Re: .rrd files not generating.

Date view Thread view Subject view Author view

Subject: Re: .rrd files not generating.
From: David Reoch (dave@warpspeed.net)
Date: Wed Apr 23 2003 - 15:49:00 CDT

I had the same issues when building my flowscan instance.

Here's what I suggest.

Reboot your system, making sure to not use any rc.* or init files to 
startup cflowd, flowscan, etc.

Then, start them all manually with something like this:

# /usr/local/arts/sbin/cflowdmux
# /usr/local/arts/sbin/cflowd -s 300 -O 0 -m \ 
/usr/local/arts/etc/cflowd.conf
# cd /usr/local/arts/data/cflowd/flows/bin/
# ./flowscan

NOTE:  My instance does use the patched cflowd (as shown by the '-s 300' 
option).

Many assumptions are made here, like all your config files are built, 
your router is talking to your host correctly, etc. etc.  But when I had 
the same symptom, I just found that I had leftover junk hangin' around, 
and once I started cleanly and manually, it's running great.

You can also use 'tcpdump host [your router's ip] and [your cflowd 
server's ip]' to ensure that your router is sending data to your server.

There are, of course, about a thousand other things to debug...

dave


Leigh Sharpe wrote:
> It looks like FlowScan is not finding any flow files to work with.
> Is the FlowFileGlob directive pointing to the correct directory?
> Are you using Flow-Tools or Cflowd? Are the flow files present?
> Regards,
>              Leigh
>  
> Leigh Sharpe
> Network Systems Engineer
> Pacific Wireless
> Ph 9584 8966
> Mob 0408 009 502
> email lsharpe@pacificwireless.com.au <mailto:lsharpe@pacificwireless.com.au>
> web www.pacificwireless.com.au <http://www.pacificwireless.com.au>
> 
>     ----- Original Message -----
>     From: Tausif Ahmad <mailto:tausifh@sat.net.pk>
>     To: flowscan <mailto:flowscan@net.doit.wisc.edu>
>     Sent: Sunday, April 20, 2003 3:30 PM
>     Subject: .rrd files not generating.
> 
>     Hi !
> 
>     I have installed Flowscan and all its prequisites. Now when I try to
>     run flowscan it starts
>     like :
> 
>     ./flowscan
>     Loading "/var/local/flows/bin/local_nets.boulder" ...
>     sleep 30...
>     sleep 30...
>     sleep 30...
>     sleep 30...
> 
>     But it is missing
> 
>     CampusIO: Cflow::find took 394 wallclock secs (350.03 usr +  0.52
>     sys = 350.55 CPU) for
>     23610455 flow file bytes, flow hit ratio: 254413/429281
>     flowscan-1.013 CampusIO: report took  3 wallclock secs ( 0.44 usr + 
>     0.04 sys =  0.48 CPU)
> 
>     and .rrd files are not generating........
> 
>     Can anybody tell something about it ?
> 
>     Regards,
> 
>     Tausif Ahmad.
> 



--
Help        mailto:majordomo@net.doit.wisc.edu and say "help" in message body
Unsubscribe mailto:majordomo@net.doit.wisc.edu and say
"unsubscribe flowscan" in message body
Archive     http://net.doit.wisc.edu/~plonka/list/flowscan/archive/

Date view Thread view Subject view Author view

This archive was generated by hypermail 2b25 : Wed Apr 23 2003 - 15:50:14 CDT