FlowScan Mailing List: Re: cflowd build problems ("Re: cfl

Subject: Re: cflowd build problems ("Re: cflowd tar extract problem on Solaris 2.6")
From: amin hassan (aminhassanali@hotmail.com)
Date: Fri Apr 19 2002 - 07:40:42 CDT

Hi Dave,

Thanks for your help.... now i have installed and configured arts and cflowd on solaris 2.6. I configured cflowd.conf and cfdcollector.conf files according to my requirements. I have started the cflowdmux, cflowd and cfdcollector without any error. I have configured my router and i captured packets on my machine through snoop command to make sure that my machine is getting UDP packets from Router. I can also see some outputs when i do

# ps -ef | grep cflowdmux
    root 5537     1 0 11:23:38 pts/7    0:00 ./cflowdmux
    root 5652   607 0 12:29:20 pts/7    0:00 grep cflowdmux
# truss -vall -p 5537
poll(0xEFFFD318, 1, 2000)       (sleeping...)
poll(0xEFFFD318, 1, 2000)                       = 0
        fd=4 ev=POLLRDNORM rev=0
semop(0, 0xEFFFF288, 2)                         = 0
        semnum=0     semop=0     semflg=SEM_UNDO
      &n! bsp; semnum=0     semop=1     semflg=SEM_UNDO
time()                                          = 1019219374
semop(0, 0xEFFFF300, 1)                         = 0
        semnum=1     semop=-1    semflg=IPC_NOWAIT|SEM_UNDO
sigprocmask(SIG_UNBLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0
sigprocmask(SIG_BLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0
poll(0xEFFFD318, 1, 2000)     &n! bsp;                 = 0
        fd=4 ev=POLLRDNORM rev=0
semop(0, 0xEFFFF288, 2)                         = 0
        semnum=1     semop=0     semflg=SEM_UNDO
        semnum=1     semop=1     semflg=SEM_UNDO
time()                                          = 1019219376
semop(0, 0xEFFFF300, 1)              ! ;           = 0
        semnum=0     semop=-1    semflg=IPC_NOWAIT|SEM_UNDO
sigprocmask(SIG_UNBLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0
sigprocmask(SIG_BLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0
poll(0xEFFFD318, 1, 2000)                       = 0
        fd=4 ev=POLLRDNORM rev=0
semop(0, 0xEFFFF288, 2)                         = 0
        semnum=0     semop=0   &nb! sp; semflg=SEM_UNDO
        semnum=0     semop=1     semflg=SEM_UNDO
time()                                          = 1019219378
semop(0, 0xEFFFF300, 1)                         = 0
        semnum=1     semop=-1    semflg=IPC_NOWAIT|SEM_UNDO
sigprocmask(SIG_UNBLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0
sigprocmask(SIG_BLOCK, 0xEFFFF2F8, 0x00000000) = 0
         set = 0x00000001 0 0 0!

Now problem is, it should create a file /usr/local/arts/data/cflow/10.1.0.1 but it doesnot create this file. This, i have mentioned in FlowDir in OPTIONS stanza of cflowd.conf file. I have specified flows in the COLLECT portion of the CISCOEXPORTER stanza.

any idea?? help will be highly apprecaited

one more thing, where can i see the syslog messages?

thanks

regards,

Amin

>From: Dave Plonka

>Reply-To: flowscan@net.doit.wisc.edu

>To: flowscan@net.doit.wisc.edu

>CC: amin hassan

>Subject: cflowd build problems ("Re: cflowd tar extract problem on Solaris 2.6")

>Date: Tue, 16 Apr 2002 11:06:27 -0500

>MIME-Version: 1.0

>Received: from [128.104.31.31] by hotmail.com (3.2) with ESMTP id MHotMailBE85A1DE00444004370B80681F1FC1D30; Tue, 16 Apr 2002 09:52:47 -0700

>Received: from dplonka by mil.doit.wisc.edu with local (Exim 3.13 #1)id 16xVTQ-0000Zm-00; Tue, 16 Apr 2002 11:06:28 -0500

>From dplonka@mil.doit.wisc.edu Tue, 16 Apr 2002 09:52:50 -0700

>Message-ID: <20020416110627.C28982@doit.wisc.edu>

>References:

>X-Mailer: Mutt 1.0.1i

>In-Reply-To: ; from aminhassanali@hotmail.com on Tue, Apr 16, 2002 at 06:53:32AM +0000

>Organization: UW-Madison, DoIT, Network Services

>X-VMS-Error: %SYSTEM-W-SUBRNG3, subscript 3 range error, PC=00000000, PS=00000582

>X-Shakespearean-Insult: Thou goatish fool-born skainsmate

>Sender: Dave Plonka

>On Tue, Apr 16, 2002 at 06:53:32AM +0000, amin hassan wrote:

> >

> > Hi Dave,

> >

> > Thanks for your reply. Using GNU tar, i able to configure it. Now i am

> > not facing any error while executing ./configure command, but when i

> > execute 'make' command, it gives error. I am using GNU make 3.79.1.

> > The error is

> >

> > # make

> > cd snmp++; make

> > make[1]: Entering directory `/cflow/cflowd-2-1-b1/snmp++'

> > cd classes; make

> > make[2]: Entering directory `/cflow/cflowd-2-1-b1/snmp++/classes'

> > cd src; make

> > make[3]: Entering directory `/cflow/cflowd-2-1-b1/snmp++/classes/src'

> > g++ -D__unix__ -I../include/snmp++ -I./ -g -O2 -c address.cpp -o

> > address.o

> > ../../../libtool: g++: not found

> > can you help me out?

>Umm, g++ (the GNU C++ compiler) is missing?

>This really isn't the place to discuss how to install (or find in your

>PATH) the C++ compiler. Also, cflowd is no longer maintained so

>investing significant time in it is questionable. There's a cflowd

>mailing list (that was recently fixed, but the archive is broken):

> http://www.caida.org/tools/measurement/cflowd/#maillist

>My suggestion to you, as has been to others with problems building

>cflowd, is to use the flow-capture daemon supplied with flow-tools,

>instead:

> http://www.splintered.net/sw/flow-tools/

>Instructions on how to use FlowScan with flow-tools are here:

> http://net.doit.wisc.edu/~plonka/list/flowscan/archive/1117.html

>Dave

>--

>plonka@doit.wisc.edu http://net.doit.wisc.edu/~plonka ARS:N9HZF Madison, WI