Search found 8 matches

by sergey-frontier
Tue Feb 22, 2022 2:52 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

So UDP packets were getting filtered, because reverse path to sender routers couldn't be verified. I was able to resolve this by turning off reverse path filter: sysctl -w net.ipv4.conf.all.rp_filter=0 This is really specific to our (perhaps incorrect) network setup. Data is being written now, but n...
by sergey-frontier
Sun Feb 20, 2022 6:09 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

It just dawned on me that when I run netcat on udp 2055 I do not see any incoming netflow data, so it seems this is not nfcapd issue. This is really bizarre. I can dump data with tcpdump, but it doesn't go to the next layer? The suspect is firewall, but I tried enabling firewalld and allowing udp 20...
by sergey-frontier
Fri Feb 18, 2022 4:32 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

Here are the results: # chage -l nna Last password change : Jan 28, 2022 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expi...
by sergey-frontier
Thu Feb 17, 2022 11:22 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

# date Thu Feb 17 23:20:25 EST 2022 # ls -l /etc/localtime lrwxrwxrwx 1 root root 30 Jan 28 16:14 /etc/localtime -> /usr/share/zoneinfo/US/Eastern # php -r 'echo date("D M j G:i:s T Y")."\n";' Thu Feb 17 23:20:25 EST 2022 # grep "date.timezone =" /etc/php.ini date.time...
by sergey-frontier
Wed Feb 16, 2022 6:26 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

# nfdump -r /usr/local/nagiosna/var/test/flows/nfcapd.current.2778910 Date first seen Event XEvent Proto Src IP Addr:Port Dst IP Addr:Port X-Src IP Addr:Port X-Dst IP Addr:Port In Byte Out Byte No matched flows Attached is a tcpdump capture sample. One thing that I didn't mention before - netflow t...
by sergey-frontier
Tue Feb 15, 2022 8:10 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

Thanks Perry, But I resolved "Another collector already running" issue before sending the logs. Only one collector is running with one child process. Still no data is being written. Here's journalctl log after another restart: Feb 15 20:07:35 nagios2022 systemd[1]: Stopping NagiosNA Daemon...
by sergey-frontier
Mon Feb 14, 2022 12:10 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

Re: nfcapd not capturing any data

Hi Perry,

Here you go:

Code: Select all

# sestatus
SELinux status:                 disabled
by sergey-frontier
Fri Feb 11, 2022 12:33 pm
Forum: Nagios Network Analyzer
Topic: nfcapd not capturing any data
Replies: 14
Views: 71577

nfcapd not capturing any data

Hello, I have a fresh NagionNA installation running on AlmaLinux 8.5. I see nfcapd daemon up and running: udp 0 0 0.0.0.0:2055 0.0.0.0:* 1001 552755774 1588220/nfcapd With 2 processes: nna 1588220 0.0 0.0 32688 4048 ? S 11:36 0:00 /usr/local/bin/nfcapd -I 1 -l /usr/local/nagiosna/var/test/flows -p 2...