Aruba controller ipfix data

[rhassing]

Code: Select all

[root@NagiosNA var]# su - nna
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010K/flows/nfcapd.202105071255 -o csv -s srcip net
Line 1: syntax error at ''
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010Z/flows/nfcapd.202105071255 -o csv -s srcip net
Line 1: syntax error at ''
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/ReneSwitch/flows/nfcapd.202105071255 -o csv -s srcip net
Line 1: syntax error at ''
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/RHGSwitch2/flows/nfcapd.202105071255 -o csv -s srcip net
Line 1: syntax error at ''
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/SW2/flows/nfcapd.202105071255 -o csv -s srcip net
Line 1: syntax error at ''
[nna@NagiosNA ~]$ /usr/local/nagiosna/bin/reap_files.py  /usr/local/nagiosna/var/RHGSwitch2/flows nfcapd.202105071255 1
/usr/lib/python2.7/site-packages/pkg_resources.py:1054: UserWarning: /usr/local/nagiosna/tmp is writable by group/others and vulnerable to attack when used with get_resource_filename. Consider a more secure location (set with .set_extraction_path or the PYTHON_EGG_CACHE environment variable).
  warnings.warn(msg, UserWarning)
Expired files:      0
Expired file size:  0 B
Expired time range: 0 sec

First:     2021-05-07 12:20:00
Last:      2021-05-07 18:50:00
Lifetime:  23400 = 6.5 hours
Numfiles:  79
Filesize:  323584 = 316.0 KB
Max Size:  <none>
Max Life:  86400 = 1.0 days
Watermark: 95%
Status:    OK
[nna@NagiosNA ~]$ ls -l /usr/local/nagiosna/var/RHGSwitch2
total 1256
-rw-r--r-- 1 nna nnacmd       6 May  4 11:57 6701.pid
-rw-r--r-- 1 nna users  1255360 May  8 12:14 bandwidth.rrd
drwxr-xr-x 2 nna users    20480 May  8 12:10 flows
drwxr-xr-x 3 nna nnacmd    4096 Oct  2  2020 views
[nna@NagiosNA ~]$ ls -l /usr/local/nagiosna/var/RHGSwitch2/flows
total 43292
-rw-r--r-- 1 nna nnacmd 146153 May  7 12:25 nfcapd.202105071220
-rw-r--r-- 1 nna nnacmd 154176 May  7 12:30 nfcapd.202105071225
-rw-r--r-- 1 nna nnacmd 112526 May  7 12:35 nfcapd.202105071230
-rw-r--r-- 1 nna nnacmd 156984 May  7 12:40 nfcapd.202105071235
-rw-r--r-- 1 nna nnacmd 117462 May  7 12:45 nfcapd.202105071240
-rw-r--r-- 1 nna nnacmd 121132 May  7 12:50 nfcapd.202105071245
-rw-r--r-- 1 nna nnacmd 104099 May  7 12:55 nfcapd.202105071250
-rw-r--r-- 1 nna nnacmd 158386 May  7 13:00 nfcapd.202105071255
-rw-r--r-- 1 nna nnacmd 124092 May  7 13:05 nfcapd.202105071300
-rw-r--r-- 1 nna nnacmd 150537 May  7 13:10 nfcapd.202105071305
-rw-r--r-- 1 nna nnacmd 140590 May  7 13:15 nfcapd.202105071310
-rw-r--r-- 1 nna nnacmd 146707 May  7 13:20 nfcapd.202105071315
-rw-r--r-- 1 nna nnacmd 150764 May  7 13:25 nfcapd.202105071320
-rw-r--r-- 1 nna nnacmd 150054 May  7 13:30 nfcapd.202105071325
-rw-r--r-- 1 nna nnacmd 179973 May  7 13:35 nfcapd.202105071330
-rw-r--r-- 1 nna nnacmd 149468 May  7 13:40 nfcapd.202105071335
-rw-r--r-- 1 nna nnacmd 149644 May  7 13:45 nfcapd.202105071340
-rw-r--r-- 1 nna nnacmd 146457 May  7 13:50 nfcapd.202105071345
-rw-r--r-- 1 nna nnacmd 151367 May  7 13:55 nfcapd.202105071350
-rw-r--r-- 1 nna nnacmd 131885 May  7 14:00 nfcapd.202105071355
-rw-r--r-- 1 nna nnacmd 135597 May  7 14:05 nfcapd.202105071400
-rw-r--r-- 1 nna nnacmd 125450 May  7 14:10 nfcapd.202105071405
-rw-r--r-- 1 nna nnacmd 135928 May  7 14:15 nfcapd.202105071410
-rw-r--r-- 1 nna nnacmd 181131 May  7 14:20 nfcapd.202105071415
-rw-r--r-- 1 nna nnacmd 140989 May  7 14:25 nfcapd.202105071420
-rw-r--r-- 1 nna nnacmd 141256 May  7 14:30 nfcapd.202105071425
-rw-r--r-- 1 nna nnacmd 147483 May  7 14:35 nfcapd.202105071430
-rw-r--r-- 1 nna nnacmd 135503 May  7 14:40 nfcapd.202105071435
-rw-r--r-- 1 nna nnacmd 165294 May  7 14:45 nfcapd.202105071440
-rw-r--r-- 1 nna nnacmd 160472 May  7 14:50 nfcapd.202105071445
-rw-r--r-- 1 nna nnacmd 166691 May  7 14:55 nfcapd.202105071450
-rw-r--r-- 1 nna nnacmd 174727 May  7 15:00 nfcapd.202105071455
-rw-r--r-- 1 nna nnacmd 170713 May  7 15:05 nfcapd.202105071500
-rw-r--r-- 1 nna nnacmd 191039 May  7 15:10 nfcapd.202105071505
-rw-r--r-- 1 nna nnacmd 174551 May  7 15:15 nfcapd.202105071510
-rw-r--r-- 1 nna nnacmd 195728 May  7 15:20 nfcapd.202105071515
-rw-r--r-- 1 nna nnacmd 156045 May  7 15:25 nfcapd.202105071520
-rw-r--r-- 1 nna nnacmd 169257 May  7 15:30 nfcapd.202105071525
-rw-r--r-- 1 nna nnacmd 170360 May  7 15:35 nfcapd.202105071530
-rw-r--r-- 1 nna nnacmd 161554 May  7 15:40 nfcapd.202105071535
-rw-r--r-- 1 nna nnacmd 162936 May  7 15:45 nfcapd.202105071540
-rw-r--r-- 1 nna nnacmd 170026 May  7 15:50 nfcapd.202105071545
-rw-r--r-- 1 nna nnacmd 163459 May  7 15:55 nfcapd.202105071550
-rw-r--r-- 1 nna nnacmd 183813 May  7 16:00 nfcapd.202105071555
-rw-r--r-- 1 nna nnacmd 185898 May  7 16:05 nfcapd.202105071600
-rw-r--r-- 1 nna nnacmd 186097 May  7 16:10 nfcapd.202105071605
-rw-r--r-- 1 nna nnacmd 158730 May  7 16:15 nfcapd.202105071610
-rw-r--r-- 1 nna nnacmd 183699 May  7 16:20 nfcapd.202105071615
-rw-r--r-- 1 nna nnacmd 160850 May  7 16:25 nfcapd.202105071620
-rw-r--r-- 1 nna nnacmd 160034 May  7 16:30 nfcapd.202105071625
-rw-r--r-- 1 nna nnacmd 189884 May  7 16:35 nfcapd.202105071630
-rw-r--r-- 1 nna nnacmd 179610 May  7 16:40 nfcapd.202105071635
-rw-r--r-- 1 nna nnacmd 191433 May  7 16:45 nfcapd.202105071640
-rw-r--r-- 1 nna nnacmd 192698 May  7 16:50 nfcapd.202105071645
-rw-r--r-- 1 nna nnacmd 170741 May  7 16:55 nfcapd.202105071650
-rw-r--r-- 1 nna nnacmd 167779 May  7 17:00 nfcapd.202105071655
-rw-r--r-- 1 nna nnacmd 204167 May  7 17:05 nfcapd.202105071700
-rw-r--r-- 1 nna nnacmd 178282 May  7 17:10 nfcapd.202105071705
-rw-r--r-- 1 nna nnacmd 189609 May  7 17:15 nfcapd.202105071710
-rw-r--r-- 1 nna nnacmd 190683 May  7 17:20 nfcapd.202105071715
-rw-r--r-- 1 nna nnacmd 193471 May  7 17:25 nfcapd.202105071720
-rw-r--r-- 1 nna nnacmd 182323 May  7 17:30 nfcapd.202105071725
-rw-r--r-- 1 nna nnacmd 197964 May  7 17:35 nfcapd.202105071730
-rw-r--r-- 1 nna nnacmd 212311 May  7 17:40 nfcapd.202105071735
-rw-r--r-- 1 nna nnacmd 186911 May  7 17:45 nfcapd.202105071740
-rw-r--r-- 1 nna nnacmd 179683 May  7 17:50 nfcapd.202105071745
-rw-r--r-- 1 nna nnacmd 196230 May  7 17:55 nfcapd.202105071750
-rw-r--r-- 1 nna nnacmd 192132 May  7 18:00 nfcapd.202105071755
-rw-r--r-- 1 nna nnacmd 191600 May  7 18:05 nfcapd.202105071800
-rw-r--r-- 1 nna nnacmd 191690 May  7 18:10 nfcapd.202105071805
-rw-r--r-- 1 nna nnacmd 177168 May  7 18:15 nfcapd.202105071810
-rw-r--r-- 1 nna nnacmd 199948 May  7 18:20 nfcapd.202105071815
-rw-r--r-- 1 nna nnacmd 168062 May  7 18:25 nfcapd.202105071820
-rw-r--r-- 1 nna nnacmd 182289 May  7 18:30 nfcapd.202105071825
-rw-r--r-- 1 nna nnacmd 193107 May  7 18:35 nfcapd.202105071830
-rw-r--r-- 1 nna nnacmd 197692 May  7 18:40 nfcapd.202105071835
-rw-r--r-- 1 nna nnacmd 179139 May  7 18:45 nfcapd.202105071840
-rw-r--r-- 1 nna nnacmd 176037 May  7 18:50 nfcapd.202105071845
-rw-r--r-- 1 nna nnacmd 159944 May  7 18:55 nfcapd.202105071850
-rw-r--r-- 1 nna nnacmd 164688 May  7 19:00 nfcapd.202105071855
-rw-r--r-- 1 nna nnacmd 168490 May  7 19:05 nfcapd.202105071900
-rw-r--r-- 1 nna nnacmd 182193 May  7 19:10 nfcapd.202105071905
-rw-r--r-- 1 nna nnacmd 170582 May  7 19:15 nfcapd.202105071910
-rw-r--r-- 1 nna nnacmd 166268 May  7 19:20 nfcapd.202105071915
-rw-r--r-- 1 nna nnacmd 163276 May  7 19:25 nfcapd.202105071920
-rw-r--r-- 1 nna nnacmd 161888 May  7 19:30 nfcapd.202105071925
-rw-r--r-- 1 nna nnacmd 162442 May  7 19:35 nfcapd.202105071930
-rw-r--r-- 1 nna nnacmd 161621 May  7 19:40 nfcapd.202105071935
-rw-r--r-- 1 nna nnacmd 167538 May  7 19:45 nfcapd.202105071940
-rw-r--r-- 1 nna nnacmd 167966 May  7 19:50 nfcapd.202105071945
-rw-r--r-- 1 nna nnacmd 197356 May  7 19:55 nfcapd.202105071950
-rw-r--r-- 1 nna nnacmd 177903 May  7 20:00 nfcapd.202105071955
-rw-r--r-- 1 nna nnacmd 202425 May  7 20:05 nfcapd.202105072000
-rw-r--r-- 1 nna nnacmd 189497 May  7 20:10 nfcapd.202105072005
-rw-r--r-- 1 nna nnacmd 192935 May  7 20:15 nfcapd.202105072010
-rw-r--r-- 1 nna nnacmd 195451 May  7 20:20 nfcapd.202105072015
-rw-r--r-- 1 nna nnacmd 166207 May  7 20:25 nfcapd.202105072020
-rw-r--r-- 1 nna nnacmd 181770 May  7 20:30 nfcapd.202105072025
-rw-r--r-- 1 nna nnacmd 191694 May  7 20:35 nfcapd.202105072030
-rw-r--r-- 1 nna nnacmd 187070 May  7 20:40 nfcapd.202105072035
-rw-r--r-- 1 nna nnacmd 199700 May  7 20:45 nfcapd.202105072040
-rw-r--r-- 1 nna nnacmd 199064 May  7 20:50 nfcapd.202105072045
-rw-r--r-- 1 nna nnacmd 192383 May  7 20:55 nfcapd.202105072050
-rw-r--r-- 1 nna nnacmd 192734 May  7 21:00 nfcapd.202105072055
-rw-r--r-- 1 nna nnacmd 195679 May  7 21:05 nfcapd.202105072100
-rw-r--r-- 1 nna nnacmd 196301 May  7 21:10 nfcapd.202105072105
-rw-r--r-- 1 nna nnacmd 188794 May  7 21:15 nfcapd.202105072110
-rw-r--r-- 1 nna nnacmd 194208 May  7 21:20 nfcapd.202105072115
-rw-r--r-- 1 nna nnacmd 177172 May  7 21:25 nfcapd.202105072120
-rw-r--r-- 1 nna nnacmd 183322 May  7 21:30 nfcapd.202105072125
-rw-r--r-- 1 nna nnacmd 184411 May  7 21:35 nfcapd.202105072130
-rw-r--r-- 1 nna nnacmd 183121 May  7 21:40 nfcapd.202105072135
-rw-r--r-- 1 nna nnacmd 179918 May  7 21:45 nfcapd.202105072140
-rw-r--r-- 1 nna nnacmd 194646 May  7 21:50 nfcapd.202105072145
-rw-r--r-- 1 nna nnacmd 184892 May  7 21:55 nfcapd.202105072150
-rw-r--r-- 1 nna nnacmd 191781 May  7 22:00 nfcapd.202105072155
-rw-r--r-- 1 nna nnacmd 184750 May  7 22:05 nfcapd.202105072200
-rw-r--r-- 1 nna nnacmd 180410 May  7 22:10 nfcapd.202105072205
-rw-r--r-- 1 nna nnacmd 180280 May  7 22:15 nfcapd.202105072210
-rw-r--r-- 1 nna nnacmd 187822 May  7 22:20 nfcapd.202105072215
-rw-r--r-- 1 nna nnacmd 181742 May  7 22:25 nfcapd.202105072220
-rw-r--r-- 1 nna nnacmd 176442 May  7 22:30 nfcapd.202105072225
-rw-r--r-- 1 nna nnacmd 152898 May  7 22:35 nfcapd.202105072230
-rw-r--r-- 1 nna nnacmd 155889 May  7 22:40 nfcapd.202105072235
-rw-r--r-- 1 nna nnacmd 152904 May  7 22:45 nfcapd.202105072240
-rw-r--r-- 1 nna nnacmd 152494 May  7 22:50 nfcapd.202105072245
-rw-r--r-- 1 nna nnacmd 151811 May  7 22:55 nfcapd.202105072250
-rw-r--r-- 1 nna nnacmd 151637 May  7 23:00 nfcapd.202105072255
-rw-r--r-- 1 nna nnacmd 152401 May  7 23:05 nfcapd.202105072300
-rw-r--r-- 1 nna nnacmd 149533 May  7 23:10 nfcapd.202105072305
-rw-r--r-- 1 nna nnacmd 153778 May  7 23:15 nfcapd.202105072310
-rw-r--r-- 1 nna nnacmd 154735 May  7 23:20 nfcapd.202105072315
-rw-r--r-- 1 nna nnacmd 151568 May  7 23:25 nfcapd.202105072320
-rw-r--r-- 1 nna nnacmd 155352 May  7 23:30 nfcapd.202105072325
-rw-r--r-- 1 nna nnacmd 161354 May  7 23:35 nfcapd.202105072330
-rw-r--r-- 1 nna nnacmd 167355 May  7 23:39 nfcapd.202105072335
-rw-r--r-- 1 nna nnacmd 174613 May  7 23:45 nfcapd.202105072340
-rw-r--r-- 1 nna nnacmd 190640 May  7 23:50 nfcapd.202105072345
-rw-r--r-- 1 nna nnacmd 157349 May  7 23:55 nfcapd.202105072350
-rw-r--r-- 1 nna nnacmd 164408 May  8 00:00 nfcapd.202105072355
-rw-r--r-- 1 nna nnacmd 174647 May  8 00:05 nfcapd.202105080000
-rw-r--r-- 1 nna nnacmd 119133 May  8 00:10 nfcapd.202105080005
-rw-r--r-- 1 nna nnacmd 118416 May  8 00:15 nfcapd.202105080010
-rw-r--r-- 1 nna nnacmd 144875 May  8 00:20 nfcapd.202105080015
-rw-r--r-- 1 nna nnacmd 126339 May  8 00:25 nfcapd.202105080020
-rw-r--r-- 1 nna nnacmd 111436 May  8 00:30 nfcapd.202105080025
-rw-r--r-- 1 nna nnacmd 124077 May  8 00:35 nfcapd.202105080030
-rw-r--r-- 1 nna nnacmd 129681 May  8 00:40 nfcapd.202105080035
-rw-r--r-- 1 nna nnacmd 105604 May  8 00:45 nfcapd.202105080040
-rw-r--r-- 1 nna nnacmd 121000 May  8 00:50 nfcapd.202105080045
-rw-r--r-- 1 nna nnacmd 193652 May  8 00:55 nfcapd.202105080050
-rw-r--r-- 1 nna nnacmd 142428 May  8 01:00 nfcapd.202105080055
-rw-r--r-- 1 nna nnacmd 102334 May  8 01:05 nfcapd.202105080100
-rw-r--r-- 1 nna nnacmd 104641 May  8 01:10 nfcapd.202105080105
-rw-r--r-- 1 nna nnacmd 141738 May  8 01:15 nfcapd.202105080110
-rw-r--r-- 1 nna nnacmd 150799 May  8 01:20 nfcapd.202105080115
-rw-r--r-- 1 nna nnacmd 102938 May  8 01:25 nfcapd.202105080120
-rw-r--r-- 1 nna nnacmd 102117 May  8 01:30 nfcapd.202105080125
-rw-r--r-- 1 nna nnacmd 166477 May  8 01:35 nfcapd.202105080130
-rw-r--r-- 1 nna nnacmd 130061 May  8 01:40 nfcapd.202105080135
-rw-r--r-- 1 nna nnacmd 138699 May  8 01:45 nfcapd.202105080140
-rw-r--r-- 1 nna nnacmd 140777 May  8 01:50 nfcapd.202105080145
-rw-r--r-- 1 nna nnacmd 140542 May  8 01:55 nfcapd.202105080150
-rw-r--r-- 1 nna nnacmd 139465 May  8 02:00 nfcapd.202105080155
-rw-r--r-- 1 nna nnacmd 102230 May  8 02:05 nfcapd.202105080200
-rw-r--r-- 1 nna nnacmd 100935 May  8 02:10 nfcapd.202105080205
-rw-r--r-- 1 nna nnacmd 103620 May  8 02:15 nfcapd.202105080210
-rw-r--r-- 1 nna nnacmd  99541 May  8 02:20 nfcapd.202105080215
-rw-r--r-- 1 nna nnacmd 114889 May  8 02:25 nfcapd.202105080220
-rw-r--r-- 1 nna nnacmd 111823 May  8 02:30 nfcapd.202105080225
-rw-r--r-- 1 nna nnacmd 115743 May  8 02:35 nfcapd.202105080230
-rw-r--r-- 1 nna nnacmd 107700 May  8 02:40 nfcapd.202105080235
-rw-r--r-- 1 nna nnacmd 144412 May  8 02:45 nfcapd.202105080240
-rw-r--r-- 1 nna nnacmd 164565 May  8 02:50 nfcapd.202105080245
-rw-r--r-- 1 nna nnacmd 155486 May  8 02:55 nfcapd.202105080250
-rw-r--r-- 1 nna nnacmd 150362 May  8 03:00 nfcapd.202105080255
-rw-r--r-- 1 nna nnacmd 141380 May  8 03:05 nfcapd.202105080300
-rw-r--r-- 1 nna nnacmd 126189 May  8 03:10 nfcapd.202105080305
-rw-r--r-- 1 nna nnacmd 132737 May  8 03:15 nfcapd.202105080310
-rw-r--r-- 1 nna nnacmd 110816 May  8 03:20 nfcapd.202105080315
-rw-r--r-- 1 nna nnacmd 112708 May  8 03:25 nfcapd.202105080320
-rw-r--r-- 1 nna nnacmd 118507 May  8 03:30 nfcapd.202105080325
-rw-r--r-- 1 nna nnacmd 143617 May  8 03:35 nfcapd.202105080330
-rw-r--r-- 1 nna nnacmd 155557 May  8 03:40 nfcapd.202105080335
-rw-r--r-- 1 nna nnacmd 113276 May  8 03:45 nfcapd.202105080340
-rw-r--r-- 1 nna nnacmd 105501 May  8 03:50 nfcapd.202105080345
-rw-r--r-- 1 nna nnacmd 161073 May  8 03:55 nfcapd.202105080350
-rw-r--r-- 1 nna nnacmd 155032 May  8 04:00 nfcapd.202105080355
-rw-r--r-- 1 nna nnacmd 147186 May  8 04:05 nfcapd.202105080400
-rw-r--r-- 1 nna nnacmd 160796 May  8 04:10 nfcapd.202105080405
-rw-r--r-- 1 nna nnacmd 152068 May  8 04:15 nfcapd.202105080410
-rw-r--r-- 1 nna nnacmd 120014 May  8 04:20 nfcapd.202105080415
-rw-r--r-- 1 nna nnacmd 111779 May  8 04:25 nfcapd.202105080420
-rw-r--r-- 1 nna nnacmd 129952 May  8 04:30 nfcapd.202105080425
-rw-r--r-- 1 nna nnacmd 114197 May  8 04:35 nfcapd.202105080430
-rw-r--r-- 1 nna nnacmd 110681 May  8 04:40 nfcapd.202105080435
-rw-r--r-- 1 nna nnacmd 137772 May  8 04:45 nfcapd.202105080440
-rw-r--r-- 1 nna nnacmd 158842 May  8 04:50 nfcapd.202105080445
-rw-r--r-- 1 nna nnacmd 145138 May  8 04:55 nfcapd.202105080450
-rw-r--r-- 1 nna nnacmd 157190 May  8 05:00 nfcapd.202105080455
-rw-r--r-- 1 nna nnacmd 115407 May  8 05:05 nfcapd.202105080500
-rw-r--r-- 1 nna nnacmd 109736 May  8 05:10 nfcapd.202105080505
-rw-r--r-- 1 nna nnacmd 120786 May  8 05:15 nfcapd.202105080510
-rw-r--r-- 1 nna nnacmd 165362 May  8 05:20 nfcapd.202105080515
-rw-r--r-- 1 nna nnacmd 113557 May  8 05:25 nfcapd.202105080520
-rw-r--r-- 1 nna nnacmd 114717 May  8 05:30 nfcapd.202105080525
-rw-r--r-- 1 nna nnacmd 117223 May  8 05:35 nfcapd.202105080530
-rw-r--r-- 1 nna nnacmd 122247 May  8 05:40 nfcapd.202105080535
-rw-r--r-- 1 nna nnacmd 114368 May  8 05:45 nfcapd.202105080540
-rw-r--r-- 1 nna nnacmd 111119 May  8 05:50 nfcapd.202105080545
-rw-r--r-- 1 nna nnacmd 120736 May  8 05:55 nfcapd.202105080550
-rw-r--r-- 1 nna nnacmd 115025 May  8 06:00 nfcapd.202105080555
-rw-r--r-- 1 nna nnacmd 150752 May  8 06:05 nfcapd.202105080600
-rw-r--r-- 1 nna nnacmd 110170 May  8 06:10 nfcapd.202105080605
-rw-r--r-- 1 nna nnacmd 140281 May  8 06:15 nfcapd.202105080610
-rw-r--r-- 1 nna nnacmd 134483 May  8 06:20 nfcapd.202105080615
-rw-r--r-- 1 nna nnacmd 148881 May  8 06:25 nfcapd.202105080620
-rw-r--r-- 1 nna nnacmd 121389 May  8 06:30 nfcapd.202105080625
-rw-r--r-- 1 nna nnacmd 150644 May  8 06:35 nfcapd.202105080630
-rw-r--r-- 1 nna nnacmd 121757 May  8 06:40 nfcapd.202105080635
-rw-r--r-- 1 nna nnacmd 130327 May  8 06:45 nfcapd.202105080640
-rw-r--r-- 1 nna nnacmd 113858 May  8 06:50 nfcapd.202105080645
-rw-r--r-- 1 nna nnacmd 134343 May  8 06:55 nfcapd.202105080650
-rw-r--r-- 1 nna nnacmd 118534 May  8 07:00 nfcapd.202105080655
-rw-r--r-- 1 nna nnacmd 128864 May  8 07:05 nfcapd.202105080700
-rw-r--r-- 1 nna nnacmd 147734 May  8 07:10 nfcapd.202105080705
-rw-r--r-- 1 nna nnacmd 156725 May  8 07:15 nfcapd.202105080710
-rw-r--r-- 1 nna nnacmd 159807 May  8 07:20 nfcapd.202105080715
-rw-r--r-- 1 nna nnacmd 155372 May  8 07:25 nfcapd.202105080720
-rw-r--r-- 1 nna nnacmd 161870 May  8 07:29 nfcapd.202105080725
-rw-r--r-- 1 nna nnacmd 124740 May  8 07:35 nfcapd.202105080730
-rw-r--r-- 1 nna nnacmd 116986 May  8 07:40 nfcapd.202105080735
-rw-r--r-- 1 nna nnacmd 125255 May  8 07:45 nfcapd.202105080740
-rw-r--r-- 1 nna nnacmd 117342 May  8 07:50 nfcapd.202105080745
-rw-r--r-- 1 nna nnacmd 130874 May  8 07:55 nfcapd.202105080750
-rw-r--r-- 1 nna nnacmd 126945 May  8 08:00 nfcapd.202105080755
-rw-r--r-- 1 nna nnacmd 131312 May  8 08:05 nfcapd.202105080800
-rw-r--r-- 1 nna nnacmd 174777 May  8 08:10 nfcapd.202105080805
-rw-r--r-- 1 nna nnacmd 152933 May  8 08:15 nfcapd.202105080810
-rw-r--r-- 1 nna nnacmd 146603 May  8 08:20 nfcapd.202105080815
-rw-r--r-- 1 nna nnacmd 183475 May  8 08:25 nfcapd.202105080820
-rw-r--r-- 1 nna nnacmd 136318 May  8 08:30 nfcapd.202105080825
-rw-r--r-- 1 nna nnacmd 125928 May  8 08:35 nfcapd.202105080830
-rw-r--r-- 1 nna nnacmd 140436 May  8 08:40 nfcapd.202105080835
-rw-r--r-- 1 nna nnacmd 173221 May  8 08:45 nfcapd.202105080840
-rw-r--r-- 1 nna nnacmd 125966 May  8 08:50 nfcapd.202105080845
-rw-r--r-- 1 nna nnacmd 118585 May  8 08:55 nfcapd.202105080850
-rw-r--r-- 1 nna nnacmd 126857 May  8 09:00 nfcapd.202105080855
-rw-r--r-- 1 nna nnacmd 122015 May  8 09:05 nfcapd.202105080900
-rw-r--r-- 1 nna nnacmd 164816 May  8 09:10 nfcapd.202105080905
-rw-r--r-- 1 nna nnacmd 176314 May  8 09:15 nfcapd.202105080910
-rw-r--r-- 1 nna nnacmd 146039 May  8 09:20 nfcapd.202105080915
-rw-r--r-- 1 nna nnacmd 127097 May  8 09:25 nfcapd.202105080920
-rw-r--r-- 1 nna nnacmd 166527 May  8 09:30 nfcapd.202105080925
-rw-r--r-- 1 nna nnacmd 138023 May  8 09:35 nfcapd.202105080930
-rw-r--r-- 1 nna nnacmd 133806 May  8 09:40 nfcapd.202105080935
-rw-r--r-- 1 nna nnacmd 141709 May  8 09:45 nfcapd.202105080940
-rw-r--r-- 1 nna nnacmd 143361 May  8 09:50 nfcapd.202105080945
-rw-r--r-- 1 nna nnacmd 161324 May  8 09:55 nfcapd.202105080950
-rw-r--r-- 1 nna nnacmd 160950 May  8 10:00 nfcapd.202105080955
-rw-r--r-- 1 nna nnacmd 141153 May  8 10:05 nfcapd.202105081000
-rw-r--r-- 1 nna nnacmd 130461 May  8 10:10 nfcapd.202105081005
-rw-r--r-- 1 nna nnacmd 126560 May  8 10:15 nfcapd.202105081010
-rw-r--r-- 1 nna nnacmd 153319 May  8 10:20 nfcapd.202105081015
-rw-r--r-- 1 nna nnacmd 175928 May  8 10:25 nfcapd.202105081020
-rw-r--r-- 1 nna nnacmd 129812 May  8 10:30 nfcapd.202105081025
-rw-r--r-- 1 nna nnacmd 150135 May  8 10:35 nfcapd.202105081030
-rw-r--r-- 1 nna nnacmd 174456 May  8 10:40 nfcapd.202105081035
-rw-r--r-- 1 nna nnacmd 136130 May  8 10:45 nfcapd.202105081040
-rw-r--r-- 1 nna nnacmd 133737 May  8 10:50 nfcapd.202105081045
-rw-r--r-- 1 nna nnacmd 136325 May  8 10:55 nfcapd.202105081050
-rw-r--r-- 1 nna nnacmd 135883 May  8 11:00 nfcapd.202105081055
-rw-r--r-- 1 nna nnacmd 155606 May  8 11:05 nfcapd.202105081100
-rw-r--r-- 1 nna nnacmd 152322 May  8 11:10 nfcapd.202105081105
-rw-r--r-- 1 nna nnacmd 131120 May  8 11:15 nfcapd.202105081110
-rw-r--r-- 1 nna nnacmd 133374 May  8 11:20 nfcapd.202105081115
-rw-r--r-- 1 nna nnacmd 130285 May  8 11:25 nfcapd.202105081120
-rw-r--r-- 1 nna nnacmd 141339 May  8 11:30 nfcapd.202105081125
-rw-r--r-- 1 nna nnacmd 134626 May  8 11:35 nfcapd.202105081130
-rw-r--r-- 1 nna nnacmd 139621 May  8 11:40 nfcapd.202105081135
-rw-r--r-- 1 nna nnacmd 131626 May  8 11:45 nfcapd.202105081140
-rw-r--r-- 1 nna nnacmd 132837 May  8 11:50 nfcapd.202105081145
-rw-r--r-- 1 nna nnacmd 141120 May  8 11:55 nfcapd.202105081150
-rw-r--r-- 1 nna nnacmd 132608 May  8 12:00 nfcapd.202105081155
-rw-r--r-- 1 nna nnacmd 153901 May  8 12:05 nfcapd.202105081200
-rw-r--r-- 1 nna nnacmd 131220 May  8 12:10 nfcapd.202105081205
-rw-r--r-- 1 nna nnacmd 134539 May  8 12:15 nfcapd.202105081210
-rw-r--r-- 1 nna nnacmd    276 Oct 26  2020 nfcapd.current.1616
-rw-r--r-- 1 nna nnacmd    276 Mar  6 13:35 nfcapd.current.1620
-rw-r--r-- 1 nna nnacmd      0 Mar 13 16:15 nfcapd.current.1628
-rw-r--r-- 1 nna nnacmd    276 Apr  9 04:50 nfcapd.current.1638
-rw-r--r-- 1 nna nnacmd    276 Oct 27  2020 nfcapd.current.1642
-rw-r--r-- 1 nna nnacmd    276 Dec 22 06:35 nfcapd.current.1650
-rw-r--r-- 1 nna users     276 Jul 20  2020 nfcapd.current.2561
-rw-r--r-- 1 nna nnacmd    276 May  8 12:15 nfcapd.current.61032
-rw-r--r-- 1 nna nnacmd    276 Oct 19  2020 nfcapd.current.62988
-rw-r--r-- 1 nna nnacmd    276 Apr 11 04:40 nfcapd.current.8445
[nna@NagiosNA ~]$ 

[gsmith]

Hey Rob

Looks like I added some bad options to the commands, I apologize. Please try this:

Code: Select all

su - nna   

/usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010K/flows/nfcapd.202105071255 -o csv 

/usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010Z/flows/nfcapd.202105071255 -o csv 

/usr/local/bin/nfdump -r /usr/local/nagiosna/var/ReneSwitch/flows/nfcapd.202105071255 -o csv 

/usr/local/bin/nfdump -r /usr/local/nagiosna/var/RHGSwitch2/flows/nfcapd.202105071255 -o csv

/usr/local/bin/nfdump -r /usr/local/nagiosna/var/SW2/flows/nfcapd.202105071255 -o csv

You can attach the results in your reply, or if you are concerned about security you can attach them
to a PM, and then post on this thread that they have been sent.

Thanks

[rhassing]

Code: Select all

[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010K/flows/nfcapd.202105101810 -o csv
ts,te,td,sa,da,sp,dp,pr,flg,fwd,stos,ipkt,ibyt,opkt,obyt,in,out,sas,das,smk,dmk,dtos,dir,nh,nhb,svln,dvln,ismc,odmc,idmc,osmc,mpls1,mpls2,mpls3,mpls4,mpls5,mpls6,mpls7,mpls8,mpls9,mpls10,cl,sl,al,ra,eng,exid,tr
Summary
flows,bytes,packets,avg_bps,avg_pps,avg_bpp
0,0,0,0,0,0
[nna@NagiosNA ~]$ /usr/local/bin/nfdump -r /usr/local/nagiosna/var/Aruba7010Z/flows/nfcapd.202105101810 -o csv
ts,te,td,sa,da,sp,dp,pr,flg,fwd,stos,ipkt,ibyt,opkt,obyt,in,out,sas,das,smk,dmk,dtos,dir,nh,nhb,svln,dvln,ismc,odmc,idmc,osmc,mpls1,mpls2,mpls3,mpls4,mpls5,mpls6,mpls7,mpls8,mpls9,mpls10,cl,sl,al,ra,eng,exid,tr
Summary
flows,bytes,packets,avg_bps,avg_pps,avg_bpp
0,0,0,0,0,0
[nna@NagiosNA ~]$

The other devices show a lot of output. I will collect and PM that info.

[gsmith]

Hey Rob,

I asked our NNA guru about this, he says NNA doesn't support IPFIX fully. Can you use Netflow 9 or 5?

Secondly, can you go to the /usr/local/nagiosna/var/RHGSwitch2/flows folder and get a few of the nfcapd files
and send them to you so we can look at them. We do not need the .current. files as they are incomplete.

Please do the same for /usr/local/nagiosna/var/Aruba7010K/flows. Maybe five from each location.

Thanks

[rhassing]

I have send the flow information in a pm.

I also added a screenshot of the options I have on my controller.
Unfortunately ipfix is the only option for flow data.

ksnip_20210511-182431.png

[gsmith]

Hi Rob,

There was no data at all in the Aruba files. We use the Linux command nfdump to extract the network data, and according to their website:

Code: Select all

nfdump contains an IPFIX module for decoding IPFIX flow data. It does not support the full IPFIX definition.
Supports basically same feature set of elements as netflow_v9 module
Only UDP traffic is accepted no TCP/SCTP

So we were expecting something. Could you check with Aruba to see if they have any ideas
for verifying output?

Thanks

[rhassing]

I'm getting data in now. Apparently the "Enable wireless export" should be switched off.
The only thing is it states there is irregular traffic all the time.

Thank you very much for your time and effort.