Re: [Nfsen-discuss] [ask] report with asn number
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: hendranata y. <hen...@ya...> - 2021-05-04 03:20:44
|
do u know how to clear data live profile? remove manually? or any other quick method? thanks On 03/05/21 17.29, hendranata saputra via Nfsen-discuss wrote: > Yes without nfasnupd all are normal . Create new profile also normal > but asn information is empty.. it is because mikrotik does not support > netflow with asn information > Anyway okay thanks > > > Sent from Yahoo Mail for iPhone > <https://overview.mail.yahoo.com/?.src=iOS> > > On Monday, May 3, 2021, 4:59 PM, Brian Candler <b.c...@po...> > wrote: > > On 03/05/2021 09:36, hendranata yahoo wrote: > > > i have tried your method and yes it is running okay.. but it seems > > only working in the LIVE profile. > > > > when i create a new profile.. it show empty graph even with > filter any. > > > > when i check the service, it seems they running twice.. > > > > [root@netflow <mailto:root@netflow> etc]# ps aux | grep Edge > > netflow 26813 0.2 0.2 34788 8092 ? S 15:33 0:00 > > /opt/nfdump/bin/nfcapd -w -D -p 9997 -u netflow -g apache -B > 200000 -S > > 1 -P /data/nfsen/var/run/p9997.pid -z -T all -I EdgeIntl -l > > /data/nfsen/profiles-data/live/EdgeIntl -x nfasnupd %d/%f > > netflow 26814 0.0 0.0 13392 384 ? S 15:33 0:00 > > /opt/nfdump/bin/nfcapd -w -D -p 9997 -u netflow -g apache -B > 200000 -S > > 1 -P /data/nfsen/var/run/p9997.pid -z -T all -I EdgeIntl -l > > /data/nfsen/profiles-data/live/EdgeIntl -x nfasnupd %d/%f > > > > > > dont have any idea why.. LIVE profile is normal and AS number > shown.. > > > > howevet in new created profile always show empty graph (filter > any). > > > Is this a separate problem? That is: if you remove the flag '-x > "nfasnupd %d/%f"' and data arrives with no ASN, are you still able to > create new profiles from this data? > > I guess you should talk to the author of nfasnupd. As far as I > can see > it's a third-party program, not part of either nfdump or nfsen. > > > > _______________________________________________ > Nfsen-discuss mailing list > Nfs...@li... > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss |