Products
Nagios Network Analyzer - Top 5 Talkers is not appearing for my device
Problem Description
Any device that implements NetFlow Secure Event Logging (NSEL) instead of a standard sflow or netflow protocol may be affected.
From Cisco's documentation:
NSEL events are used to export data about flow status and are triggered by the event that caused the state change. In stateful flow tracking, tracked flows go through a series of state changes.
Cisco's Adaptive Security Appliance (ASA) is an example of a device that implements NSEL.
Symptoms
Top 5 talkers do not appear on the source's bandwidth graph, while the bandwidth itself appears to be available:
Solutions
Upgrade
This issue was resolved in Nagios Network Analyzer version 2R1.1. If you are able, please download and install the latest Nagios Network Analyzer release.
Compile From Source
If you are not able to upgrade Nagios Network Analyzer, the following commands can be used to recompile nfdump with NSEL support. Please note that previous netflow data may be unavailable after this upgrade.
cd /tmp
wget http://sourceforge.net/projects/nfdump/files/stable/nfdump-1.6.13/nfdump-1.6.13.tar.gz/download
tar xzf download && cd nfdump-1.6.13
./configure--enable-sflow --enable-nsel
make
make install
Final Thoughts
For any support related questions please visit the Nagios Support Forums at: