Re: [Nfdump-discuss] Cannot replicate flows to external host

[Brian E. <bep...@ia...>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Hi Stephen,

Any possibility that the security context is causing SELinux to block?

Thanks,
ep

On 08/05/2015 04:26 PM, Stephen Fulton wrote:
> Hi there,
> 
> I'm running nfdump v1.6.13 and I've configured nfcapd to replicate
>  incoming v9 flows to an external host, but there are errors in
> syslog and no egress flows are exported.  Here's the config:
> 
> /usr/local/bin/nfcapd -w -D -p 9995 -u www -g www -B 200000 -S 1 -P
>  /var/run/p9997.pid -z -I lns01-cgy1 -l 
> /var/nfsen/profiles-data/live/rtr1 -s -1000 -R 1.1.1.1/2005
> 
> I've verified nothing is being exported from the source server, and
>  nothing is received by the destination server, using tcpdump.
> 
> I'm seeing these messages repeatedly in my logs, and these only
> appear when nfcapd is configured to replicate flows:
> 
> Aug  5 16:20:49 outpost05 nfcapd[87329]: ERROR: sendto():
> Permission denied Aug  5 16:20:50 outpost05 nfcapd[87326]: ERROR:
> sendto(): Permission denied Aug  5 16:21:21 outpost05 last message
> repeated 46 times
> 
> Any ideas?
> 
> -- Stephen
> 
> ----------------------------------------------------------------------
- --------
>
> 
_______________________________________________
> Nfdump-discuss mailing list Nfd...@li... 
> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
> 



- -- 
Brian Epstein <bep...@ia...>                     +1 609-734-8179
Manager, Network and Security           Institute for Advanced Study
Key fingerprint = A6F3 9F5A 26C5 5847 79ED  C34C C0E5 244A 55CA 2B78
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2
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=Hzv/
-----END PGP SIGNATURE-----