Thanks, that fixed me up, on to the next problem...
When I run the tail -f /var/log/flowscan I get a /etc/init.d/flowscan-init: line 7:bin/flowscan:No such file or directory /etc/init.d/flowscan-init: line 7:bin/flowscan:Is a directory I think I only got the first line the first time I ran it so I created a directory flowscan there, then I got the other message on there... Ran the netstat and tcpdump and its got all kinds of stuff, so im assuming the flows are ok... One thing that's kind of weird is when I go to the /var/netflow directory when im browsing it lists all the files as 0bytes, but it also doesn't list everything as there are thousands of files in there, so that might be why its acting strange. Thanks for the help Ross -----Original Message----- From: Robert S. Galloway [mailto:[EMAIL PROTECTED] Sent: Thursday, April 21, 2005 10:38 PM To: Ross Wimmersberger; [email protected] Subject: RE: [Flow-tools] Couple installation problems Hi Ross, Please see my comments in-line. Best regards, Robert S. Galloway Chief Network Security Engineer IKANO Communications Network Operations Department ...the team behind the machines "You have enemies? Good. That means you've stood up for something, some time in your life." -- Winston Churchill -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ross Wimmersberger Sent: Thursday, April 21, 2005 3:35 PM To: [email protected] Subject: [Flow-tools] Couple installation problems Im capturing flows and had a couple problems along the way, First, on page 6 It says to go to do the ./configure make, makeinstall etc... Then cd CF ... I don't have a CF directory for some reason, and then the next CP command for the flowscan.cf didn't work either. >>>>> The cd command assumes that you are still in the same directory that you unpacked the files to and ran the commands to compile FlowScan (./configure, etc.) in. Also, everything is case sensitive. >>>>> Second, page 7 It says to go to /var/netflow/bin and edit FlowScan.cf ...I don't have this file, I just have the 01-flowscan.pm and the other flow-dscan, flow-export etc... Any ideas for me? >>>>> Obviously if you don't copy the file on page 6, the instructions on page 7 aren't going to apply. As soon as you get the config file copied from FlowScan-1.006/cf to /var/netflow/bin, you should be good to go from there. Based on the files you have listed here, you've changed directories at some point. Those files are part of flow-tools, not FlowScan. >>>>> One more thing, when you run the command on each MAJOR interface, do you run that on the interface that we input as the SOURCE interface too? Thanks >>>>> Yes, every interface including the one listed as the source interface. The source interface is there so that you can be absolutely certain of the IP address that the flows will source from. (Important for firewall configs, etc.) >>>>> Ross Wimmersberger Network Engineer Manager MCP, MCSA, Net +, A +, CCNA 765-254-3359 ------------------------------------------------ CONFIDENTIALITY NOTICE: This e-mail and any attachments are confidential. In the event that you have received this e-mail in error, please notify us immediately by returning it to the sender and then deleting all copies from your system. _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools _______________________________________________ Flow-tools mailing list [EMAIL PROTECTED] http://mailman.splintered.net/mailman/listinfo/flow-tools
