[Cflowd] Problem running cflowdmux

From: David Mitchell (mitchell@ucar.edu)
Date: Fri Apr 26 2002 - 15:30:36 PDT

  • Next message: Sherry Lin: "[Cflowd] how to bump up flows processing power?"

    Greetings,

    I don't know if anyone is actively supporting CFlowd at this point,
    but I've run into a problem. I've compiled version 2-1-b1 from
    source on a Linux box. I run cflowdmux, and it seems to start up
    OK. At least according to the syslog output:

    Apr 26 16:18:55 flowscan cflowdmux[31748]: [I] cflowdmux (version
    cflowd-2-1-b1) started.
    Apr 26 16:18:55 flowscan cflowdmux[31748]: [I] created 2101248 byte packet
    queue shmem segment {CflowdPacketQueue.cc:247}
    Apr 26 16:18:55 flowscan cflowdmux[31748]: [I] attached to 2101248 byte
    packet queue at 0x401be000
    Apr 26 16:18:55 flowscan cflowdmux[31748]: [I] created semaphore: id 0

    But, it never does anything. In fact, it never even attempts to
    listen for the UDP packets. In the section 'cflowd debugginer' of
    the config file, it lists this type of problem as "a serious
    problem which should be reported to the author", so I'm writing
    in the hopes that you all can help out. The curious thing is that
    if I use strace to attach to the process, it opens up the UDP
    socket as soon as I attach! It never actually reads any data
    though.

    flowscan:/var/log# strace -p 31748
    time([1019860114]) = 1019860114
    getpid() = 31748
    rt_sigaction(SIGPIPE, {0x4016c578, [], 0x4000000}, {SIG_DFL}, 8) = 0
    send(3, "<179>Apr 26 16:28:34 cflowdmux[3"..., 140, 0) = 140
    rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
    socket(PF_INET, SOCK_DGRAM, IPPROTO_IP) = 4
    fcntl(4, F_GETFL) = 0x2 (flags O_RDWR)
    fcntl(4, F_SETFL, O_RDWR|O_NONBLOCK) = 0
    setsockopt(4, SOL_SOCKET, SO_REUSEADDR, [1], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [131032], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [196548], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [229306], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [245685], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [253874], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [257969], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [260016], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [261040], 4) = 0
    setsockopt(4, SOL_SOCKET, SO_RCVBUF, [261040], 4) = 0
    time([1019860114]) = 1019860114
    getpid() = 31748
    rt_sigaction(SIGPIPE, {0x4016c578, [], 0x4000000}, {SIG_DFL}, 8) = 0
    send(3, "<182>Apr 26 16:28:34 cflowdmux[3"..., 98, 0) = 98
    rt_sigaction(SIGPIPE, {SIG_DFL}, NULL, 8) = 0
    bind(4, {sin_family=AF_INET, sin_port=htons(9996),
    sin_addr=inet_addr("0.0.0.0")}}, 16) = 0
    rt_sigaction(SIGHUP, NULL, {SIG_DFL}, 8) = 0
    rt_sigaction(SIGHUP, {0x804d950, [], 0x4000000}, {SIG_DFL}, 8) = 0
    rt_sigprocmask(SIG_UNBLOCK, [HUP], NULL, 8) = 0
    rt_sigprocmask(SIG_BLOCK, [HUP], NULL, 8) = 0
    select(5, [4], NULL, NULL, {2, 0}) = 1 (in [4], left {2, 0})
    time(NULL) = 1019860114
    semop(0, 0xbffff000, 2

    -- 
    -----------------------------------------------------------------
    | David Mitchell (mitchell@ucar.edu)       Network Engineer IV  |
    | Tel: (303) 497-1845                      National Center for  |
    | FAX: (303) 497-1818                      Atmospheric Research |
    -----------------------------------------------------------------
    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd
    


    This archive was generated by hypermail 2.1.4 : Fri Apr 26 2002 - 15:47:33 PDT