Re: Historical Data Issue's

Hi Simon,


On Fri, Mar 31, 2017 at 4:33 PM, Simon Bell <[email protected]> wrote:

> Hi Simon,
>
>
>
> I believe so, I purchased it a few weeks ago:
>
>
>
> *Version*
>
> 2.5.170331
> <https://github.com/ntop/ntopng/commit/ee2bee7a732c9a074ac1337b175d91a5ac8869fb> -
> Pro Small Business Edition
>
>
>
> It never seems to revert to community, and no matter if I restart I don’t
> get the flows or historical sections working for any period of time(no 10
> minute grace).
>
>
>
> The historical data explorer will not pull any data, or if I go onto
> interface, click on graph, then you would normally be able to click
> flows/ipv4 and get some information there, but neither exists.
>
>
>
> It says querying database, then  No results found. Please modify your
> search criteria.
>
>
>
>  I’ve grabbed the query from the mysql logs and it looks to be an issue
> possible with time:
>
>
>
> I know the timeset that I put into historical data was logging data as I
> dropped the database and re-created it effectively:
>
>
>
> MariaDB [(none)]> connect ntopng
>
> Connection id:    69
>
> Current database: ntopng
>
>
>
> MariaDB [ntopng]> show tables;
>
> Empty set (0.00 sec)
>
>
>
> Then after restarting ntopng:
>
>
>
> MariaDB [ntopng]> select COUNT(*) AS TOT_FLOWS, SUM(IN_BYTES + OUT_BYTES)
> AS TOT_BYTES, SUM(PACKETS) AS TOT_PACKETS FROM flowsv4 where
> (NTOPNG_INSTANCE_NAME='xxxxxx'OR NTOPNG_INSTANCE_NAME IS NULL) AND
> (INTERFACE_ID='4') AND (IP_SRC_ADDR='1403428868' OR
> IP_DST_ADDR='1403428868');
>
> +-----------+-----------+-------------+
>
> | TOT_FLOWS | TOT_BYTES | TOT_PACKETS |
>
> +-----------+-----------+-------------+
>
> |         0 |      NULL |        NULL |
>
> +-----------+-----------+-------------+
>
> 1 row in set (0.00 sec)
>
>
>
> MariaDB [ntopng]> select COUNT(*) AS TOT_FLOWS, SUM(IN_BYTES + OUT_BYTES)
> AS TOT_BYTES, SUM(PACKETS) AS TOT_PACKETS FROM flowsv4 where
> (NTOPNG_INSTANCE_NAME='xxxxxxx'OR NTOPNG_INSTANCE_NAME IS NULL) AND
> (INTERFACE_ID='4') AND (IP_SRC_ADDR='1403428868' OR
> IP_DST_ADDR='1403428868');
>
> +-----------+-----------+-------------+
>
> | TOT_FLOWS | TOT_BYTES | TOT_PACKETS |
>
> +-----------+-----------+-------------+
>
> |        33 |    514196 |        7152 |
>
> +-----------+-----------+-------------+
>
> 1 row in set (0.05 sec)
>
>
>
> I get nothing on the historical datapage and when I put the
> timeset(FIRST_SWITCHED <= 1490967005 and FIRST_SWITCHED) in the sql query I
> get NULL, which I know can’t be correct as I dropped the database as above
> and ensured it was populated for at least 10 minutes (stopped and restarted
> nprobe as well). So the only data in the database must be from that time
> period.
>
>
>
> Can this due to some timing issue? I had the 47 years old flows on 2.4
> stable.
>

Yes, that can be a possible explanation as ntopng uses first and last
switched to query flows in the selected time range. Having 47-years old
flows means that those values are at zero.
Can you please report the exact ntopng (and possibly nProbe) configurations
used?

Thanks

Simone


>
>
> Thanks for your time
>
>
>
> Cheers
>
>
>
> Simon
>
>
>   Simon Bell
> ------------------------------
> Core Network Architect
>
> ddi. *0845 123 2229*
> t. *0845 123 2222*
> e. *[email protected] <[email protected]>* *Wakefield Office*
> Node4 Ltd, Pope Street,
> Normanton, Wakefield, WF6 2TA
>
>
> [image: Visit www.node4.co.uk] <http://www.node4.co.uk>
>
> [image: Visit www.node4.co.uk] <http://www.node4.co.uk>
> [image: Visit Node4 on Twitter] <http://www.twitter.co.uk/Node4Ltd>
> [image: Visit Node4 on Linkedin]
> <https://www.linkedin.com/company/node4-ltd>
> [image: Visit Node4 on Facebook] <http://www.facebook.com/Node4>
>
>
>
>
> <http://www.node4.co.uk/blog/how-a-visit-to-cisco-inspired-the-node4-mobile-solution-centre/>
>
>
> Node4 Limited is registered in England No: 04759927 and has its registered
> office at Millennium Way, Pride Park, Derby, DE24 8HZ
> The information contained in this email is confidential and is intended
> for the exclusive use of the email addressee shown.
> If you are not the addressee, any disclosure, reproduction, distribution
> or other dissemination or use of this communication is strictly prohibited.
> If you have received this mail in error, please notify our mail manager at
> [email protected] and delete it from your system.
> Opinions expressed in this email are those of the individual not the
> company, unless specifically indicated to that effect.
> ------------------------------
> This email has been scanned by Node4's Email Security System.
> ------------------------------
> This email message has been delivered safely and archived online by
> Mimecast.
>
> _______________________________________________
> Ntop mailing list
> [email protected]
> http://listgateway.unipi.it/mailman/listinfo/ntop
>

_______________________________________________
Ntop mailing list
[email protected]
http://listgateway.unipi.it/mailman/listinfo/ntop