[Nfsen-discuss] Nfcapd fails to update graphs: "Can't get statinfo!"
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Giles C. <Gi...@Ca...> - 2006-08-14 15:31:31
|
Hi, I've had nfsen-1.2.4 (compiled from Source on a x64 box) running smoothly for about a week, then today I noticed that while nfcapd still seemed to be happily creating files that the graphs had stopped updating. Stopping and starting via the init script seems to have fixed things. The only clue as to what happened is in my syslog, see the "Can't get statinfo!" for the ServerWWW profile, at 5:50am the live profile started giving the same error. ServerWWW is a continuous profile with a 35day expiry and no max size. It's currently less than 1Gb in size. Live is similar 35Gb and is just a few Gig in size. /var is ext3 filesystem with less than 2% total utilisation so far. It's a new install, and the system isn't scheduled to be doing anything other than nagios & nfcapd at that time of day. Here is the log excerpt: Aug 14 05:35:00 nms /usr/local/bin/nfcapd[6530]: Signal launcher Aug 14 05:35:00 nms /usr/local/bin/nfcapd[6530]: Ident: 'router01' Flows: 5370, Packets: 68998, Bytes: 35388008, Sequence Errors: 0, Bad Packets: 0 Aug 14 05:35:00 nms /usr/local/bin/nfcapd[6529]: Launcher: Wakeup Aug 14 05:35:00 nms /usr/local/bin/nfcapd[6529]: Launcher: run command: '/usr/local/bin/nfprofile -q -p /var/nfsen//profiles -s router01 -r /var/nfsen//profiles/live/router01/nfcapd.200608140530 ' Aug 14 05:35:00 nms /usr/local/bin/nfcapd[6529]: Launcher: child 14362 terminated: 0 Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6521]: Signal launcher Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6521]: Ident: 'router02' Flows: 2550, Packets: 19067, Bytes: 4537263, Sequence Errors: 0, Bad Packets: 0 Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6520]: Launcher: Wakeup Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6520]: Launcher: run command: '/usr/local/bin/nfprofile -q -p /var/nfsen//profiles -s router02 -r /var/nfsen//profiles/live/router02/nfcapd.200608140530 ' Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6520]: Launcher: Wakeup Aug 14 05:35:03 nms /usr/local/bin/nfcapd[6520]: Launcher: child 14363 terminated: 0 Aug 14 05:35:30 nms nfsen[6532]: Run periodic at Mon Aug 14 05:35:00 2006 Aug 14 05:35:30 nms nfsen[6532]: Update profile live Aug 14 05:35:34 nms nfsen[6532]: Update profile ServerWWW Aug 14 05:35:34 nms nfsen[6532]: ServerWWW/router02/nfcapd.200608140525: Can't get statinfo! Aug 14 05:35:34 nms nfsen[6532]: ServerWWW/router01/nfcapd.200608140525: Can't get statinfo! Aug 14 05:35:36 nms nfsen[6532]: End periodic at Mon Aug 14 05:35:00 2006 Aug 14 05:35:36 nms nfsen[6532]: Run expire at Mon Aug 14 05:35:00 2006 Aug 14 05:35:36 nms nfsen[6532]: Expire profile live Aug 14 05:35:36 nms nfsen[6532]: No size limit reached Aug 14 05:35:36 nms nfsen[6532]: No time limit reached Aug 14 05:35:36 nms nfsen[6532]: Nothing to expire Aug 14 05:35:36 nms nfsen[6532]: Expire profile ServerWWW Aug 14 05:35:36 nms nfsen[6532]: No size limit reached Aug 14 05:35:36 nms nfsen[6532]: No time limit reached Aug 14 05:35:36 nms nfsen[6532]: Nothing to expire Aug 14 05:35:36 nms nfsen[6532]: End expire at Mon Aug 14 05:35:00 2006 Any ideas? It's a real shame, as the last weeks graphs haven't shown any of the issues that I've had with other tools... Until they died this morning :-( |