From: Jeff Strahl (Jeff.Strahl@grandecom.com)
Date: Mon Jun 17 2002 - 12:36:55 PDT
Hello,
I have had cflowd & cflowdmux (v. 2.1b1) working for a number of months now
with no problems. However, about a month ago, we made some network changes
(implemented a new router as the gateway) that would seemingly be
transparent to this process. Ever since then, cflowd has not been working
properly. Whenever the process is started, everything appears fine, syslog
reports cflowd started properly, no errors, however, whenever I issue
'netstat -an', cflowd (port 2055) does not appear at all. Thus, it appears
as if cflowd is not attempting to bind the port as expected.
Here are the appropriate logs:
############## syslog #####################
[root@--------- flows]# tail -f /var/log/messages
Jun 17 14:35:11 --------- PAM_unix[32354]: (system-auth) session closed for
user blah
Jun 17 14:35:11 --------- PAM_unix[32372]: (system-auth) session opened for
user blah by luser(uid=0)
Jun 17 14:35:11 --------- cflowdmux[32371]: [I] cflowdmux (version
cflowd-2-1-b1) started.
Jun 17 14:35:11 --------- cflowdmux[32371]: [I] created 2101248 byte packet
queue shmem segment {CflowdPacketQueue.cc:247}
Jun 17 14:35:11 --------- cflowdmux[32371]: [I] attached to 2101248 byte
packet queue at 0x401bc000
Jun 17 14:35:11 --------- cflowdmux[32371]: [I] created semaphore: id 0
Jun 17 14:35:11 --------- PAM_unix[32372]: (system-auth) session closed for
user blah
Jun 17 14:35:11 --------- cflowd[32389]: [I] cflowd (version cflowd-2-1-b1)
started.
Jun 17 14:35:11 --------- cflowd[32389]: [I] got semaphore: id 0
Jun 17 14:35:11 --------- cflowd[32389]: [I] attached to 2101248 byte packet
queue at 0x401bc000
[root@--------- flows]#
##########################################
############ [netstat -an] ###################
[root@--------- flows]# netstat -an
Active Internet connections (servers and established)
Proto Recv-Q Send-Q Local Address Foreign Address State
tcp 0 0 0.0.0.0:80 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:49 0.0.0.0:* LISTEN
tcp 0 0 0.0.0.0:22 0.0.0.0:* LISTEN
udp 0 0 0.0.0.0:4921 0.0.0.0:*
udp 0 0 0.0.0.0:4920 0.0.0.0:*
udp 0 0 0.0.0.0:4278 0.0.0.0:*
udp 0 0 0.0.0.0:3968 0.0.0.0:*
raw 0 0 0.0.0.0:1 0.0.0.0:* 7
raw 0 0 0.0.0.0:6 0.0.0.0:* 7
Active UNIX domain sockets (servers and established)
Proto RefCnt Flags Type State I-Node Path
unix 5 [ ] DGRAM 59958086 /dev/log
unix 0 [ ] STREAM CONNECTED 204 @0000001b
unix 0 [ ] DGRAM 59978505
unix 0 [ ] DGRAM 59978498
unix 0 [ ] DGRAM 59970349
unix 0 [ ] DGRAM 59970340
unix 0 [ ] DGRAM 59958098
unix 0 [ ] DGRAM 36774057
[root@--------- flows]#
############################################
**The box name & user accounts have been altered for this email in order to
protect the innocent, guilty, and otherwise ignorant :)
Thanks in advance for your help with this matter,
Jeff
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Jeff C. Strahl
Sr. Network Administrator
Packet Networks
Grande Communications Networks, Inc.
401 Carlson Circle
San Marcos, TX 78666
Phone - 512.878.5465
Cell - 830.620.8176
Fax - 512.878.4284
Email: jeff.strahl@grandecom.com
We will individually and as a Team:
- Work cooperatively, delivering what we said we would
- Be honest and truthful - showing respect for others
- Be easy to do business with - internally and externally
- Serve our customers and communities with passion and
commitment
- HAVE FUN!
For you, the world.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
_______________________________________________
Cflowd mailing list
Cflowd@caida.org
http://login.caida.org/mailman/listinfo/cflowd
This archive was generated by hypermail 2.1.4 : Mon Jun 17 2002 - 12:56:06 PDT