FlowView plugin sees no action

[ukzerosniper]

Hi Guys,

I am having trouble with the FlowView plugin as included with CactiEZ. Could someone please help me diagnose the problem.

I am running CactiEZ version 0.8.8.b with flowview plugin version 1.3.

I have opened the ports in IPtables 2055 and 2056 for both TCP and UDP traffic.

I have pointed 2x MikroTik routers at the Cacti Server one on each of the two ports and can see the flow streams working on the routers. The routers are using version 5 and the listeners are configured with version 5.

I have created directories on the server under "/var/netflow/flows" for each router. /var/netflow/flows/router1 & /var/netflow/flows/router2

I have given the above folders 777 permissions to ensure they can be written to.

In the listeners tab I have set the "Directory" for the routers simply as router1 and router2 respectively. I did this because it instructs me not to include the full directory structure. Perhaps this is where I am going wrong?

Can anyone help me to diagnose what I am doing wrong please.

Thanks in advance.

[cigamit]

Did you restart the flow-capture service after setting up the devices?
Check and see if you are listening on those ports respectively, and whether flows are being written to the directory you specified in settings.

[ukzerosniper]

I have not restarted the flow capture service. Could you tell me how to do this? (flow service restart)?

When I check the directory's for the routers on the server, they are blank. Nothing is being written to them.

Any ideas on how to diagnose this issue?

I will try restarting the server to see if this helps. ( I assume that will restart the service in question).

[cigamit]

Code: Select all

service flow-capture restart

Restarting the server will also do it.

[ukzerosniper]

Cool beans.

I am now capturing flow from the router pointing at the default port. However, I am not capturing a flow from the router pointing at the second none default port which I set in flowview and on the router as 2056. I have also opened the tcp and udp in iptables for this port.

Any ideas?

Thanks.

[ukzerosniper]

Additionally, when I delete the listener on port 2056 and restart the service, it doesn't remove the listener from the list...

How do I remove it from the list?

Thanks.

[cigamit]

To completely remove it, you need to remove the folder it created for the flows in the path you have set.