new features in future nfsen versions?

Hy Peter

while working with NFSen me and my colleagues thougt about some  
helpful features for NFSen to simplify working with it..

- it would be great if you (the NFSEN user) could copy channels in  
profiles to just edit and customize channels (e.g. different mail  
protocols differ only in portnumbers, so just copy the channel and  
edit the port number)

- if you want to use similar channels in different profiles it would  
be great to give the possibility to save channels to reuse them  
whereever i want

- if i understood that correct you have to create all your channels  
and then build the profile to include all historic data..and if you  
add a channel after finishing the profile you only get data from now  
on..it would be great to kind of rebuild the profile..to take the  
current channels and re-read the flow data...or am i wrong with that??

thanks

martin

----
Martin Fischer
Univie || ACOnet || VIX
m.fischer@...
0043 1 4277 14034

Graph detail URLs

Ok so I'm building my own reports. I would like to just make a few wgets
against nfsen to make some graphs. Can someone explain the args to
rrdgraph.php?

Here is my request:

http://tools/nfsen/rrdgraph.php?cmd=get-detailsgraph&profile=./live&arg=
R2%R1+any+traffic+1243808400+1244139300+1246558500+1246515300+1246515300
+576+200+0+0+0

This gives me more or less the month of June , but I would like to start
it precisely at the beginning of June.

Also are there any other args I can feed to rrdgraph to change title or
something like that?

Thx
Jobe

------------------------------------------------------------------------------

nfsend not starting up - 1.3.2

Hi,

I installed nfsen today and ran into the issue, that nfsend would die on
startup. The extract from syslog says:
Jul  5 17:27:33 asgaard nfsen[31133]: Startup. Version: 1.3.2 $Id:
nfsend 14 2009-06-10 08:07:06Z haag $
Jul  5 17:27:33 asgaard nfsen[31133]: Error startup nfsend: Bad file
descriptor
Jul  5 17:27:33 asgaard nfsen[31133]: PANIC nfsend dies: Unable to write
PID file: Bad file descriptor at /opt/nfsen/bin/nfsend line 181.

Checking the code, I found, that ./bin/nfsend doesn't use the config
variable PIDDIR, but uses hardcoded VARDIR/run instead.

After replacing
$NfConf::VARDIR/run/$pidfile
with
$NfConf::PIDDIR/$pidfile
in the deamon, it has started properly.

That might be worth fixing.

Kind regards,
Martin List-Petersen

--

-- 
Airwire - Ag Nascadh Pobail an Iarthair
http://www.airwire.ie
Phone: 091-865 968 

stop, rebuild or reconfig error

Hi all,

I am wondering why is my server throwing me out when I try these

RebuildHierarchy.pl
Current old layout is '1'
Configured new layout is '1'
Apply new layout to all NfSen profiles:
        => ./Analysis
        => ./IPv6
        => ./live
This will reorganize all your data files. You may again rebuild your
hierarchy any time later
Do you want to continue yes/[no] yes
Make sure NfSen is not runnig: shut down NfSen:
Shutdown nfcapd: peer1:[no collector].
Shutdown nfsend:Use of uninitialized value in scalar chomp at
/usr/local/libexec/nfsen/NfSenRC.pm line 185.
Use of uninitialized value in concatenation (.) or string at
/usr/local/libexec/nfsen/NfSenRC.pm line 187.
[]Use of uninitialized value in kill at
/usr/local/libexec/nfsen/NfSenRC.pm line 188.
Can't signal nfsend: No such file or directory  at
/usr/local/libexec/nfsen/NfSenRC.pm line 192.
.Connection to server.com closed by remote host.
Connection to server.com closed

Anyone with an idea i'll appreciate.

alerts

------------------------------------------------------------------------------

_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@...
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

Importing old sflow data

Hello,

I am trying to import old sflow data for use in nfsen (nfcapd files) ,
but I am a bit confused as to whether it is possible or not. I am
running 1.3.2
The documentation mention ./nfsen -r live , and ./nfsen -l live. This
seems to go ok, but the graphs are not updated.

Any help would be appreciated

Thanks

James

------------------------------------------------------------------------------
Enter the BlackBerry Developer Challenge  
This is your chance to win up to $100,000 in prizes! For a limited time, 
vendors submitting new applications to BlackBerry App World(TM) will have
the opportunity to enter the BlackBerry Developer Challenge. See full prize  
details at: http://p.sf.net/sfu/Challenge

Re: new features in future nfsen versions?

Hi Martin,
Thnx for the input. I'll put it on the list, but there is no guarantee for any features :)
	
	- Peter

Martin Fischer wrote:
> Hy Peter
> 
> while working with NFSen me and my colleagues thougt about some  
> helpful features for NFSen to simplify working with it..
> 
> - it would be great if you (the NFSEN user) could copy channels in  
> profiles to just edit and customize channels (e.g. different mail  
> protocols differ only in portnumbers, so just copy the channel and  
> edit the port number)
> 
> - if you want to use similar channels in different profiles it would  
> be great to give the possibility to save channels to reuse them  
> whereever i want
> 
> - if i understood that correct you have to create all your channels  
> and then build the profile to include all historic data..and if you  
> add a channel after finishing the profile you only get data from now  
> on..it would be great to kind of rebuild the profile..to take the  
> current channels and re-read the flow data...or am i wrong with that??
> 
> thanks
> 
> martin
> 
> ----
> Martin Fischer
> Univie || ACOnet || VIX
> m.fischer@...
> 0043 1 4277 14034
> 
> 
> 
> 
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@...
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

--
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.haag@... Web: http://www.switch.ch/

Re: Graph detail URLs

Jobe 'Laslo' Bittman wrote:
> Ok so I'm building my own reports. I would like to just make a few wgets
> against nfsen to make some graphs. Can someone explain the args to
> rrdgraph.php?
> 
> Here is my request:
> 
> http://tools/nfsen/rrdgraph.php?cmd=get-detailsgraph&profile=./live&arg=
> R2%R1+any+traffic+1243808400+1244139300+1246558500+1246515300+1246515300
> +576+200+0+0+0
> 
> This gives me more or less the month of June , but I would like to start
> it precisely at the beginning of June.
> 
> Also are there any other args I can feed to rrdgraph to change title or
> something like that?

There is potential a better way to get the graphs by directly talking to the socket with a perl script - it
depends what
you need. Could be a bit more specific?

	- Peter

> 
> Thx
> Jobe
> 
> ------------------------------------------------------------------------------
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@...
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

--
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.haag@... Web: http://www.switch.ch/

Re: nfsend not starting up - 1.3.2

Martin List-Petersen wrote:
> Hi,
> 
> I installed nfsen today and ran into the issue, that nfsend would die on
> startup. The extract from syslog says:
> Jul  5 17:27:33 asgaard nfsen[31133]: Startup. Version: 1.3.2 $Id:
> nfsend 14 2009-06-10 08:07:06Z haag $
> Jul  5 17:27:33 asgaard nfsen[31133]: Error startup nfsend: Bad file
> descriptor
> Jul  5 17:27:33 asgaard nfsen[31133]: PANIC nfsend dies: Unable to write
> PID file: Bad file descriptor at /opt/nfsen/bin/nfsend line 181.
> 
> Checking the code, I found, that ./bin/nfsend doesn't use the config
> variable PIDDIR, but uses hardcoded VARDIR/run instead.
> 
> After replacing
> $NfConf::VARDIR/run/$pidfile
> with
> $NfConf::PIDDIR/$pidfile
> in the deamon, it has started properly.
> 
> That might be worth fixing.

Thnx! I'll fix that!

	- Peter
> 
> Kind regards,
> Martin List-Petersen
> 

--
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.haag@... Web: http://www.switch.ch/

Re: stop, rebuild or reconfig error

RebuildHierarchy.pl is an older script, when migrating from ancient nfsen 1.1. It should only be used to
upgrade to 1.2
and not directly to 1.3.x as compatibility is not guaranteed.

I need to fix the direct usage for 1.3.x first.

	- Peter

Nick Wambugu wrote:
> Hi all,
> 
> I am wondering why is my server throwing me out when I try these
> 
> RebuildHierarchy.pl
> Current old layout is '1'
> Configured new layout is '1'
> Apply new layout to all NfSen profiles:
>         => ./Analysis
>         => ./IPv6
>         => ./live
> This will reorganize all your data files. You may again rebuild your
> hierarchy any time later
> Do you want to continue yes/[no] yes
> Make sure NfSen is not runnig: shut down NfSen:
> Shutdown nfcapd: peer1:[no collector].
> Shutdown nfsend:Use of uninitialized value in scalar chomp at
> /usr/local/libexec/nfsen/NfSenRC.pm line 185.
> Use of uninitialized value in concatenation (.) or string at
> /usr/local/libexec/nfsen/NfSenRC.pm line 187.
> []Use of uninitialized value in kill at
> /usr/local/libexec/nfsen/NfSenRC.pm line 188.
> Can't signal nfsend: No such file or directory  at
> /usr/local/libexec/nfsen/NfSenRC.pm line 192.
> .Connection to server.com closed by remote host.
> Connection to server.com closed
> 
> Anyone with an idea i'll appreciate.
> 
> Rgds.
> 
> 

--
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: peter.haag@... Web: http://www.switch.ch/