Hi,
I was reading the instructions
here:http://www.dynamicnetworks.us/netflow/5-configure-flow-tools.html
and I created a linkme script that looks like this:
#!/usr/local/bin/perl
$base = "/usr/local/var/db/flows";
if ($ARGV[0] =~ /.*[\/]*(ft-v05[^\/]*$)/) {
$fileName = $1;
} else {
print "Must specify file\n";
exit 1;
}
unless ( symlink("$base/ft/$fileName","$base/$fileName") ) {
print "Unable to create symbolic link: $base/$fileName\n";
exit 1;
}
Then I started my flow-capture like this:
/usr/local/bin/flow-capture -z0 -N0 -V5 -n287 -R
/usr/local/var/db/flows/bin/linkme -w/usr/local/var/db/flow
s/ft 0/0/2055 &
According to that instruction, linkme will manage the size of my 'ft'
directory..
How?
When I looked into my /usr/local/var/db/flows/ft, the current flow being saved
has "tmp..."
When it is completed, it will now become "ft-..." and it will automatically
have a symbolic link to /usr/local/var/db/flows
which will be processed by flowscan...
I'm not really sure how flow-capture manages the size of the flows using this
script..
Looking at my "ft" directory, it has grown to 4.5gig for the past two 4 days...
Any idea how to set this to let's say 10Gb only and then have it rotated??
Thanks..
_______________________________________________
Flow-tools mailing list
[EMAIL PROTECTED]
http://mailman.splintered.net/mailman/listinfo/flow-tools
