Page 1 of 1

No data found.

Posted: Thu Aug 17, 2017 12:57 am
by sherm4n
Hi
I'm new on Nagios Network Analyzer, the installation/setup seem very smooth and fast. I setup Netflow on a Cisco device, works with other Netflow Analyzer, The NNA shows me how much data had been collected, but it shows "No data found" on Top 5 Talkers, and it shows nothing beside pie chart on Report tab.

Here what i found on error log
tail -f httpd/error_log
sudo: no tty present and no askpass program specified
sudo: pam_authenticate: Conversation error
sudo: no tty present and no askpass program specified
sudo: pam_authenticate: Conversation error
sudo: no tty present and no askpass program specified
sudo: pam_authenticate: Conversation error
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process
Empty file list. No files to process

data file
-rw-r--r-- 1 nna nnacmd 5 Aug 17 10:34 9991.pid
-rw-r--r-- 1 nna nnacmd 1255360 Aug 17 15:50 bandwidth.rrd
drwxr-sr-x 2 nna nnacmd 4096 Aug 17 15:50 flows

a lot of files were under flows
nfcapd.201708171530
nfcapd.201708171535
nfcapd.201708171540
nfcapd.201708171545
nfcapd.201708171550
nfcapd.current.1291

The flow record we setup on Cisco device
match ipv4 tos
match ipv4 protocol
match ipv4 source address
match ipv4 destination address
match transport source-port
match transport destination-port
match interface input
match interface output
collect routing next-hop address ipv4
collect transport tcp flags
collect transport udp source-port
collect transport udp destination-port
collect counter bytes
collect counter packets
collect timestamp sys-uptime first
collect timestamp sys-uptime last


Please let me know if I missed anything


Regards
Sherman

Re: No data found.

Posted: Thu Aug 17, 2017 12:42 pm
by tgriep
The NNA server need to have the absolute time stamp in the netflow data so it can be used to display the data.
So edit the configuration on your Cisco device and remove these 2 lines

Code: Select all

collect timestamp sys-uptime first
collect timestamp sys-uptime last
Then add these lines

Code: Select all

collect timestamp absolute first
collect timestamp absolute last
Save the config and wait for about 15 to 20 minutes and the NNA server should start to display the data.

Another cause of this is if the time is not in sync between the Device and the NNA server, make sure they are in sync accounting for the Time Zone.

Re: No data found.

Posted: Mon Aug 21, 2017 1:54 am
by sherm4n
Hi tgriep,

Thanks for the tips, it turns out I need to add timezone on php.ini under /etc. This should be documented on either installation/configuration document, it will save people a lot of time. :D




Cheers
Sherman