Re: [Nfsen-discuss] Nfcapd fails to update graphs: "Can't get statinfo!"
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: Giles C. <Gi...@Ca...> - 2006-08-16 06:29:01
|
Hi Peter,=20 >nfsen runs the command nfdump -I .. to retrieve statinfo from=20 >data files. For any unobvious reason, this command could not be=20 >completed. You may change line 481 in libexec/NfSen.pm and add=20 >'$!' so the line looks like: > > >$Log::ERROR =3D "$name/$source/nfcapd.$tstamp: Can't get=20 >statinfo: $!"; > I've edited that line, so we'll see if it happens again, and if it does I'll relay the information back to you. >This should give you more information about the reason why the=20 >command failed. > > >Did you change any settings/permissions/users/groups in the=20 >meantime? Did you manipulate any files as root? - just possible=20 >sources for this error. > Well, something interesting, though perhaps unrelated - when I created the profile via the web interface the first few capture files were owned by the apache user and group, but when I restarted the nfcapd the next time via the init script the files are owned by netflow user and apache group, the group has read access, while the user has read write access. I'm keeping 35 days of data presently for each profile, so it should not be attempting to expire anything yet. Other than that the box is still in testing (probably until the end of the month, when I'll switch our accounting over to nfsen/nfdump from September - I'm the only one with access to the box, and from that no one would have been making any changes at that time in the morning. >I run nfsen-1.2,4 on our production server without any problems=20 >since ever. Maybe you can figure why this happened. I'd be=20 >interested in that. I'm glad to hear it, perhaps it was just a blip. Any info I get I'll let you know. One other thing, I notice that the dump files are relatively uncompressed - would that be a feature that might be implemented in the future? Another option would be to use a compressed filesystem to store the files on, does such a filesystem exist under Linux? Many Thanks Giles |