Re: [Nfsen-discuss] problem with more than 10 sources with the latest snapshot
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Peter H. <ha...@sw...> - 2006-08-09 14:01:54
|
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Yann, - -------- Original Message -------- From: Yann Berthier <yb...@ba...> To: nfs...@li... Subject: [Nfsen-discuss] problem with more than 10 sources with the latest snapshot Date: Wed Aug 09 2006 13:53:51 GMT+0200 (CEST) > Hi Peter, > > It seems that i triggered a bug when trying to have more than 10 > sources, probably in the pid generation routine: nfcapd logs > "Another collector with pid 6312 is already running, and configured > for '/data/nfsen/profile/live/cat2'" at start time, so the nfcapd > process for this source is not spawned > > Reproducable on another machine, another OS, with 12 sources: > > Shutdown nfcpad: 6:[8912] 11:[8917] 3:[8922] 7:[8927] 9:[8932] > 12:[8937] 2:[8942] 8:[8947] 1:[8952] 4:[8957] 10:[no pid file found!] > 5:[no pid file found!]. > > i have not tried with older releases Well it seems, as you really configured the same data directory '/data/nfsen/profile/live/cat2' twice: nfcapd recognizes if there is already another process running, using the same data directory. It checks if, the other process is really running, or dead. This is not based on the pid file, but on shared memory which nfcapd/nfexpire are using to communicate. ( IPC ). So in your case nfcapd really found this process running. I guess there is a configuration issue, or a process which is still hanging around for some reason. Stop all nfcapd processes and check in the ps output, if really all nfcapd collectors stopped. There should be no more shared memory segements allocated. Could you verify that and come back with your findings. - Peter > > cheers, > > - yann > > ------------------------------------------------------------------------- > Using Tomcat but need to do more? Need to support web services, security? > Get stuff done quickly with pre-integrated technology to make your job easier > Download IBM WebSphere Application Server v.1.0.1 based on Apache Geronimo > http://sel.as-us.falkag.net/sel?cmd=lnk&kid=120709&bid=263057&dat=121642 > _______________________________________________ > Nfsen-discuss mailing list > Nfs...@li... > https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > - -- _______ SWITCH - The Swiss Education and Research Network ______ Peter Haag, Security Engineer, Member of SWITCH CERT PGP fingerprint: D9 31 D5 83 03 95 68 BA FB 84 CA 94 AB FC 5D D7 SWITCH, Limmatquai 138, CH-8001 Zurich, Switzerland E-mail: pet...@sw... Web: http://www.switch.ch/security -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.3 (Darwin) iQCVAwUBRNnqxf5AbZRALNr/AQKoMQQAjBCNNmaKEgnSf+jlIkFRAL6Jn2ViRK0g aOeEN02aHKAE8PB0NGON7YoHHVD8P5uQEdDgkVlXIAPQ9BA8dGR3VZ4FHW4e1/bD JbGDEGUrLgbDby2cAViweFjV+c7T/UWdcj3tfkb5mI6fERfaWT6/hFGQzqxomeYL r1t8RYZObBA= =PuDU -----END PGP SIGNATURE----- |