[Cflowd] Problems with cflowd..

From: Shon Elliott (shon.elliott@optigate.net)
Date: Tue Mar 18 2003 - 15:45:35 PST

  • Next message: Rashmi H.R: "[Cflowd] not getting any output through artsports........"

    -----BEGIN PGP SIGNED MESSAGE-----
    Hash: SHA1

    I have been experiencing a few peculiar problems with cflowd. cfdcollect
    will simply exit, no error message as to why. This causes cflowd to eat
    up alot of memory until the system has no more resources. When I noticed
    this, I tried to restart cflowd via /etc/init.d/cflowd stop and then
    /etc/init.d/cflowd start

    the script goes through and says it's starting the programs
    the logs show the programs starting..

    but when i do a grep on ps to show me process matching 'cf' the only
    ones that show up are cfdcollect. here is an excerpt from the logs
    showing the programs starting

    Mar 18 14:50:08 netflow cflowdmux[30144]: [I] cflowdmux (version
    cflowd-2-1-b1) started.
    Mar 18 14:50:09 netflow cflowd[30147]: [I] cflowd (version
    cflowd-2-1-b1) started.
    Mar 18 14:50:09 netflow cflowd[30147]: [I] got semaphore: id 0
    Mar 18 14:50:10 netflow cfdcollect[30150]: [I] cfdcollect (version
    cflowd-2-1-b1) started with 1 cflowd instances.
    Mar 18 14:50:11 netflow cfdcollect[30150]: [I] sleeping for 299 seconds.

    cflowd runs as a user, not as root, as we had it setup to keep things
    from running as root for security reasons. upon seeing it was not going
    to run as a user, I tried running it as root. the processes stayed on,
    but received no data from the routers.

    data from the logs on the root starts excerpt:

    Mar 18 14:57:21 netflow cflowdmux[30236]: [I] cflowdmux (version
    cflowd-2-1-b1) started.
    Mar 18 14:57:21 netflow cflowdmux[30236]: [I] created 2101248 byte
    packet queue shmem segment {CflowdPacketQueue.cc:247}
    Mar 18 14:57:21 netflow cflowdmux[30236]: [I] attached to 2101248 byte
    packet queue at 0x401b2000
    Mar 18 14:57:21 netflow cflowdmux[30236]: [I] created semaphore: id 0
    Mar 18 14:57:57 netflow cflowd[30243]: [I] cflowd (version
    cflowd-2-1-b1) started.
    Mar 18 14:57:57 netflow cflowd[30243]: [I] got semaphore: id 0
    Mar 18 14:57:57 netflow cflowd[30243]: [I] attached to 2101248 byte
    packet queue at 0x416b5000
    Mar 18 14:59:13 netflow cfdcollect[30268]: [I] cfdcollect (version
    cflowd-2-1-b1) started with 1 cflowd instances.
    Mar 18 14:59:14 netflow cfdcollect[30268]: [I] sleeping for 299 seconds.

    as I look at this, i'm looking at the flow glob files. they are updated
    at one time, and then do not update again, and flows.current is not
    moving up in bytes.

    I'm confused as to why it does this. Does anyone have any ideas why it
    would suddenly just stop running as a user? I havn't tried rebooting the
    system. Should I try that?

    uname -a
    Linux netflow 2.4.19 #3 SMP Thu Nov 14 19:18:27 PST 2002 i686 unknown

    This is on a Debian Linux (Woody) system.

    any ideas would be greatly appreciated.

    - --
    Thanks,
    Shon Elliott

    Systems Engineer;
    OptiGate Networks, Inc.

    -----BEGIN PGP SIGNATURE-----
    Version: GnuPG v1.0.7 (FreeBSD)
    Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

    iD8DBQE+d6+ft49dIzGDssARAryFAJ93T8EoXAXgRA2SW2iquEEXK3jtCACfY4YJ
    AB5vuTRQLoE3b85UNuoTIfc=
    =vYp0
    -----END PGP SIGNATURE-----

    _______________________________________________
    Cflowd mailing list
    Cflowd@caida.org
    http://login.caida.org/mailman/listinfo/cflowd



    This archive was generated by hypermail 2.1.4 : Tue Mar 18 2003 - 15:58:44 PST