[dsc] Problems in DSC latest version (dsc-200910121649.tar.gz)
Jose Romero
jromero at rcp.pe
Wed Nov 4 16:23:21 UTC 2009
Hi List!
I find DSC an interesting and valuable tool. I have installed DSC in our DNS
servers but I have some problems with it. I will appreciate your help.
I have installed the collector in the DNS servers, all is fine there, the
XML files are generated every 60 seconds.
In other machine I have installed the presenter, it runs FreeBSD 7.2, Apache
2.2, all required Perl modules and Ploticus 2.40_1.
The refile-and-grok.sh script process the XML files and generate the .dat
files.
I can see the graphics for the following datasets:
dataset qtype dns All:null Qtype:qtype queries-only;
dataset rcode dns All:null Rcode:rcode replies-only;
dataset opcode dns All:null Opcode:opcode queries-only;
dataset rcode_vs_replylen dns Rcode:rcode ReplyLen:msglen replies-only;
dataset qtype_vs_qnamelen dns Qtype:qtype QnameLen:qnamelen queries-only;
dataset qtype_vs_tld dns Qtype:qtype TLD:tld queries-only,popular-qtypes
max-cells=200;
dataset idn_qname dns All:null IDNQname:idn_qname queries-only;
dataset edns_version dns All:null EDNSVersion:edns_version queries-only;
dataset do_bit dns All:null D0:do_bit queries-only;
dataset rd_bit dns All:null RD:rd_bit queries-only;
dataset idn_vs_tld dns All:null TLD:tld queries-only,idn-only;
dataset transport_vs_qtype dns Transport:transport Qtype:qtype queries-only;
dataset direction_vs_ipproto ip Direction:ip_direction IPProto:ip_proto any;
But, I can't see the graphics for the following datasets:
dataset client_subnet dns All:null ClientSubnet:client_subnet queries-only
max-cells=200;
dataset certain_qnames_vs_qtype dns CertainQnames:certain_qnames Qtype:qtype
queries-only;
dataset client_subnet2 dns Class:query_classification
ClientSubnet:client_subnet queries-only max-cells=200;
dataset client_addr_vs_rcode dns Rcode:rcode ClientAddr:client replies-only
max-cells=50;
dataset chaos_types_and_names dns Qtype:qtype Qname:qname
chaos-class,queries-only;
dataset ipv6_rsn_abusers dns All:null ClientAddr:client
queries-only,aaaa-or-a6-only,root-servers-n et-only max-cells=50;
I don't see nothing in the apache error log. In the browser only appear "No
Data To Display At This Time" for these graphics. These files have data,
they're not empty:
~/20091103/client_subnet2_accum.dat
200.31.106.0 ok 517
200.107.160.0 ok 1363
8.0.4.0 ok 27
.
~/20091103/client_subnet2_trace.dat
1257224340 ok 9128 non-auth-tld 81
1257224400 ok 9686 non-auth-tld 28
1257224460 ok 9236 non-auth-tld 27
.
~/20091103/client_subnet2_count.dat
1257224340 ok 3834 non-auth-tld 14
1257224400 ok 3979 non-auth-tld 6
1257224460 ok 3828 non-auth-tld 6
.
~/20091103/client_subnet_accum.dat
109.106.147.0 12
109.106.148.0 9
109.165.133.0 9
.
~/20091103/second_ld_vs_rcode_accum.dat
in-addr.arpa 5 340
resufm.pe 3 2
directvla.pe 0 7
.
~/20091103/third_ld_vs_rcode_accum.dat
global_force.com.pe 3 4
g.gob.pe 3 4
connect.facebook.com 5 2
.
~/20091103/client_addr_vs_rcode_accum.dat
87.249.7.252 0 8
203.113.131.6 3 3
85.31.212.254 0 66
.
and so on ...
I trried enable debug in the dsc-grapher.cfg file with debug_level 0 and
debug_file /tmp/debug, but it don't work.
The only one error in the apache error log is when I try see the "IP
Version" - "Query Types" plots:
[Tue Nov 03 11:39:06 2009] [error] [client 161.132.1.3] Use of uninitialized
value in addition (+) at /usr/local/lib/perl5/site_perl/5.8.9/DSC/grapher.pm
line 1145., referer:
http://atlas.rcp.net.pe/cgi-bin/dsc-grapher.pl?binsize=60
<http://atlas.rcp.net.pe/cgi-bin/dsc-grapher.pl?binsize=60&window=86400&node
=ichu&plot=client_addr_vs_rcode_accum&server=SDT>
&window=86400&node=ichu&plot=client_addr_vs_rcode_accum&server=SDT
[Tue Nov 03 11:39:06 2009] [error] [client 161.132.1.3] Argument "IPv4"
isn't numeric in sort at
/usr/local/lib/perl5/site_perl/5.8.9/DSC/ploticus.pm line 76., referer:
http://atlas.rcp.net.pe/cgi-bin/dsc-grapher.pl?binsize=60
<http://atlas.rcp.net.pe/cgi-bin/dsc-grapher.pl?binsize=60&window=86400&node
=ichu&plot=client_addr_vs_rcode_accum&server=SDT>
&window=86400&node=ichu&plot=client_addr_vs_rcode_accum&server=SDT
I have also tried to see the these graphics by URL:
http://~/cgi-bin/dsc-grapher.pl?binsize=60
<http://~/cgi-bin/dsc-grapher.pl?binsize=60&window=86400&content=image&node=
ichu&plot=client_subnet2_accum&server=SDT>
&window=86400&content=image&node=ichu&plot=client_subnet2_accum&server=SDT
And the browser shows:
"Internal Server Error
The server encountered an internal error or misconfiguration and was unable
to complete your request."
In the apache error log I see:
"[Wed Nov 04 11:17:15 2009] [error] [client 161.132.1.3] Premature end of
script headers: dsc-grapher.pl"
Someone has any idea about this problem? Thanks in advance.
Regards
Jose Romero
More information about the dsc
mailing list