Hi all,
I'm having a few issues with understanding how to install nfsen.
This installation read me says:
Make sure you have nfdump configured with option --enable-nfprofile
Where do I find instructions to tell me how to do that? (...or 'how do I
do that?')
# The Profiles directory, where all netflow data is stored
$PROFILEDATADIR="${BASEDIR}/profiles-data";
I already have nfcapd running and am dropping the flow data in
/var/cache/nfdump so am I meant to set the above to /var/cache/nfdump ?
# Netflow sources
# Define an ident string, port and colour per netflow source
...
%sources = (
'upstream1' => { 'port' => '9995', 'col' => '#0000ff', 'type' =>
'netflow' },
'peer1' => { 'port' => '9996', 'IP' => '172.16.17.18' },
'peer2' => { 'port' => '9996', 'IP' => '172.16.17.19' },
);
Ok, now I'm just confused sorry...
Is nfsen installation going to be taking over control of nfcapd, setting
up the process and I just make my configurations in the nfsen.conf file?
So far I have nfcapd running in a screen session (I couldn't figure how
to make is start at start up) and I've had a good play with nfdump to
get some stats out, but clearly I'm not following how all these bits are
mean to hang together at a conceptual level.
I've read over haag-peter-papers.pdf.
I'm using the nfdump version in the debian 6 repo and nfsen 1.3.5 from
the web site.
D
--
Don Gould
31 Acheson Ave
Mairehau
Christchurch, New Zealand
Ph: + 64 3 348 7235
Mobile: + 64 21 114 0699
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
