>> tstart Thu Apr 22 00:00:00 2010
>> tend Sat May 7 19:30:00 2011
>> updated Sat May 7 19:30:00 2011
>> expire 395 days 0 hours
>> size 9.6 TB
>> maxsize 0
>> type live
>> locked 0
>> status OK
>> version 130
>> channel campus2-rtr sign: + colour: #0000ff order: 1
>>sourcelist:
>> campus2-rtr Files: 109061 Size: 10607110901760
>>
>> --
>> Robert Vineyard, CISSP, RHCE
>> Senior Information Security Engineer
>> Georgia Tech Office of Information Technology
>> 404.385.6900 (office/cell) / 404.894.9548 (fax)
>>
>>
>> On 4/14/2011 3:47 AM, Tiberiu Vicol wrote:
>>>
>>> From here http://code.google.com/p/installnfsen/wiki/InstallNetFlowWithNfSen
>>>
>>>
>>> ¨Integration of Existing Data
>>>
>>> If you have existing netflow data, it can be added to the new
>>nfsen
>>> installation by following steps 1. go to the profile directory
>>>(normally it
>>> is $NFSEN/profiles-data/live) 2. copy all the existing data to
>>> the
>>>folder or
>>> make sym link to the existing data 3. use command: a.
>>> /usr/local/nfsen/bin/nfsen –r live 4. The live profile is now
>>> setup
>>>with the
>>> existing data. You can always check it using a.
>>>/usr/local/nfsen/bin/nfsen
>>> –l live¨
>>>
>>> Hope this helps !
>>>
>>> Regards,
>>> Tibi
>>>
>>>
>>>> Date: Wed, 13 Apr 2011 08:57:46 -0400
>>>> From: [email protected]
>>>> To: [email protected]
>>>> Subject: [Nfsen-discuss] importing pre-nfsen data from nfdump
>>>>
>>>> I have been running nfdump for about a year and recently
>>>> decided to
>>>>give
>>>> nfsen a try. I've been fairly pleased with it so far, however
>>>> I
>>>>could not
>>>> figure out a way to attach nfsen to my existing nfdump/nfcapd
>>>>infrastructure
>>>> (nfsen seems to want to manage those processes itself, so I
>>>>eventually gave
>>>> in and let it do so) so I am looking for a way of importing my
>>>> old
>>>>nfdump
>>>> data into nfsen.
>>>>
>>>> I have about a year's worth of flows in nfdump 1.6.x format
>>>> that
>>>>I'd like to
>>>> somehow bring into nfsen so that I can use the graphs,
>>>> plugins,
>>>and
>>>> analytics features. Is there a straightforward way to
>>>> accomplish
>>>>this?
>>>>
>>>> Thanks!
>>>>
>>>> --
>>>> Robert Vineyard, CISSP, RHCE, Security+
>>>> Senior Information Security Engineer
>>>> 404-385-6900 (office/cell)
>>>> 404-894-9548 (fax)
>>>>
>>>>
>>------------------------------------------------------------------------------
>>>> Forrester Wave Report - Recovery time is now measured in hours
>>>> and
>>>>minutes
>>>> not days. Key insights are discussed in the 2010 Forrester
>>>> Wave
>>>>Report as
>>>> part of an in-depth evaluation of disaster recovery service
>>>>providers.
>>>> Forrester found the best-in-class provider in terms of
>>>> services and
>>>>vision.
>>>> Read this report now! http://p.sf.net/sfu/ibm-webcastpromo
>>>> _______________________________________________
>>>> Nfsen-discuss mailing list
>>>> [email protected]
>>>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>>
------------------------------------------------------------------------------
>> WhatsUp Gold - Download Free Network Management Software
>> The most intuitive, comprehensive, and cost-effective network
>> management toolset available today. Delivers lowest initial
>> acquisition cost and overall TCO of any competing solution.
>> http://p.sf.net/sfu/whatsupgold-sd
>> _______________________________________________
>> Nfsen-discuss mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
>------------------------------------------------------------------------------
>What Every C/C++ and Fortran developer Should Know!
>Read this article and learn how Intel has extended the reach of
>its
>next-generation tools to help Windows* and Linux* C/C++ and
>Fortran
>developers boost performance applications - including clusters.
>http://p.sf.net/sfu/intel-dev2devmay
>_______________________________________________
>Nfsen-discuss mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
> ------------------------------------------------------------------------------
>
>What Every C/C++ and Fortran developer Should Know! Read this article and
>learn
>how Intel has extended the reach of its next-generation tools to help
>Windows*
>and Linux* C/C++ and Fortran developers boost performance applications -
>including clusters. http://p.sf.net/sfu/intel-dev2devmay
> _______________________________________________ Nfsen-discuss mailing list
>[email protected]
>https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
-- Jan Pazdera <pazdera at invea.cz> INVEA-TECH a.s. U Vodarny 2965/2, 61600
Brno, Czech Republic Tel: +420 511 205 251 www.invea-tech.com Key 0x89F62F78:
41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78
------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
