Dunc | 1 Apr 2011 12:19
Favicon

Shadow Profile

Hi all,

I'd like to create separate graphs of IPv4 and IPv6 traffic. From what I
can see, creating 2 shadow profiles of live, with a simple filter on
each seems like a nice way to do it.

I've started with just the IPv4 one, I set it to type Continuous /
Shadow, and it happily went off and processed all my historical data and
created graphs for my profile, so far so good.

It does not however, create any further graphs after the time that I
created the profile. If I check the 'Stats' tab for my profile, the
'Last Update' says the current time, so it looks to be working, and also
the logs indicate something is happening (please see attachment)
however I get no more graphs after the creation time :(

My live profile is happily up to date still.

In the log attached, I'm also not convinced all the child processes
should be exiting like they are, but I'm not sure about that either.

Can anyone explain what I'm doing wrong, or how to debug this?

Thanks in advance,

Cheers,

Dunc

________________________________
(Continue reading)

Peter Haag | 5 Apr 2011 07:32
Picon

Re: Shadow Profile


On 4/1/11 12:19, Dunc wrote:
> Hi all,
> 
> I'd like to create separate graphs of IPv4 and IPv6 traffic. From what I
> can see, creating 2 shadow profiles of live, with a simple filter on
> each seems like a nice way to do it.
> 
> I've started with just the IPv4 one, I set it to type Continuous /
> Shadow, and it happily went off and processed all my historical data and
> created graphs for my profile, so far so good.
> 
> It does not however, create any further graphs after the time that I
> created the profile. If I check the 'Stats' tab for my profile, the
> 'Last Update' says the current time, so it looks to be working, and also
> the logs indicate something is happening (please see attachment)
> however I get no more graphs after the creation time :(
> 
> My live profile is happily up to date still.
> 
> In the log attached, I'm also not convinced all the child processes
> should be exiting like they are, but I'm not sure about that either.

Do the other profiles work? I assume you have a problem with nfprofile .. linking with librrd ....

	- Peter

> 
> 
> Can anyone explain what I'm doing wrong, or how to debug this?
(Continue reading)

Dunc | 5 Apr 2011 19:04
Favicon

Re: Shadow Profile

On 05/04/11 06:32, Peter Haag wrote:
>
>
>
> On 4/1/11 12:19, Dunc wrote:
>> Hi all,
>>
>> I'd like to create separate graphs of IPv4 and IPv6 traffic. From what I
>> can see, creating 2 shadow profiles of live, with a simple filter on
>> each seems like a nice way to do it.
>>
>> I've started with just the IPv4 one, I set it to type Continuous /
>> Shadow, and it happily went off and processed all my historical data and
>> created graphs for my profile, so far so good.
>>
>> It does not however, create any further graphs after the time that I
>> created the profile. If I check the 'Stats' tab for my profile, the
>> 'Last Update' says the current time, so it looks to be working, and also
>> the logs indicate something is happening (please see attachment)
>> however I get no more graphs after the creation time :(
>>
>> My live profile is happily up to date still.
>>
>> In the log attached, I'm also not convinced all the child processes
>> should be exiting like they are, but I'm not sure about that either.
>
> Do the other profiles work? I assume you have a problem with nfprofile .. linking with librrd ....
>
>       - Peter

(Continue reading)

Matias Banchoff | 5 Apr 2011 21:19
Picon

Log Scale graphs are not being generated

Hello,
   I've just configured nfsen to use another flow, so now I've got two 
flows: one using sflow and the other, netflow. The problem is I can't 
make it work the Log Scale Graphs (Line Scale graphs work ok, and Nfsen 
works with both flows).
   Any help is very welcome! :-)

Thank you!

btw: Googling I found some mails about problems with Log scale graphs, 
but it is not the same problem, I don't have any RAM or CPU Load problem.

nfsen -V
bin/nfsen: 1.3.5 $Id: nfsen 68 2010-09-09 06:04:17Z haag $

sfcapd -V
sfcapd: Version: 1.6.1 $LastChangedDate: 2010-03-05 07:50:35 +0100 (Fri, 
05 Mar 2010) $
$Id: sfcapd.c 39 2009-11-25 08:11:15Z haag $

cat /etc/debian_version
6.0

This is the output from Syslog.

When I click in Log Scale
******************************************
Apr  5 16:03:28 blackdog nfsen[30550]: connection on UNIX socket
Apr  5 16:03:28 blackdog nfsen[30550]: comm server started: 32277
Apr  5 16:03:28 blackdog nfsen[32277]: Cmd Decode: get-globals
(Continue reading)

Leandro Marinho | 5 Apr 2011 23:22
Picon
Favicon

NFSEN GRAPH LABEL ERROR

Good Night All,

I've installed nfdump-1.6.1 and nfsen-1.3.5 in a ARCH Linux Machine.

NFDUMP is working properly and NFSEN starts without a problem.

When I access the webpage 200.20.25.73/nfsen/nfsen.php, I notice that the graphs are ok, and data is being collected and ploted correctly, but the labels of the graphs are not ok. 

I would apreciate if someone can help me.

Thanks in advance.

Best Regards
Leandro

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@...
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Peter Haag | 6 Apr 2011 12:19
Picon

Re: NFSEN GRAPH LABEL ERROR

On 4/5/11 23:22, Leandro Marinho wrote:
> 
> Good Night All,
> I've installed nfdump-1.6.1 and nfsen-1.3.5 in a ARCH Linux Machine.
> NFDUMP is working properly and NFSEN starts without a problem.
> When I access the webpage 200.20.25.73/nfsen/nfsen.php, I notice that the graphs are ok, and data is
being collected and ploted correctly, but the labels of the graphs are not ok. 

?? what do you mean by that?

> I would apreciate if someone can help me.
> Thanks in advance.
> Best RegardsLeandro
>  		 	   		  
> 
> 
> 
> ------------------------------------------------------------------------------
> Xperia(TM) PLAY
> It's a major breakthrough. An authentic gaming
> smartphone on the nation's most reliable network.
> And it wants your games.
> http://p.sf.net/sfu/verizon-sfdev
> 
> 
> 
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@...
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss

--

-- 
--
Be nice to your netflow data

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
Dmitry Kovalenko | 6 Apr 2011 18:18
Picon

nfsen profile filter

Hi All

I tried to make nfsen profile with a channel filter: 'if 270860364' and got blank graphs and at that time I could filter some flows using the same statement for the "live" profile at Details tab. Does anyone know how to deal with it?  

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@...
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Dmitry Kovalenko | 7 Apr 2011 13:36
Picon

Re: nfsen profile filter

addition info: small ifindexes at nfsen channel filter are working fine, i suppose the problem is that nfsen channel filter  is not dealing with  32-bit ifindexes.

2011/4/6 Dmitry Kovalenko <crutch.kov <at> gmail.com>
Hi All

I tried to make nfsen profile with a channel filter: 'if 270860364' and got blank graphs and at that time I could filter some flows using the same statement for the "live" profile at Details tab. Does anyone know how to deal with it?  

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@...
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
Kevin G. Chege | 8 Apr 2011 10:31

Increasing NFSEN performance

Hi all,

I am running NFSEN on FreeBSD 8.1 on a machine with 6GB RAM. Is there a 
way to make NFSEN faster especially on the web interface queries? I am 
graphing about 700Mbps of traffic with origin-as on the netflow export 
from only one interface on the router.

Thanks

kevin

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev
José Manuel Agudo Cuesta | 8 Apr 2011 12:09
Picon
Favicon

Re: Increasing NFSEN performance

Hi,

I think that the primary bottleneck related to queries is disk speed. 
You can try with faster disks, and perhaps raids configurations (raid 0, 
or raid 10 for increased protection of data if needed).

Best regards,

Jose

El 08/04/11 10:31, Kevin G. Chege escribió:
> Hi all,
>
> I am running NFSEN on FreeBSD 8.1 on a machine with 6GB RAM. Is there a
> way to make NFSEN faster especially on the web interface queries? I am
> graphing about 700Mbps of traffic with origin-as on the netflow export
> from only one interface on the router.
>
>
>
> Thanks
>
>
> kevin
>
> ------------------------------------------------------------------------------
> Xperia(TM) PLAY
> It's a major breakthrough. An authentic gaming
> smartphone on the nation's most reliable network.
> And it wants your games.
> http://p.sf.net/sfu/verizon-sfdev
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@...
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>

--

-- 
Jose Manuel Agudo Cuesta (SI-CPD)    Unidad de Redes - Seguridad -
Telf.   +34-923-294400 Ext 1398      Fax   +34-923-294594
Edificio Facultad de Derecho         Pza. Universidad de Bolonia s/n
37007 SALAMANCA
ESPAÑA (SPAIN)

------------------------------------------------------------------------------
Xperia(TM) PLAY
It's a major breakthrough. An authentic gaming
smartphone on the nation's most reliable network.
And it wants your games.
http://p.sf.net/sfu/verizon-sfdev

Gmane