[Nfsen-discuss] resetting profile data size
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Ivan A. B. <iv...@li...> - 2006-07-19 09:32:39
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, Following yesterday's $PROFILEDATA filesystem failure and consequent data loss I recreated the relevant directories under the $PROFILEDATA heirarchy. The problem is that the profiles still think they have all the data in them (as far as profile size goes in the stats page) .. however the profileinfo (in the details page) echoes the true details about the start/end times of the profile-data. What this means is that, currently, nfsen is reporting the profile-size as 891.5GB (real size 386MB), but the start/end times are 10:00-10:15 today (current time 10:22). This means that it has expired data since the PROFILEDATA filesystem has been brought back online (and empty). How do I go about getting nfsen to notice the disk space has changed, and is lower than it currently thinks? The part caveat to that is that rebuilding the profile has always wiped the RRD data for me (and rebuilt it using the nfcapd logs) which means I lose a lot of graph data - 4 months in my case. Hacking the profile.dat may be a solution but, if there is a better/cleaner way it would be good, as I'll be documenting it for others to know. For info, I'm using the latest snapshot (that I know of): =================================== nfsen: snapshot-20060412 $Id: nfsen 55 2006-04-12 08:35:59Z peter $ nfdump: Version: snapshot-20060413 $LastChangedDate: 2006-04-13 14:11:48 +0200 (Thu, 13 Apr 2006) $ $Id: nfdump.c 69 2006-04-13 12:11:48Z peter $ =================================== Cheers Ivan - -- Ivan Beveridge <iv...@li...> http://www.linx.net/ -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.1 (MingW32) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFEvfweQQZN5jq7vncRAvSMAKCf7ehLXwTBaLZqBMifiDqAs9IK2QCfbcxM TZn1ySxJ9jGzLIrwPsf3b4s= =pS8t -----END PGP SIGNATURE----- |