Re: [Nfsen-discuss] troubles inmporting old data

[Peter H. <ha...@sw...>]

-----BEGIN PGP SIGNED MESSAGE-----



- --On April 10, 2006 13:51:01 -0700 Brian Jones <wor...@gm...> wrote:

| Hello again folks,
|
| I'm still looking for some help here.
|
| As I mentioned a few days back, I seem unable to impot my older nfdump logs.
|
| I thought this was initially due to some modification I made to the RRAs,
| but it wasn't. Then I thought it was related to the snapshot builds.
|
| Over the weekend I went back to nfsen 1.2.4 and I still have the same issue.

snapshot builds and 1.2.4 do not differ in respect of importing sources. However,
note, that going back to 1.2.4 from a snaptshot needs manual cleanup of rrd files.

|
| The odd thing is when I started with nfsen 1.2.4 a month ago I was able to
| import all the data I had to that point. So its almost like I've accumulated
| some "bad" data in the mean time.
|
| Here's the error I'm getting:
|
| Apr 10 10:20:31 cactiv2 nfsen[20389]: ERROR Update RRD time: '200603181325',
| db: 'anaheim_out', profile: 'live': ERROR while updating RRD DB
| anaheim_out.rrd: illegal attempt to update using time 1142717100 w
| hen last update time is 1144689000 (minimum one second step)
|
|
| I had imported 5+ days of data from this same set before. I'm now at about
| 30 days and having problems.
|
| Also, the stats page in nfsen shows the full time range of data 3/18/2006
| but the graphs only start today.

If the stats page shows the correct time range, you're out of sync with RRDs.
In that case a rebuild must bring back your graphs. If not, you may have a
file permission promlem.

For the live profile:
1. To start over cleanly:
   Stop nfsen-run -> kill -TERM
2. You may savely move away all old rrd and gif files: mv *rrd *gif /tmp
3. Make sure all sources span the same time range. If this is not the case,
   make sure at least an empty file exists in each source directory with the
   correct name the very first timeslot.
4. make sure the profile live is unlocked: ./nfsen -m live -U
5. rebuild profile live: ./nfsen -r live
   Check the profile stats, which are printed after scanning the source files.
   New, but empty rrd files have been recreated now.
6. start nfsen-run: /full/path/to/nfsen-run
7. watch your nfsen log file: It must show an entry for updating profile live.
   RRD files get updated now. Graphs are created at the end of the periodic cycle.
   When the update is done, you see the updated profile in the frontend.

    - Peter
|
| Brian



- --
_______ SWITCH - The Swiss Education and Research Network ______
Peter Haag,  Security Engineer,  Member of SWITCH CERT
PGP fingerprint: D9 31 D5 83 03 95 68 BA  FB 84 CA 94 AB FC 5D D7
SWITCH,  Limmatquai 138,  CH-8001 Zurich,  Switzerland
E-mail: pet...@sw... Web: http://www.switch.ch/
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (Darwin)

iQCVAwUBRDthAv5AbZRALNr/AQHCvQP+OQ2zQE8ZplJUkvTHlCrtwmOPgRrZXL8h
RzW4fgq1j6EfvideElsNCHwJVJ1EDggneRlMImy9iNiZC058DaKKIzfDUkPDqF0v
6nc15SqILajlwUH9+XxwlSi0q+tKj2B08DvLs/SGLEcC1iXR4DRwc6S/gFu3tlst
gstWIynsw48=
=HtOj
-----END PGP SIGNATURE-----