Cacti (home)ForumsRepositoryDocumentation
Cacti: offical forums and support  

 FAQFAQ   SearchSearch   MemberlistMemberlist    RegisterRegister   ProfileProfile   Log in to check your private messagesLog in to check your private messages   Log inLog in    


netflow and cacti
Goto page Previous  1, 2, 3  Next
 
Post new topic   Reply to topic    Cacti Forum Index -> Addons for Cacti
Author Message
cigamit
Developer


Joined: 07 Apr 2005
Posts: 978
Location: B/CS Texas

PostPosted: Fri Jun 02, 2006 8:04 pm    Post subject: Reply with quote

CaM wrote:
flowview - again thanks, it works a treat however I was wondering. I work for a international law firm with 12 offices and a fair amount of windows based server. The netflow data is being collected from routers mostly across 2Mb leased lines and a lot of data is hitting CactiEZ flow-tools hence my reason to move Cacti on to one box and move flow-tools off my main cacti server onto its own. Personally I use flowviewer as a web page on a CactiEZ box and link to it from my main Cacti server (windows 2003 Srv, Apache).

The flowview plugin works a treat on the CactiEZ box but would be nice if I could achieve the same from your plugin.

Is it acheivable to have the Flow Tools Binary Path, Flow Tools Work Directory etc. on a remote host.


Hum... I need to make sure that I am understanding you correctly.
Server #1 - has flowtools plugin
Server #2 - has flowtools data and binaries

You want for the plugin on Server #1 to query the data on the Server #2. The simplest way would be to have Cacti (with the plugin) on Server #2 also (Cacti doesn't have to poll anything, just be there) and just remove the "authorization" on the viewer and have it load in an Iframe on #1. Not very secure, but easily workable.

Otherwise, I would have to write separate viewer and "server" modules, and have the client send the form info to the server, parse the info, and then send it all back to the client for viewing. Not extremely hard, just will take a bit of work to also make it secure enough that only authorized users could query it.
Back to top
insaneman



Joined: 28 May 2006
Posts: 1

PostPosted: Mon Jun 05, 2006 5:21 am    Post subject: stupid-Q Reply with quote

Hy,
I have a fprobe runnning linux that exports the flows twards another machine that runs flow-capture and outputs the files into a directory. My stupid question is ..how can i decode the flow files just 2 be sure that they contain information because flow-viewer is not working properly for me . I added the bin path, and the path that points 2 the directory and when i click flow viewer i dont even get and interface to query (so i think that it is not reading the files )

Thank you.
Back to top
CaM



Joined: 11 May 2006
Posts: 6

PostPosted: Tue Jun 06, 2006 1:07 pm    Post subject: Reply with quote

cigamit wrote:


Hum... I need to make sure that I am understanding you correctly.
Server #1 - has flowtools plugin
Server #2 - has flowtools data and binaries

You want for the plugin on Server #1 to query the data on the Server #2. The simplest way would be to have Cacti (with the plugin) on Server #2 also (Cacti doesn't have to poll anything, just be there) and just remove the "authorization" on the viewer and have it load in an Iframe on #1. Not very secure, but easily workable.

Otherwise, I would have to write separate viewer and "server" modules, and have the client send the form info to the server, parse the info, and then send it all back to the client for viewing. Not extremely hard, just will take a bit of work to also make it secure enough that only authorized users could query it.


Bang on cigamit! Thats the type of setup that would best suit my environment, saves having to let my techies fiddle with my cacti setup.

Thinking about it though your current plugin method is best suited for the masses!


Last edited by CaM on Tue Jun 06, 2006 5:14 pm; edited 1 time in total
Back to top
CaM



Joined: 11 May 2006
Posts: 6

PostPosted: Tue Jun 06, 2006 1:11 pm    Post subject: Reply with quote

Oops sorry! obviously cant use phpBB ver well!
Back to top
gandalf
Developer


Joined: 02 Dec 2004
Posts: 12604
Location: Muenster, Germany

PostPosted: Tue Jun 06, 2006 2:40 pm    Post subject: Reply with quote

Just deleted the redundant posts
Reinhard
Back to top
CaM



Joined: 11 May 2006
Posts: 6

PostPosted: Tue Jun 06, 2006 5:24 pm    Post subject: Reply with quote

thanks lvm!

insaneman: Have you tried flow-print tool that comes with flow-tools ?

As long as flow-print is in your path navigate to your flow files and type:

flow-print < flowfilename

man ages can be found at:
http://www.splintered.net/sw/flow-tools/docs/flow-print.html

Should spit out out the raw flow data to screen.

Can you confirm which flow-viewer your on about? cigamits plugin or the perl based one listed earlier in the post ?
Back to top
cigamit
Developer


Joined: 07 Apr 2005
Posts: 978
Location: B/CS Texas

PostPosted: Tue Jun 06, 2006 11:16 pm    Post subject: Reply with quote

Minor update, and a little idea of what I have in store.

Late last night I added support for "relative" times. This allows you to put for instance "NOW" for the End Time (date must be blank) and something like "-2 HOURS" (or minutes or days) in the start time. This way you don't have to keep changing the times to run the report again.

This ofcourse is leading in a very particular direction for a reason. Now that the times can be relative, you will eventually be able to "Save" those "Reports" and re-run them over and over. This will lead to my next feature to implement. Scheduling and emailing the reports. Which seems like it would fairly handy to me.

Most of this is fairly simple, and shouldn't take too long to get going.
Back to top
CaM



Joined: 11 May 2006
Posts: 6

PostPosted: Mon Jun 12, 2006 12:43 pm    Post subject: Reply with quote

Hi cigamit,

This maybe a daft question but how do I remove the "authorization" on the viewer ?
Back to top
cigamit
Developer


Joined: 07 Apr 2005
Posts: 978
Location: B/CS Texas

PostPosted: Mon Jun 12, 2006 9:54 pm    Post subject: Reply with quote

CaM wrote:
Hi cigamit,
This maybe a daft question but how do I remove the "authorization" on the viewer ?


I assume you want anyone on your network to be able to view it? Not wise in alot of setups, but if you really want, just remove this from line 4 of flowview.php
Code:
include_once("./include/auth.php");
Back to top
CaM



Joined: 11 May 2006
Posts: 6

PostPosted: Tue Jun 13, 2006 4:29 am    Post subject: Reply with quote

Hum! Would agree with you!

Thanks for the info though! much appreciated!
Back to top
woodgdo1



Joined: 21 Jun 2006
Posts: 2

PostPosted: Wed Jun 21, 2006 4:26 pm    Post subject: Reply with quote

Does anyone know if it is possible to url-encode variables to the flowview.php script to automate the output generation? I would like to make a couple of quick links to output for certain network segments to place in my weathermap so I can see who is talking.

Thanks,
Doug
Back to top
cigamit
Developer


Joined: 07 Apr 2005
Posts: 978
Location: B/CS Texas

PostPosted: Wed Jun 21, 2006 9:54 pm    Post subject: Reply with quote

woodgdo1 wrote:
Does anyone know if it is possible to url-encode variables to the flowview.php script to automate the output generation? I would like to make a couple of quick links to output for certain network segments to place in my weathermap so I can see who is talking.

Thanks,
Doug


Not possible, as it expects a POST form, and not the GET method. This ofcourse is something is that is in the works. You will be able to "save" a search, and rerun it over with a simple link like flowview.php?report=1 and ofcourse you will then be able to set those reports to run automatically and email you the results.
Back to top
cromac



Joined: 04 Aug 2008
Posts: 4

PostPosted: Mon Sep 01, 2008 5:44 am    Post subject: Reply with quote

Hi all,

is saving of queries working for you? I am unable to save the query... If I add line into table plugin_flowview_queries manually I am able to update the saved query then.

Any help will be highly appereciated.

Cheers

Cromac
Back to top
cigamit
Developer


Joined: 07 Apr 2005
Posts: 978
Location: B/CS Texas

PostPosted: Mon Sep 01, 2008 7:13 pm    Post subject: Reply with quote

What browser are you using?
Back to top
cromac



Joined: 04 Aug 2008
Posts: 4

PostPosted: Tue Sep 02, 2008 5:17 am    Post subject: Reply with quote

Hi,

I tried this with IE 7 and Firefow 3.0.1. Results were same.

Cromac
Back to top
Display posts from previous:   
Post new topic   Reply to topic    Cacti Forum Index -> Addons for Cacti All times are GMT - 5 Hours
Goto page Previous  1, 2, 3  Next
Page 2 of 3

 



Powered by phpBB © 2001, 2005 phpBB Group