Hey Mitja,
I'm looking to get Botnets with Events configured for my nfsen installation. I
was wondering if you can share of the steps you used?
Thanks,
-ryan
From: Mitja Podlogar [mailto:[email protected]]
Sent: Thursday, April 11, 2013 9:30 AM
To: [email protected]
Subject: Re: [Nfsen-discuss] memory problem
Update:
I have tested a little and found out that RAM/SWAP consumption is done by
plugin "nfsight". Even though I configured nfsight to use 512M of RAM it goes
beyond that.
Problem is with networks that I added, two /16 and I guess this is to much for
server to handle it. I now added only one /16 as an internal network and it
works but most of the traffic is generated form other /16.
I am using nfsight-beta-2013-03-23.
I don't have much experience with this so I don't really know what is normal
behavior for this plugin. Maybe someone who have used it for a while can tell
theirs statistics.
On Wed, Apr 10, 2013 at 1:00 PM, Mitja Podlogar
<[email protected]<mailto:[email protected]>> wrote:
I installed Nfsen 1.3.6p1 and nfdump 1.6.9 on FreeBSD 9.1. I'm using these
plugins: SURFmap, PortTracker, Botnets (with Events) and nfsight.
Everything was working great for more then a month. Today I noticed strange
behavior of process "nfsend-comm" which started using 2 CPU and entire RAM +
entire SWAP. At that time nothing really special was done except watching
graphs.
I tried restarting nfsen service and it was working for a minute and then again
nfsend-comm starts using RAM and CPU.
Yesterday I added plugin PortTracker and upgraded nfdump from 1.6.8 to 1.6.9. I
don't really know if it has anything to do with this problem since everything
was working fine for 24 hours.
I tried and disabled PortTracker but it didn't help.
If logs are needed I can provide them but I didn't see anything interesting in
messages and nfsen log.
I would be very grateful if anyone could tell me how to proceed with debugging
this or if anyone already had this problem and knows a solution.
Thank you in advance.
------------------------------------------------------------------------------
Precog is a next-generation analytics platform capable of advanced
analytics on semi-structured data. The platform includes APIs for building
apps and a phenomenal toolset for data science. Developers can use
our toolset for easy data analysis & visualization. Get a free account!
http://www2.precog.com/precogplatform/slashdotnewsletter
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
