Hi Jonathan,

On 10.07.14 14:48, John Hill wrote:
> Hi dear list,
> 
> I am having a problem with my nfsen installation and really don't know what
> to do.
> 
> My nfsen solution worked for about a month perfectly - gathering and
> analyzing dumps from 4 different sources with no problem.
> One day it stopped showing any new information.... (did not do any changes
> or installed anything new)

So why did it stop - any indication in the syslog files? Did you have a memory 
issue?

> 
> When i tried restarting nfsen I have received the next error:
> 
> starting nfcapd: (source1 source2 source3 source4) : collector did not
> start - see logfile.

It looks like your collector suffered from a severe condition, it cold not 
recover.
The reason for not starting up again could be shared memory. Check for any 
debris shared memory fragments ( ipcs ) and
clean them manually ( ipcrm -s )

Hope that helps

        - Peter

> 
> 
> You can see my log file in here:
> 
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Add extension: 2 byte input/output
> interface index
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Add extension: 4 byte input/output
> interface index
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Add extension: 2 byte src/dst AS
> number
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Add extension: 4 byte src/dst AS
> number
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Bound to IPv4 host/IP: any, Port:
> 9995
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: Standard setsockopt, SO_RCVBUF is
> 124928 Requested length is 200000 bytes
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1656]: System set setsockopt, SO_RCVBUF
> to 249856 bytes
> Jul 10 08:17:28 ISP799DOS1 nfcapd[1658]: initialize bookkeeper failed.
> Jul 10 08:17:34 ISP799DOS1 nfsen[1659]: Startup. Version: 1.3.6p1 $Id:
> nfsend 52 2012-01-23 16:23:08Z peter $
> Jul 10 08:17:34 ISP799DOS1 nfsen[1660]: nfsend: [1660]
> 
> 
> I am using the live profile with unlimited size and expire = never.
> 
> Tried changing the socket buffer size from the nfsen.conf, Rebuilding
> hierarchy,  removing sources, changing sources ports, reinstalling nfdump
> and nfsen, making sure privileges are set right, have enough disk space,
> enough RAM - nothing helped.
> 
> I have no idea why it suddenly stopped working.
> 
> Would appreciate all your help!
> 
> Thanks a lot,
> 
> Jonathan
> 
> 
> 
> ------------------------------------------------------------------------------
> Open source business process management suite built on Java and Eclipse
> Turn processes into business applications with Bonita BPM Community Edition
> Quickly connect people, data, and systems into organized workflows
> Winner of BOSSIE, CODIE, OW2 and Gartner awards
> http://p.sf.net/sfu/Bonitasoft
> 
> 
> 
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
> 

-- 
Be nice to your netflow data. Use NfSen and nfdump :)

------------------------------------------------------------------------------
Infragistics Professional
Build stunning WinForms apps today!
Reboot your WinForms applications with our WinForms controls. 
Build a bridge from your legacy apps to the future.
http://pubads.g.doubleclick.net/gampad/clk?id=153845071&iu=/4140/ostg.clktrk
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Reply via email to