Search found 8 matches
- Tue Feb 22, 2022 2:52 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
So UDP packets were getting filtered, because reverse path to sender routers couldn't be verified. I was able to resolve this by turning off reverse path filter: sysctl -w net.ipv4.conf.all.rp_filter=0 This is really specific to our (perhaps incorrect) network setup. Data is being written now, but n...
- Sun Feb 20, 2022 6:09 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
It just dawned on me that when I run netcat on udp 2055 I do not see any incoming netflow data, so it seems this is not nfcapd issue. This is really bizarre. I can dump data with tcpdump, but it doesn't go to the next layer? The suspect is firewall, but I tried enabling firewalld and allowing udp 20...
- Fri Feb 18, 2022 4:32 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
Here are the results: # chage -l nna Last password change : Jan 28, 2022 Password expires : never Password inactive : never Account expires : never Minimum number of days between password change : 0 Maximum number of days between password change : 99999 Number of days of warning before password expi...
- Thu Feb 17, 2022 11:22 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
# date Thu Feb 17 23:20:25 EST 2022 # ls -l /etc/localtime lrwxrwxrwx 1 root root 30 Jan 28 16:14 /etc/localtime -> /usr/share/zoneinfo/US/Eastern # php -r 'echo date("D M j G:i:s T Y")."\n";' Thu Feb 17 23:20:25 EST 2022 # grep "date.timezone =" /etc/php.ini date.time...
- Wed Feb 16, 2022 6:26 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
# nfdump -r /usr/local/nagiosna/var/test/flows/nfcapd.current.2778910 Date first seen Event XEvent Proto Src IP Addr:Port Dst IP Addr:Port X-Src IP Addr:Port X-Dst IP Addr:Port In Byte Out Byte No matched flows Attached is a tcpdump capture sample. One thing that I didn't mention before - netflow t...
- Tue Feb 15, 2022 8:10 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
Re: nfcapd not capturing any data
Thanks Perry, But I resolved "Another collector already running" issue before sending the logs. Only one collector is running with one child process. Still no data is being written. Here's journalctl log after another restart: Feb 15 20:07:35 nagios2022 systemd[1]: Stopping NagiosNA Daemon...
- Mon Feb 14, 2022 12:10 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
- Fri Feb 11, 2022 12:33 pm
- Forum: Nagios Network Analyzer
- Topic: nfcapd not capturing any data
- Replies: 14
- Views: 79928
nfcapd not capturing any data
Hello, I have a fresh NagionNA installation running on AlmaLinux 8.5. I see nfcapd daemon up and running: udp 0 0 0.0.0.0:2055 0.0.0.0:* 1001 552755774 1588220/nfcapd With 2 processes: nna 1588220 0.0 0.0 32688 4048 ? S 11:36 0:00 /usr/local/bin/nfcapd -I 1 -l /usr/local/nagiosna/var/test/flows -p 2...