Page 1 of 2

No data showing

Posted: Tue Dec 22, 2015 12:12 am
by djcomber
I'm seeing traffic but no data

Image

When a report is run I get and erro

Image

I've recompiled nfdump as suggested in another forum post https://support.nagios.com/forum/viewto ... 29&t=35646
still no good.

Re: No data showing

Posted: Tue Dec 22, 2015 9:46 am
by eloyd
Try running nfdump from the command line, as the nagios user, and without the "2> /dev/null" part (which eliminates the display of errors). That will likely tell you what's going wrong.

Re: No data showing

Posted: Tue Dec 22, 2015 1:02 pm
by tgriep
You can look at the following log file to see if there are any errors that can help out.

Code: Select all

/usr/local/nagiosna/var/backend.log
You can post it if you need help.

Re: No data showing

Posted: Tue Dec 22, 2015 9:07 pm
by djcomber
eloyd wrote:Try running nfdump from the command line, as the nagios user, and without the "2> /dev/null" part (which eliminates the display of errors). That will likely tell you what's going wrong.
thanks tried the command previosuly but didn't remove the "2> /dev/null" and got nothing

command

Code: Select all

 /usr/local/bin/nfdump -M '/usr/local/nagiosna/var/NUGSHORTRT01/flows/' -R . -t '2015/12/22.13:03:50-2015/12/23.13:03:49' -N -n '5' -s 'srcip/bytes' -o 'csv' 
response

Code: Select all

Open file '/usr/local/nagiosna/var/NUGSHORTRT01/flows/._nfdump-1.6.13': bad magic: 0x500

Re: No data showing

Posted: Tue Dec 22, 2015 9:14 pm
by djcomber
tgriep wrote:You can look at the following log file to see if there are any errors that can help out.

Code: Select all

/usr/local/nagiosna/var/backend.log
You can post it if you need help.
used

Code: Select all

cat /usr/local/nagiosna/var/backend.log | grep ERROR
No Errors in the log.
No Warnings
plenty of debug and info

Re: No data showing

Posted: Wed Dec 23, 2015 12:40 pm
by tgriep
Can you run the following on the NA system and post the output here in Code Wraps?

Code: Select all

ls -alR /usr/local/nagiosna/var
The bad magic message could be a failing hard drive or a corrupt file.

Re: No data showing

Posted: Wed Dec 23, 2015 12:46 pm
by eloyd
I'm concurring with disk/file corruption. Is this on a physical machine or virtual machine? Virtual machine should never see a bad magic number, but it's possible.

Re: No data showing

Posted: Wed Dec 23, 2015 4:59 pm
by hsmith
Thanks Eric!

Re: No data showing

Posted: Thu Dec 24, 2015 8:27 am
by djcomber
The output was too big for a single cut and paste so I attached the file.

NNA is running on a virtual, VmWare 5.1. I originally deployed the OVA but it had weird date vs hwdate issues even when NTP was setup. so I build NNA manually on a manual centos6 a fresh install build.

Then I rebuild nfdump when I received this error. so you'll see nfdump source

Re: No data showing

Posted: Mon Dec 28, 2015 11:46 am
by tgriep
It looks like the nfdump package was downloaded to that flows folder and is causing the issue.

Lets remove them and see if that resolves the issue. Login to the system as root and run the following to remove those files and folders.

Code: Select all

rm -fr /usr/local/nagiosna/var/NUGSHORTRT01/flows/._nfdump-1.6.13
rm -fr /usr/local/nagiosna/var/NUGSHORTRT01/flows/nfdump-1.6.13
Wait 20 minutes and see if the error is gone.
Let us know how it works for you.