On 5/19/2011 10:31 AM, Peter Haag wrote:
> NfSen has a tiny simulator built-in. Look at the bottom of nfsen.conf. If you 
> have
> properly placed your pre-collected data, let the simulation run - this also 
> builds the
> graphs.

Peter,

I have just now had a chance to look at the nfsen.conf file as you
recommended, and I'm not sure that I follow all of the steps I'm supposed to
perform.

It sounds like I need to create a separate instance of nfsen (can I just
make a copy of the relevant directory hierarchy from my current install?) in
which to run the simulation, with the data and configuration inserted into
the live profile locations. I'm fairly confident I can do this, but
unfortunately I do not have the disk space available to make a copy of the
data - it's over 12TB and I only have about 9TB free on my flow collector.
Would moving or symlinking the data temporarily work for this purpose?

Ideally I need to find a way to do this without having to stop the live flow
collection on my production nfsen installation. If this is possible, what
would I need to do after the simulation completes in order to merge the
freshly-graphed archive flow data back into my existing live profile?

Thank you for your help with this, I think that nfsen could be a lot more
useful for us if we can find a workable solution for graphing our imported
nfdump flow data without impacting real-time collection :-)

--
Robert Vineyard, CISSP, RHCE
Senior Information Security Engineer
Georgia Tech Office of Information Technology
404.385.6900 (office/cell) / 404.894.9548 (fax)

------------------------------------------------------------------------------
What Every C/C++ and Fortran developer Should Know!
Read this article and learn how Intel has extended the reach of its 
next-generation tools to help Windows* and Linux* C/C++ and Fortran 
developers boost performance applications - including clusters. 
http://p.sf.net/sfu/intel-dev2devmay
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to