Netflow plugins

[anmomin1]

Any recommendation for netflow puglins.. is there one for Free? or low cost ?
Can it be used as addons in cacti or weathermap?

[cigamit]

https://github.com/cacti/plugin_flowview

[netniV]

If you are downloading from above, I would suggest that you use the released versions. The develop is under development.

[anmomin1]

@cigamit and @netniV

Thanks for your response..
https://github.com/cacti/plugin_flowview
i checked.. it says it will show report off of your netflow data.. so you need netflow collector separately?

@netniV
When you says released version what that means? latest stable version? is it 2.1 ?

Thanks.

[cigamit]

If you use the master branch, it requires you use the flow-tools binaries and set it up to collect data. The development branch does it own processing, but as it is under active development, it is not ready for prime time just yet (lots of bugs).

[darrenh]

Hi,
do you have explicit instructions for getting netflow working on cacti 1.x?
i am running .28 right now (second newest), and the port never opens up.
There is very limited instructions in the README file in the zip, it doesn't mention anything about using a third party collector anymore, and most of the config fields are missing from the new version (i assume because cacti is running the collector and not relying on flow-tools or similar to store it).

other than unzipping, installing and enabling through the web interface, is there anything else required as long as that port is open on the pc?

i tried unzipping the .tgz file for 0.8.8 master and it says the file is not complete download of version 1.1 regardless of how many times i download it or where i download it to, appears corrupt?

[TheWitness]

The 'develop' version is now safe. We would like more people to test it. The reporting is still pretty limited, but it's better than darkness.

[Jeeves]

The 'develop' version is now safe. We would like more people to test it. The reporting is still pretty limited, but it's better than darkness.

I decided to set this up for testing. tcpdump shows data incoming on the port but the Listener shows as down. Suggestions?

edit:
I personally have the same questions as above;

other than unzipping, installing and enabling through the web interface, is there anything else required as long as that port is open on the pc?

Looking through the install docs, I see nothing explaining the .sql file (does it need imported?) nor anything explaining how flow-capture gets kicked off.

edit2:
I poked around and fired up /flow-capture manually (/usr/bin/flow-capture -w /var/netflow/flows 0/0/2055 -S5 -V5 -z4).
However, when trying to create filters, I receive "SQL Save on table 'plugin_flowview_queries': Column 'device_id' does not exist, unable to save!"
Equally, nothing appears to be accumulating in /var/netflow/flows.

[cigamit]

Did you setup the service? Also, just something to note until we fix it, the service file has a hard coded path to /var/www/html/cacti/ so you may have to fix that in your install.

[Jeeves]

Did you setup the service? Also, just something to note until we fix it, the service file has a hard coded path to /var/www/html/cacti/ so you may have to fix that in your install.

I did the following:
- Uninstalled flow-tools
- Walked through the install steps (that I didn't know were there) - here.
-- Sidenote: There's a missed letter in the readme - Then, run 'systemtl enable flow-capture'
- Fixed hardcoded path
- setup the service via systemd.
- setup the 2 flowview options under misc.
- Listener is reported as up by both systemctl and Cacti

Code: Select all

systemctl status flow-capture
● flow-capture.service - Flow Capture Service for Cacti
   Loaded: loaded (/usr/lib/systemd/system/flow-capture.service; enabled; vendor preset: disabled)
   Active: active (running) since Wed 2020-03-11 14:46:12 MDT; 8s ago
  Process: 61567 ExecStart=/usr/bin/php -q /usr/share/cacti/plugins/flowview/service/flow-capture --systemd (code=exited, status=0/SUCCESS)
 Main PID: 61570 (php)
   CGroup: /system.slice/flow-capture.service
           └─61570 /usr/bin/php -q /usr/share/cacti/plugins/flowview/flow_collector.php --listener-id=2

Mar 11 14:46:11 cacti systemd[1]: Starting Flow Capture Service for Cacti...
Mar 11 14:46:12 cacti php[61567]: NOTE: Starting Flow Collection
Mar 11 14:46:12 cacti php[61567]: NOTE: Launching cacti-flow-capture as '/usr/share/cacti/plugins/flowview/flow_collector.php --listener-id=2'
Mar 11 14:46:12 cacti systemd[1]: Started Flow Capture Service for Cacti.

Tried to setup filters;
- New Filter
- Change nothing, click save:


My source is a v9 source, I do not see data anywhere and the obvious Cacti sql error seems to lead me to believe a table is missing.

[Jeeves]

Followup;
And it's vomiting errors;

2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[647]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 1 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 647
2020/03/11 16:02:06 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[513]:unpack(), CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP WARNING in Plugin 'flowview': unpack(): Type n: not enough input, need 2, have 0 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 513
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[567]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 16 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 567
2020/03/11 16:02:06 - CMDPHP PHP ERROR NOTICE Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[563]:CactiErrorHandler())
2020/03/11 16:02:06 - ERROR PHP NOTICE in Plugin 'flowview': Undefined offset: 9 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 563

and

2020/03/11 16:58:28 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[513]:unpack(), CactiErrorHandler())
2020/03/11 16:58:28 - ERROR PHP WARNING in Plugin 'flowview': unpack(): Type n: not enough input, need 2, have 0 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 513
2020/03/11 16:58:27 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[513]:unpack(), CactiErrorHandler())
2020/03/11 16:58:27 - ERROR PHP WARNING in Plugin 'flowview': unpack(): Type n: not enough input, need 2, have 0 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 513
2020/03/11 16:58:26 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[660]:process_v9_v10(), /var/lib/cacti/plugins/flowview/flow_collector.php[999]:CactiErrorHandler())
2020/03/11 16:58:26 - ERROR PHP WARNING in Plugin 'flowview': Division by zero in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 999
2020/03/11 16:58:26 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[660]:process_v9_v10(), /var/lib/cacti/plugins/flowview/flow_collector.php[999]:CactiErrorHandler())
2020/03/11 16:58:26 - ERROR PHP WARNING in Plugin 'flowview': Division by zero in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 999
2020/03/11 16:58:26 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[513]:unpack(), CactiErrorHandler())
2020/03/11 16:58:26 - ERROR PHP WARNING in Plugin 'flowview': unpack(): Type n: not enough input, need 2, have 0 in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 513
2020/03/11 16:58:25 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[660]:process_v9_v10(), /var/lib/cacti/plugins/flowview/flow_collector.php[999]:CactiErrorHandler())
2020/03/11 16:58:25 - ERROR PHP WARNING in Plugin 'flowview': Division by zero in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 999
2020/03/11 16:58:24 - CMDPHP PHP ERROR WARNING Backtrace: (/var/lib/cacti/plugins/flowview/flow_collector.php[335]:process_fv9(), /var/lib/cacti/plugins/flowview/flow_collector.php[660]:process_v9_v10(), /var/lib/cacti/plugins/flowview/flow_collector.php[999]:CactiErrorHandler())
2020/03/11 16:58:24 - ERROR PHP WARNING in Plugin 'flowview': Division by zero in file: /var/lib/cacti/plugins/flowview/flow_collector.php on line: 999

[Osiris]

Log this on GitHub please. Please also describe the source of the flow data too.

[Jeeves]

Log this on GitHub please. Please also describe the source of the flow data too.

Sure thing.
I am not a developer, so I am unsure if this is two bugs (SQL & v9 collector not working) or all related (SQL maybe?)

[Osiris]

Looking at the output, whomever is supplying the v9 flow data, has inserted something into the stream that appears to not follow the v9 protocol as it's been implemented in Cacti.

That is why it's important that we know if this is Cisco, Mikrotik or some other vendors implementation of Netflow. So, make and model of the router and the software version would be helpful.