Nagios Support Forum

Scott, Could you please explain the logic used to show chord diagrams. I cannot find it in the documentation. In this case I would think the pie would be split in two halves (10.1.2.3 and 10.4.5.6, with all flows/chords going from one to another). But apparently it is not how it works, and it only s...

Max Mapped Relations is set to 60.

In both examples there are only two IP addresses to show.

The query was (src ip 10.1.2.3) and (dst ip 10.4.5.6) aggregated by srcip,dstip So all connections in the result are from 10.1.2.3 to 10.4.5.6. Shouldn't the diagram be divided equally between the two IP addresses? You can run a similar query with fixed source and destination IPs in NNA online demo ...

All connections in this query's result are from 10.1.2.3 to 10.4.5.6.
Does the diagram reflect the results of the current query or all available data?
Why does it only show 10.4.5.6 and does not even mention 10.1.2.3?

I am running the following query in the the demo VM (nagiosna-2.2.3-64.ova): (src ip 10.1.2.3) and (dst ip 10.4.5.6) aggregated by srcip,dstip There is just one line in the result: ~300K flows from 10.1.2.3 to 10.4.5.6 But the chord diagram for this query only shows 10.4.5.6 (most of the circle) and...

The query in GUI still hangs. I guess it is probably just too big.

[root@nnademo ~]# grep LimitRequestLine /etc/httpd/conf/httpd.conf
LimitRequestLine 100000

Your nfdump command quickly returned 291529 "-A dstport,srcip" quickly returned 170481 I have increased max_input_vars to 300000 in addition to changing other values you have recommended. But the query in GUI still hangs, and the server does not show any CPU utilization, while it is runnin...

Thank you for your suggestions, but there is no difference.
Data lifetime is 24 hours, disk usage – 34M. Is it considered a lot of flow data? I have also tried to set max_input_vars to 100000.
It can quickly aggregate on dstport and srcip, but not on both.

We are evaluating the demo VM (nagiosna-2.2.3-64.ova), the source is a Linux server 10.1.2.3 with fprobe installed. Data lifetime is 24 hours, disk usage – 34M. Why are some queries taking forever to complete? For example: "dst ip 10.1.2.3" aggregated by dstip,srcip works "dst ip 10.1...