No data showing

[djcomber]

I'm seeing traffic but no data



When a report is run I get and erro



I've recompiled nfdump as suggested in another forum post https://support.nagios.com/forum/viewto ... 29&t=35646
still no good.

[eloyd]

Try running nfdump from the command line, as the nagios user, and without the "2> /dev/null" part (which eliminates the display of errors). That will likely tell you what's going wrong.

[tgriep]

You can look at the following log file to see if there are any errors that can help out.

Code: Select all

/usr/local/nagiosna/var/backend.log

You can post it if you need help.

[djcomber]

Try running nfdump from the command line, as the nagios user, and without the "2> /dev/null" part (which eliminates the display of errors). That will likely tell you what's going wrong.

thanks tried the command previosuly but didn't remove the "2> /dev/null" and got nothing

command

Code: Select all

 /usr/local/bin/nfdump -M '/usr/local/nagiosna/var/NUGSHORTRT01/flows/' -R . -t '2015/12/22.13:03:50-2015/12/23.13:03:49' -N -n '5' -s 'srcip/bytes' -o 'csv' 

response

Code: Select all

Open file '/usr/local/nagiosna/var/NUGSHORTRT01/flows/._nfdump-1.6.13': bad magic: 0x500

[djcomber]

You can look at the following log file to see if there are any errors that can help out.

Code: Select all

/usr/local/nagiosna/var/backend.log

You can post it if you need help.

used

Code: Select all

cat /usr/local/nagiosna/var/backend.log | grep ERROR

No Errors in the log.
No Warnings
plenty of debug and info

[tgriep]

Can you run the following on the NA system and post the output here in Code Wraps?

Code: Select all

ls -alR /usr/local/nagiosna/var

The bad magic message could be a failing hard drive or a corrupt file.

[eloyd]

I'm concurring with disk/file corruption. Is this on a physical machine or virtual machine? Virtual machine should never see a bad magic number, but it's possible.

[hsmith]

Thanks Eric!

[djcomber]

The output was too big for a single cut and paste so I attached the file.

NNA is running on a virtual, VmWare 5.1. I originally deployed the OVA but it had weird date vs hwdate issues even when NTP was setup. so I build NNA manually on a manual centos6 a fresh install build.

Then I rebuild nfdump when I received this error. so you'll see nfdump source

[tgriep]

It looks like the nfdump package was downloaded to that flows folder and is causing the issue.

Lets remove them and see if that resolves the issue. Login to the system as root and run the following to remove those files and folders.

Code: Select all

rm -fr /usr/local/nagiosna/var/NUGSHORTRT01/flows/._nfdump-1.6.13
rm -fr /usr/local/nagiosna/var/NUGSHORTRT01/flows/nfdump-1.6.13

Wait 20 minutes and see if the error is gone.
Let us know how it works for you.