Sources Not Start

[mikew]

Network Analyzer

I have installed the latest version on a CentOS 6.x. I have configured several sources but none of the sources will start. The error I see is this:

Code: Select all

There was an error running nfdump command: /usr/local/bin/nfdump -M '/usr/local/nagiosna/var/centos/flows/' -R . -t '2013/10/27.06:17:03-2013/10/28.06:17:02' -N -n '5' -s 'srcip/bytes' -o 'csv' 2> /dev/null

[sreinhardt]

Is this displayed on the webui when opening the source tab, or when running a query? Which version of NNA do you presently have installed?

[mikew]

The version is the latest 2014R1.1 and the message shows up in Network Analyzer in source/reports and the dashboard shows all sources are red not functioning.

I have installed again and receive the same error.

[nscott]

Lets make see if its a UI bug:

Code: Select all

ps aux | grep nfcapd

Is this showing any instances of nfcapd running? If yes, then we have UI bug, if not then lets delve deeper.

From the command line run

Code: Select all

sh /usr/local/nagiosna/bin/nagiosna start

Does this give any error? If so, what is it? Otherwise, let us now consult the backend.log at /usr/local/nagiosna/var/backend.log.

Does anything show up there showing some kind of error? Lastly, is there anything in the /var/log/messages?

[mikew]

Here is the output:

Code: Select all

ps aux | grep nfcapd

No instance running.

Code: Select all

sh /usr/local/nagiosna/bin/nagiosna start
Traceback (most recent call last):
  File "/usr/local/nagiosna/bin/initialize_source.py", line 16, in <module>
    import rrdtool
ImportError: librrd.so.4: cannot open shared object file: No such file or directory
No such directory: /usr/local/nagiosna/var/nagiosxi/flows
No such directory: /usr/local/nagiosna/var/nagiosxi/flows
stat() error /usr/local/nagiosna/var/nagiosxi/flows: No such file or directory
Failed to add default data collector directory
Traceback (most recent call last):
  File "/usr/local/nagiosna/bin/initialize_source.py", line 16, in <module>
    import rrdtool
ImportError: librrd.so.4: cannot open shared object file: No such file or directory
open() error on '/usr/local/nagiosna/var/centos/flows/.nfstat' in nfstatfile.c line 312: Permission denied

NagiosNA backend started...

Code: Select all

tail /usr/local/nagiosna/var/backend.log 
Could not start nfcapd listening on 8001 for source centos
Error running initialization.
Could not start nfcapd listening on 8001 for source centos
Error running initialization.
Could not start nfcapd listening on 8001 for source centos
Error running initialization.
Error running initialization.
Error running initialization.
Could not start nfcapd listening on 8000 for source nagiosxi
Error running initialization.

/var/log/messages

Code: Select all

Oct 29 22:55:15 net nfcapd[27708]: Add extension: 2 byte input/output interface index
Oct 29 22:55:15 net nfcapd[27708]: Add extension: 4 byte input/output interface index
Oct 29 22:55:15 net nfcapd[27708]: Add extension: 2 byte src/dst AS number
Oct 29 22:55:15 net nfcapd[27708]: Add extension: 4 byte src/dst AS number
Oct 29 22:55:15 net nfcapd[27708]: Replay flows to host: 192.168.5.77 port: 8001
Oct 29 22:55:15 net nfcapd[27710]: Error opening pid file: '/usr/local/nagiosna/var/centos/8001.pid' Permission denied

[lmiltchev]

Mike,
Run the following command, and show the output:

Code: Select all

which rrdtool

What is the rrdtool version? Do you have any PID files in "/usr/local/nagiosna/var/centos/"? If you do, you can delete them, and try again running:

Code: Select all

sh /usr/local/nagiosna/bin/nagiosna start

[mikew]

Code: Select all

which rrdtool
/usr/local/bin/rrdtool

There is no centos directory in /usr/local/nagiosna

only backend,bin,etc,var

I have set up several sources and none of them have directories created.

[sreinhardt]

Can you send us a the portion of the sudoers file that contains nna lines, it might be in the /etc/sudoers.d/ directory as well. At the same time, just to confirm, what are the permissions inside /usr/local/nagiosna/?

[lmiltchev]

What is the rrdtool version?

[mikew]

Here is the sudo permissions

Code: Select all

Defaults:%nnacmd !requiretty
Cmnd_Alias LIST = /sbin/iptables --list
Cmnd_Alias SAVE = /etc/init.d/iptables save
Cmnd_Alias UPDATE = /sbin/iptables -I INPUT -p udp -j ACCEPT --dport *
Cmnd_Alias DAEMON = /usr/local/nagiosna/bin/nagiosna *
%nnacmd ALL=(ALL) NOPASSWD:LIST
%nnacmd ALL=(ALL) NOPASSWD:SAVE
%nnacmd ALL=(ALL) NOPASSWD:UPDATE
%nnacmd ALL=(ALL) NOPASSWD:/bin/kill *
%nnacmd ALL=(ALL) NOPASSWD:DAEMON

RRDtool 1.4.8 Copyright 1997-2013 by Tobias Oetiker <tobi@oetiker.ch>
Compiled Oct 29 2013 03:37:52