Hi Joe,
my solution works for non-live profiles only! The live profile has a
special status, it can not be created as new. Try to rebuild your
profile under a different name (e.g. myprof), and when it is done, you
can try to replace the live profile data by the myprof's ... But I never
tried this but I think, it should work after some tuning.
Regards,
Jan
Jan Pazdera <pazdera at invea.cz>
INVEA-TECH a.s.
U Vodarny 2965/2, 61600 Brno, Czech Republic
Tel: +420 511 205 251
www.invea-tech.com
Key 0x89F62F78: 41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78
Dne 19.5.2011 20:10, JS napsal(a):
> Hi Jan,
>
> Thanks for a response. I feel that I am close but I just cant seem to
> get your solution to work. I have created an empty profile. I then
> copied the .rrd from that empty profile to my two switches under my
> "live" profile. Then I made the changes to the live/profile.dat file
> you have below.
>
> When going to the stat page and clicking the green check mark I get
> the following message:
>
> "
>
>
> ERROR: nfsend: Profile 'live' not a new profile. Nothing to
> confirm.!"
>
>
> I have the following for my live/profile.dat file:
>
> name = live
> group = .
> tbegin = 1305148200
> tcreate = 1305148200
> tstart = 1279816500
> tend = 1305827700
> updated = 1305827700
> expire = 0
> maxsize = 0
> size = 389701632
> type = 2
> locked = 0
> status = new
> version = 130
> channel = test-switch-1:+:#f00000:2:test-switch-1
> channel = test-switch-2:+:#0000ff:1:test-switch-2
>
> Any thoughts on what I'm missing?
>
> -Joe
>
>
>
> ------------------------------------------------------------------------
> *From:* Jan Pazdera <[email protected]>
> *To:* [email protected]
> *Sent:* Thu, May 19, 2011 8:44:33 AM
> *Subject:* Re: [Nfsen-discuss] importing pre-nfsen data from nfdump
>
> Hi,
>
> I do this by modifing the profile.dat file. First you need to change
> the profile status to new by modifiing the following rows:
>
> type = 2
> locked = 0
> status = new
>
> Next, you need to replace all .rrd files of your profile by emtpy
> ones. You can obtain them by creating brand new profile and replace
> all .rrds with new empty .rrd file from the new profile.
>
> Then navigate to nfsen Stat tab of this profile. You will be able to
> click on the green Tick symbol which starts the rebuild of the whole
> profile.
>
> This works for me very well.
>
> Enjoy,
> Jan
>
> Dne 19.5.2011 16:29, JS napsal(a):
>> I would like to second this info request as I have been watching this
>> post very carefully. I am in the exact same situation. I have
>> imported some older nfdump data, and the import process works just
>> fine. I can even query it from the webpage just fine. However I would
>> really really like to know is there a way to rebuild my graphics to
>> reflect the new data.
>>
>> At this point I would even take a brute force way of doing it. i.e.
>> delete all existing graphics, and regenerate them all from my
>> profile-live data directories.
>>
>> If anyone has a process to do this please let us know.
>>
>> ------------------------------------------------------------------------
>> *From:* Robert Vineyard <[email protected]>
>> *To:* [email protected]
>> *Sent:* Thu, May 19, 2011 6:29:41 AM
>> *Subject:* Re: [Nfsen-discuss] importing pre-nfsen data from nfdump
>>
>> I never heard back from anyone on this - does anyone know if it is
>> possible
>> to get nfsen to generate graphs and statistics retroactively on flow data
>> archives imported from nfdump (the data has already been successfully
>> imported)?
>>
>> Thanks!
>>
>> --
>> Robert Vineyard, CISSP, RHCE
>> Senior Information Security Engineer
>> Georgia Tech Office of Information Technology
>> 404.385.6900 (office/cell) / 404.894.9548 (fax)
>>
>> On 5/7/2011 7:43 PM, Robert Vineyard wrote:
>> > Tiberiu,
>> >
>> > Thanks for pointing me in the right direction. It looks as though after
>> > moving the files into the correct place and running the command you
>> > mentioned that nfsen is now aware of my imported data (this is
>> reflected in
>> > the web interface as well) as you can see in the output below.
>> >
>> > Now, how do I get nfsen to regenerate its pretty graphs against all
>> this
>> > newly-imported flow data? :-)
>> >
>> > [root@zuul ~]# /data/nfsen/bin/nfsen -r live
>> > name live
>> > group (nogroup)
>> > tcreate Mon Apr 11 20:20:00 2011
>> > tstart Thu Apr 22 00:00:00 2010
>> > tend Sat May 7 19:30:00 2011
>> > updated Sat May 7 19:30:00 2011
>> > expire 395 days 0 hours
>> > size 9.6 TB
>> > maxsize 0
>> > type live
>> > locked 0
>> > status OK
>> > version 130
>> > channel campus2-rtr sign: + colour: #0000ff order: 1
>> sourcelist:
>> > campus2-rtr Files: 109061 Size: 10607110901760
>> >
>> > --
>> > Robert Vineyard, CISSP, RHCE
>> > Senior Information Security Engineer
>> > Georgia Tech Office of Information Technology
>> > 404.385.6900 (office/cell) / 404.894.9548 (fax)
>> >
>> >
>> > On 4/14/2011 3:47 AM, Tiberiu Vicol wrote:
>> >>
>> >> From here
>> http://code.google.com/p/installnfsen/wiki/InstallNetFlowWithNfSen
>> >>
>> >>
>> >> ¨Integration of Existing Data
>> >>
>> >> If you have existing netflow data, it can be added to the new nfsen
>> >> installation by following steps 1. go to the profile directory
>> (normally it
>> >> is $NFSEN/profiles-data/live) 2. copy all the existing data to the
>> folder or
>> >> make sym link to the existing data 3. use command: a.
>> >> /usr/local/nfsen/bin/nfsen –r live 4. The live profile is now
>> setup with the
>> >> existing data. You can always check it using a.
>> /usr/local/nfsen/bin/nfsen
>> >> –l live¨
>> >>
>> >> Hope this helps !
>> >>
>> >> Regards,
>> >> Tibi
>> >>
>> >>
>> >>> Date: Wed, 13 Apr 2011 08:57:46 -0400
>> >>> From: [email protected]
>> <mailto:[email protected]>
>> >>> To: [email protected]
>> <mailto:[email protected]>
>> >>> Subject: [Nfsen-discuss] importing pre-nfsen data from nfdump
>> >>>
>> >>> I have been running nfdump for about a year and recently decided
>> to give
>> >>> nfsen a try. I've been fairly pleased with it so far, however I
>> could not
>> >>> figure out a way to attach nfsen to my existing nfdump/nfcapd
>> infrastructure
>> >>> (nfsen seems to want to manage those processes itself, so I
>> eventually gave
>> >>> in and let it do so) so I am looking for a way of importing my
>> old nfdump
>> >>> data into nfsen.
>> >>>
>> >>> I have about a year's worth of flows in nfdump 1.6.x format that
>> I'd like to
>> >>> somehow bring into nfsen so that I can use the graphs, plugins, and
>> >>> analytics features. Is there a straightforward way to accomplish
>> this?
>> >>>
>> >>> Thanks!
>> >>>
>> >>> --
>> >>> Robert Vineyard, CISSP, RHCE, Security+
>> >>> Senior Information Security Engineer
>> >>> 404-385-6900 (office/cell)
>> >>> 404-894-9548 (fax)
>> >>>
>> >>>
>> ------------------------------------------------------------------------------
>> >>> Forrester Wave Report - Recovery time is now measured in hours
>> and minutes
>> >>> not days. Key insights are discussed in the 2010 Forrester Wave
>> Report as
>> >>> part of an in-depth evaluation of disaster recovery service
>> providers.
>> >>> Forrester found the best-in-class provider in terms of services
>> and vision.
>> >>> Read this report now! http://p.sf.net/sfu/ibm-webcastpromo
>> >>> _______________________________________________
>> >>> Nfsen-discuss mailing list
>> >>> [email protected]
>> <mailto:[email protected]>
>> >>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>> >
>> >
>> ------------------------------------------------------------------------------
>> > WhatsUp Gold - Download Free Network Management Software
>> > The most intuitive, comprehensive, and cost-effective network
>> > management toolset available today. Delivers lowest initial
>> > acquisition cost and overall TCO of any competing solution.
>> > http://p.sf.net/sfu/whatsupgold-sd
>> > _______________________________________________
>> > Nfsen-discuss mailing list
>> > [email protected]
>> <mailto:[email protected]>
>> > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>> ------------------------------------------------------------------------------
>> What Every C/C++ and Fortran developer Should Know!
>> Read this article and learn how Intel has extended the reach of its
>> next-generation tools to help Windows* and Linux* C/C++ and Fortran
>> developers boost performance applications - including clusters.
>> http://p.sf.net/sfu/intel-dev2devmay
>> _______________________________________________
>> Nfsen-discuss mailing list
>> [email protected]
>> <mailto:[email protected]>
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>>
>>
>> ------------------------------------------------------------------------------
>> What Every C/C++ and Fortran developer Should Know!
>> Read this article and learn how Intel has extended the reach of its
>> next-generation tools to help Windows* and Linux* C/C++ and Fortran
>> developers boost performance applications - including clusters.
>> http://p.sf.net/sfu/intel-dev2devmay
>>
>>
>> _______________________________________________
>> Nfsen-discuss mailing list
>> [email protected]
>> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
> --
> Jan Pazdera <pazdera at invea.cz <http://invea.cz>>
> INVEA-TECH a.s.
> U Vodarny 2965/2, 61600 Brno, Czech Republic
> Tel: +420 511 205 251
> www.invea-tech.com
> Key 0x89F62F78: 41A7 28C2 C624 FBD1 E236 6827 42EB 3694 89F6 2F78
>
>
>
> ------------------------------------------------------------------------------
> What Every C/C++ and Fortran developer Should Know!
> Read this article and learn how Intel has extended the reach of its
> next-generation tools to help Windows* and Linux* C/C++ and Fortran
> developers boost performance applications - including clusters.
> http://p.sf.net/sfu/intel-dev2devmay
>
>
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its
next-generation tools to help Windows* and Linux* C/C++ and Fortran
developers boost performance applications - including clusters.
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
