Re: [Nfdump-discuss] nfsen syslog problem

[Peter H. <pet...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1



- --On August 8, 2007 16:51:54 +0200 Xavier Fustero <xfu...@xt...> wrote:

| Hi,
|
| I have installed nfsen on a server and added two routers in the config
| file (tramuntana and garbi). Then I get a strange message starting it.
|
| [reta]/opt/nfsen/bin # ./nfsen.rc start
| -n Starting nfcpad:
| -n tramuntana
| -n garbi
| done.
| -n Starting nfsen-run:
| unix dgram connect: Socket operation on non-socket
| at /opt/nfsen/bin/nfsen-run line 585
| unix dgram connect: Socket operation on non-socket
| at /opt/nfsen/bin/nfsen-run line 79
| no connection to syslog available at /opt/nfsen/bin/nfsen-run line 79
| done.

Could you please try the 1.3b. nfsen-run is an older nfsen version. If you start from 
scratch - start with 1.3b.

    - Peter
|
| However, I can see nfcapd processes running on my server:
|
|  0 S  netflow 16266     1   0  40 20        ?    397        ? 16:42:00 ?
| 0:00 /usr/local/bin/nfcapd -w -D -I tram
|  0 S  netflow 16273     1   0  40 20        ?    261        ? 16:42:00
| pts/7       0:00 /usr/local/bin/nfcapd -w -D -I garb
|  0 S  netflow 16279     1   0  40 20        ?    397        ? 16:42:00 ?
| 0:00 /usr/local/bin/nfcapd -w -D -I garb
|  0 S  netflow 16260     1   0  40 20        ?    261        ? 16:42:00
| pts/7       0:00 /usr/local/bin/nfcapd -w -D -I tram
|
|
| and new data is collected in the $BASEDIR/profiles/live/[tramuntana|
| garbi] directories. Unfortunately, when I connect to the web page
| http://localhost/nfsen/nfsen.php I can't see any data.
|
| I have running syslog-ng on this server. I am wondering if there is a
| compatibily problem with the perl package Sys::Syslog and syslog-ng.
|
| I don't have any option to create a new profile on the top-right
| combobox (selected profile). I read somewhere to click on the Stats tab
| but there I can just see my two sources without option to edit anything
| but Max.Size and Expire.
|
| Does anyone can give me a clue about the above error and how create or
| edit a profile?
|
| Thanks a lot,
| Xavi
|
|
| -------------------------------------------------------------------------
| This SF.net email is sponsored by: Splunk Inc.
| Still grepping through log files to find problems?  Stop.
| Now Search log events and configuration files using AJAX and a browser.
| Download your FREE copy of Splunk now >>  http://get.splunk.com/
| _______________________________________________
| Nfdump-discuss mailing list
| Nfd...@li...
| https://lists.sourceforge.net/lists/listinfo/nfdump-discuss



- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH, Werdstrasse 2, P.O. Box,  CH-8021   Zurich, Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.3 (Darwin)

iQCVAwUBRrrTIv5AbZRALNr/AQKZjAP/ZdGvXqSQ8gYkN3jbpE7meRtfW90atGC2
3a6dlnRy+G3kYKjShR7W5T5+8Bzweq8ocukvxHlN849wVdzSm0wKd5SuJhHXvyrh
fs9Y9uEKXrNOMS0v7MzvqmYMd14+T+likyXnbGORc4yYXm88R+ojhQ2GZOc+mdjn
C7sngaedJJo=
=YzEg
-----END PGP SIGNATURE-----