Changes between Version 12 and Version 13 of netmon2017netflow

Timestamp:

Nov 21, 2017, 5:19:19 PM (7 years ago)

Author:

admin

Comment:

--

netmon2017netflow

@@ -17 +17 @@
        libmailtools-perl bison flex
 }}}
+
+You might get a box asking '''Make /etc/mrtg.cnf owned by and readable only by root?''' select '''yes'''.
 
 Now proceed to download and build. Note that only the last step (make install) has to be done as root.
@@ -115 +117 @@
 
 === For a netflow router ===
+{{{
 $ mkdir /tmp/nfcap-test
 $ nfcapd -E  -p 9001 -l /tmp/nfcap-test
+}}}
+
 ... after a while, a series of flows should be dumped on your screen.
 
 Stop the tool with CTRL+C, then look at the contents of /tmp/nfcap-test
-
+{{{
 $ ls -l /tmp/nfcap-test
+}}}
+
 You should see one or more files called nfcapd.<YEAR><MON><DAY><HR><MIN>
 
 Process the file(s) with nfdump:
-
+{{{
 nfdump -r /tmp/nfcap-test/nfcapd.201Ywwxxyyzz | less
 nfdump -r /tmp/nfcap-test/nfcapd.201Ywwxxyyzz -s srcip/bytes
-
-=== For a slow router ===
+}}}
+w,x,y,z indicate year, month, day and time.
+
+=== For a sflow router ===
+{{{
 $ mkdir /tmp/sfcap-test
 $ sfcapd -E  -p 9001 -l /tmp/sfcap-test
+}}}
+
 ... after a while, a series of flows should be dumped on your screen.
 
 Stop the tool with CTRL+C, then look at the contents of /tmp/nfcap-test
-
+{{{
 $ ls -l /tmp/sfcap-test
-You should see one or more files called nfcapd.<YEAR><MON><DAY><HR><MIN>
+}}}
+
+You should see one or more files called sfcapd.<YEAR><MON><DAY><HR><MIN>
 
 Process the file(s) with nfdump:
 
+{{{
 nfdump -r /tmp/sfcap-test/sfcapd.201Ywwxxyyzz | less
 nfdump -r /tmp/sfcap-test/sfcapd.201Ywwxxyyzz -s srcip/bytes
+}}}
+w,x,y,z indicate year, month, day and time.
 
 == Installing and setting up NfSen ==
@@ -149 +166 @@
 {{{
 $ cd
-$ wget http://wget http://192.248.4.49/NotMon/nfsen-1.3.6p1.tar.gz
+$ wget http://wget http://192.248.4.49/NetMon/nfsen-1.3.6p1.tar.gz
 $ tar xvzf nfsen-1.3.6p1.tar.gz
 $ cd nfsen-1.3.6p1
 $ perl -MCPAN -e 'install Socket6'
+Would you like to configure as much as possible automatically? [yes]
+What approach do you want? (Choose local::lib, sudo or manual)
+[local::lib]
 $ cd etc
 $ cp nfsen-dist.conf nfsen.conf
@@ -192 +212 @@
 }}}
 
-(substitute your group's router for rtrX, and either remove or comment out the existing sample sources).
+(substitute your group's router for accessrtr, and either remove or comment out the existing sample sources).
 
 Change the HTMLDIR from /var/www/nfsen/ to /var/www/html/nfsen/
@@ -200 +220 @@
 Now save and exit from the file.
 
-Deafault rrd tool version for nfsen is 1.5 but the latest version 1.6 therefore a slight configuration is needed
-{{{
-vi libexec/NfSenRRD.pm
+Default rrd tool version for nfsen is 1.5 but the latest version 1.6 therefore a slight configuration is needed
+{{{
+cd
+vi nfsen-1.3.6p1/libexec/NfSenRRD.pm
 }}}