Page 1 of 1

No Data Showing in NNA

Posted: Thu Mar 22, 2018 10:33 am
by compsci28
No data showing although router and server configured correctly.

Re: No Data Showing in NNA

Posted: Fri Mar 23, 2018 10:52 am
by cdienger
https://support.nagios.com/kb/article/n ... le-32.html covers some common reasons data may not be showing up.

In addition to that I would check /usr/local/nagiosna/var/<sourcename>/flows/ for any nfcapd files in there. If you find any, run:

nfdump -r <filename>

and provide the last few lines of output if needed. One other common cause for data not showing up is an incorrect timestamp being recorded which will be apparent in the output if this is the case. If the time is incorrect then you'll need to review the sending device's config to make sure it is including the correct timestamp in the flow data.

Re: No Data Showing in NNA

Posted: Fri Mar 23, 2018 11:09 am
by compsci28
Thanks these are the results

Re: No Data Showing in NNA

Posted: Fri Mar 23, 2018 1:26 pm
by cdienger
Very odd - do you see any size to the files if you run "ls -alh" ? Is traffic coming in on the port the device is sending on?

yum -y install tcpdump
tcpdump -i any port XXXX


Anything coming in on the port specified should be displayed on the screen.

Re: No Data Showing in NNA

Posted: Fri Mar 23, 2018 2:02 pm
by compsci28
Results of both commands

Re: No Data Showing in NNA

Posted: Fri Mar 23, 2018 3:42 pm
by cdienger
Sorry for not clarifying but the "ls -alh" command should have been run in "/usr/local/nagiosna/var/<sourcename>/flows/" or like:

ls -alh /usr/local/nagiosna/var/<sourcename>/flows/

As long as the tcpdump was run while the device was sending data, there should be something displayed. The fact that there isn't makes me think there may be a firewall between the NNA server and the sending device. Or the sending device isn't really sending anything.