[Cflowd] no errors, no flows

From: Nicole Markee (nmarkee@aol.net)
Date: Tue Aug 06 2002 - 13:31:48 PDT

  • Next message: ystolerov@univ.haifa.ac.il: "[Cflowd] FlowScan: Invalid index in cflowd flow file"

    I have a router exporting flows to two RedHat 7.2 systems both running
    arts++-1-1-a8 and cflowd-2-1-b1. One one Linux box, I have no problems. I
    get flows and no errors. On the other Linux box, I get flow files and arts
    files but they are empty. flowwatch returns nothing. The stanzas in
    cflowd.conf on both Linux boxes are identical.

    Tailing the logs on the problem machine shows no errors, just what I would
    expect:

    Aug 6 16:24:30 statsxx cfdcollect[2514]: [I] sleeping for 132 seconds.
    Aug 6 16:26:42 statsxx cfdcollect[2514]: [I] awakened by alarm.
    Aug 6 16:26:43 statsxx cfdcollect[2514]: [I] connected to 127.0.0.1:2055
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] 127.0.0.1 has data for 2
    routers.
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] got data for router
    66.185.xxx.xx from 127.0.0.1
    Aug 6 16:26:59 statsxx cflowd[2565]: [I] sent data to 127.0.0.1:32835
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] wrote data for router
    66.185.xxx.xx
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] got data for router
    66.185.xxx.xx from 127.0.0.1
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] wrote data for router
    66.185.xxx.xx
    Aug 6 16:26:59 statsxx cfdcollect[2514]: [I] sleeping for 133 seconds.

    I found many instances of this problem on the list archives, but no actual
    answers, remarkably. The only answer I saw, make install as root, I tried
    with no success.

    Also, my "cryptic error message" from last week was the result of a shared
    mem segment that wasn't removed when cflowd was killed. I have to manually
    kill it with ipcrm shm xxxxx. I did find that in the archives, but only
    after extensive searches with google restricted to site:caida.org. I'd
    strongly recommend that method for anyone having problems finding answers in
    the archives.

    -Nicole

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd



    This archive was generated by hypermail 2.1.4 : Tue Aug 06 2002 - 13:49:30 PDT