Nfsen-nfsdump-fprobe - Versionsgeschichte

Thomas: /* Links */

2014-11-21T20:52:40Z

Links

Thomas: /* Links */

2014-11-21T19:53:50Z

Links

Thomas: /* Links */

2014-11-21T19:49:41Z

Links

Thomas: /* change this */

2014-11-20T21:36:42Z

change this

Thomas: /* change this */

2014-11-20T21:00:10Z

change this

Thomas: /* change this */

2014-11-20T15:04:40Z

change this

Thomas: /* install nfsen source packets */

2014-11-20T14:22:54Z

install nfsen source packets

Thomas: /* install nfsen source packets */

2014-11-20T14:15:31Z

install nfsen source packets

Thomas am 20. November 2014 um 14:08 Uhr

2014-11-20T14:08:50Z

Thomas: Die Seite wurde neu angelegt: „=client= ==install== apt-get install fprobe ==config file==

 cat /etc/default/fprobe  #fprobe default configuration file  INTERFACE="eth0" FLOW_COLLECTOR="l…“

2014-11-20T13:46:27Z

Die Seite wurde neu angelegt: „=client= ==install== apt-get install fprobe ==config file== <pre> cat /etc/default/fprobe #fprobe default configuration file INTERFACE="eth0" FLOW_COLLECTOR="l…“

Neue Seite

=client=
==install==
apt-get install fprobe
==config file==
<pre>
cat /etc/default/fprobe
#fprobe default configuration file

INTERFACE="eth0"
FLOW_COLLECTOR="localhost:555"

#fprobe can't distinguish IP packet from other (e.g. ARP)
OTHER_ARGS="-fip"
</pre>

@@ Zeile 37: / Zeile 37: @@
 =Links=
-*www.hurlster.com/wiki/index.php/Netflow
+*http://meetings.ripe.net/ripe-50/presentations/ripe50-plenary-tue-nfsen-nfdump.pdf
 *https://www.youtube.com/watch?v=oipMSiBWB08
 *http://www.hurlster.com/wiki/index.php/Netflow

@@ Zeile 37: / Zeile 37: @@
 =Links=
 *https://www.youtube.com/watch?v=oipMSiBWB08
 *http://www.hurlster.com/wiki/index.php/Netflow

← Nächstältere Version		Version vom 21. November 2014, 19:49 Uhr
Zeile 38:		Zeile 38:
	=Links=		=Links=
	*https://www.youtube.com/watch?v=oipMSiBWB08		*https://www.youtube.com/watch?v=oipMSiBWB08
		+	*http://www.hurlster.com/wiki/index.php/Netflow

← Nächstältere Version		Version vom 20. November 2014, 21:36 Uhr
Zeile 35:		Zeile 35:
	$MAIL_FROM = 'technik@xinux.de';		$MAIL_FROM = 'technik@xinux.de';
	$SMTP_SERVER = 'baltar.tuxmen.de';		$SMTP_SERVER = 'baltar.tuxmen.de';
		+
		+	=Links=
		+	*https://www.youtube.com/watch?v=oipMSiBWB08

@@ Zeile 26: / Zeile 26: @@
 ====change this====
   $HTMLDIR     = "/var/www/html/nfsen/";
   $USER        = "www-data";
   $WWWUSER     = "www-data";

@@ Zeile 25: / Zeile 25: @@
   cp etc/nfsen-dist.conf /etc/nfsen.conf
 ====change this====
-  $USER    = "www-data";
+ $HTMLDIR     = "/var/www/html/nfsen/";
-  $WWWUSER  = "www-data";
+  $USER        = "www-data";
-  $WWWGROUP = "www-data";
+  $WWWUSER     = "www-data";
-  %sources = (
+  $WWWGROUP    = "www-data";
      'huey'    => { 'port' => '23456', 'col' => '#0000ff', 'type' => 'netflow' },
   );
   $MAIL_FROM   = 'technik@xinux.de';
   $SMTP_SERVER = 'baltar.tuxmen.de';

← Nächstältere Version		Version vom 20. November 2014, 14:22 Uhr
Zeile 19:		Zeile 19:
	tar zxvf nfsen-1.3.6p1.tar.gz		tar zxvf nfsen-1.3.6p1.tar.gz
	cd nfsen-1.3.6p1		cd nfsen-1.3.6p1
		+
		+
		+	perl -MCPAN -e 'install Socket6'
		+
		+	cp etc/nfsen-dist.conf /etc/nfsen.conf
		+	====change this====
		+	$USER = "www-data";
		+	$WWWUSER = "www-data";
		+	$WWWGROUP = "www-data";
		+	%sources = (
		+	'huey' => { 'port' => '23456', 'col' => '#0000ff', 'type' => 'netflow' },
		+	);
		+	$MAIL_FROM = 'technik@xinux.de';
		+	$SMTP_SERVER = 'baltar.tuxmen.de';

@@ Zeile 16: / Zeile 16: @@
 ===install nfsen source packets===
   cd /usr/src/
-  wget http://sourceforge.net/projects/nfdump/files/stable/nfdump-1.6.8p1/nfdump-1.6.8p1.tar.gz
+  wget http://sourceforge.net/projects/nfsen/files/stable/nfsen-1.3.6p1/nfsen-1.3.6p1.tar.gz
-  tar zxvf nfdump-1.6.8p1.tar.gz
+  tar zxvf nfsen-1.3.6p1.tar.gz
-  cd nfdump-1.6.8p1
+  cd nfsen-1.3.6p1

@@ Zeile 2: / Zeile 2: @@
 ==install==
   apt-get install fprobe
-==config file==
+==first test==
-<pre>
+ fprobe -i eth0 192.168.244.152:23456
-cat /etc/default/fprobe
+*/etc/default/fprobe
-#fprobe default configuration file
+=server=
+==nfdump==
-INTERFACE="eth0"
+===install===
-FLOW_COLLECTOR="localhost:555"
+ apt-get install nfdump
+ mkdir /var/netflow
-#fprobe can't distinguish IP packet from other (e.g. ARP)
+ nfcapd -w -D -p 23456 -B 200000 -S 1 -z -I Linux-Host-1-eth0 -l /var/netflow/
-OTHER_ARGS="-fip"
+==nfsen==
-</pre>
+===install needed packets===