Hi Brian, No, this host is running BSD, not Linux.
nfcapd runs normally otherwise, it just appears to have a problem replicating the flows. -- Stephen On 2015-08-07 10:19 AM, Brian Epstein wrote: > -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA256 > > Hi Stephen, > > Any possibility that the security context is causing SELinux to block? > > Thanks, > ep > > On 08/05/2015 04:26 PM, Stephen Fulton wrote: >> Hi there, >> >> I'm running nfdump v1.6.13 and I've configured nfcapd to replicate >> incoming v9 flows to an external host, but there are errors in >> syslog and no egress flows are exported. Here's the config: >> >> /usr/local/bin/nfcapd -w -D -p 9995 -u www -g www -B 200000 -S 1 -P >> /var/run/p9997.pid -z -I lns01-cgy1 -l >> /var/nfsen/profiles-data/live/rtr1 -s -1000 -R 1.1.1.1/2005 >> >> I've verified nothing is being exported from the source server, and >> nothing is received by the destination server, using tcpdump. >> >> I'm seeing these messages repeatedly in my logs, and these only >> appear when nfcapd is configured to replicate flows: >> >> Aug 5 16:20:49 outpost05 nfcapd[87329]: ERROR: sendto(): >> Permission denied Aug 5 16:20:50 outpost05 nfcapd[87326]: ERROR: >> sendto(): Permission denied Aug 5 16:21:21 outpost05 last message >> repeated 46 times >> >> Any ideas? >> >> -- Stephen >> >> ---------------------------------------------------------------------- > - -------- >> >> > _______________________________________________ >> Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net >> https://lists.sourceforge.net/lists/listinfo/nfdump-discuss >> > > > > - -- > Brian Epstein <bepst...@ias.edu> +1 609-734-8179 > Manager, Network and Security Institute for Advanced Study > Key fingerprint = A6F3 9F5A 26C5 5847 79ED C34C C0E5 244A 55CA 2B78 > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v2 > > iQIcBAEBCAAGBQJVxL6MAAoJEMDlJEpVyit4PiwP/3g40CxkULCpFsBH1r79AvrB > LlIQSgTFE/gFYexy197r2ZWzf5lLc3r5zW2QpvNADyZ/sxXvzWR87oeI3rB+LXv7 > Wr/1UsrSz/W7iDgJkfh2OKsqB1p+DPZ/tOEhLn+CPLrlpFH18djjydHJauPr0Q0w > Nzi4YwADctx2V997AlUnzQJGvKC86tJ6dT2z7qvfGX8qrU64lP0rKRIDAel6XBx9 > QfdIr5EQDsSLiLnTs1OIys17JLVB1Tg8h8IxeDkR5g8yizOcidYm3flw4sIesFv8 > LipeVyoZQvNoLBqQ/0tuQXZY6sM5vRexnqDschPyiLz0D7nZi/8c1UM+qyEkTEvm > FQetKAPiIWJy0uE6dzBo3RJoqoeC5ndnlW6nT67pihPudFbcGcoa4dJxzcD7mQOH > PN/nGAPcsHZtIf0uOBbcKmvwZhC9hmPNtdbLsdefew9BKhzy+yrp660k9oDtn0yz > 2LvhTAweMoooWhLJFDqrxqwYxLG57ZxCXOjnjsv4uQRq1hTYGjYY4pn3D6lqbFFg > bZIb6+fXRe1AmRwJgZNeC+QkNF3y4K1HBG/JDsKSm9gE+pqIL4pQ4pqzR942Uexk > poffOqdAUWGWfHAiFbnYp0/QQJoAXwBve+y9kS9uenzFev7qlYQQS9EDEqk7xpfg > zLisrtjcuhBtGMBpOrGe > =Hzv/ > -----END PGP SIGNATURE----- > > ------------------------------------------------------------------------------ > _______________________________________________ > Nfdump-discuss mailing list > Nfdump-discuss@lists.sourceforge.net > https://lists.sourceforge.net/lists/listinfo/nfdump-discuss > ------------------------------------------------------------------------------ _______________________________________________ Nfdump-discuss mailing list Nfdump-discuss@lists.sourceforge.net https://lists.sourceforge.net/lists/listinfo/nfdump-discuss
