Sorry, this is default profile directory
# The Profiles directory, where all netflow data is stored
$PROFILEDATADIR="${BASEDIR}/profiles-data";
Regards,
Tibi
From: [email protected]
To: [email protected]
Date: Wed, 8 Jun 2011 13:15:23 +0300
CC: [email protected]
Subject: Re: [Nfsen-discuss] Installation
I suggest you to install latest nfdump from source.
For profile directory use default nfsen.conf
# The Profiles stat directory, where all profile information
# RRD DBs and png pictures of the profile are stored
$PROFILESTATDIR="${BASEDIR}/profiles-stat";
Regards,
Tibi
Date: Wed, 8 Jun 2011 21:15:33 +1200
From: [email protected]
To: [email protected]
CC: [email protected]
Subject: Re: [Nfsen-discuss] Installation
Thanks, looks helpful.
cd nfdump-1.5.7
./configure --enable-nfprofile
--with-rrdpath=/usr/local/rrdtool-1.2.27/
make && make install
I already have nfdump 1.6.1 installed by debian's apt-get. How do I
check if nfprofile is enabled and enable it if it's not?
$PROFILEDATADIR="/var/log/netflow";
Looking at your settings I assume my assumption below is correct
that I just assign the path where I've been putting the files and
shut down my nfcapd?
D
On 8/06/2011 5:55 p.m., Tiberiu Vicol wrote:
Here is a guide you may follow with some minor changes for debian.
http://www.honeynor.no/sharewiki/index.php/Nfsen
Regards,
Tibi
> Date: Wed, 8 Jun 2011 11:57:20 +1200
> From: [email protected]
> To: [email protected]
> Subject: [Nfsen-discuss] Installation
>
> Hi all,
>
> I'm having a few issues with understanding how to install
nfsen.
>
> This installation read me says:
> Make sure you have nfdump configured with option
--enable-nfprofile
>
> Where do I find instructions to tell me how to do that?
(...or 'how do I
> do that?')
>
>
> # The Profiles directory, where all netflow data is stored
> $PROFILEDATADIR="${BASEDIR}/profiles-data";
>
>
> I already have nfcapd running and am dropping the flow data
in
> /var/cache/nfdump so am I meant to set the above to
/var/cache/nfdump ?
>
>
> # Netflow sources
> # Define an ident string, port and colour per netflow source
>
> ...
>
> %sources = (
> 'upstream1' => { 'port' => '9995', 'col' =>
'#0000ff', 'type' =>
> 'netflow' },
> 'peer1' => { 'port' => '9996', 'IP' =>
'172.16.17.18' },
> 'peer2' => { 'port' => '9996', 'IP' =>
'172.16.17.19' },
> );
>
>
> Ok, now I'm just confused sorry...
>
> Is nfsen installation going to be taking over control of
nfcapd, setting
> up the process and I just make my configurations in the
nfsen.conf file?
>
>
> So far I have nfcapd running in a screen session (I couldn't
figure how
> to make is start at start up) and I've had a good play with
nfdump to
> get some stats out, but clearly I'm not following how all
these bits are
> mean to hang together at a conceptual level.
>
> I've read over haag-peter-papers.pdf.
>
> I'm using the nfdump version in the debian 6 repo and nfsen
1.3.5 from
> the web site.
>
> D
> --
> Don Gould
> 31 Acheson Ave
> Mairehau
> Christchurch, New Zealand
> Ph: + 64 3 348 7235
> Mobile: + 64 21 114 0699
>
>
>
------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced
content
> authoring tool. Experience the power of Track Changes, Inline
Image
> Editing and ensure content is compliant with Accessibility
Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
--
Don Gould
31 Acheson Ave
Mairehau
Christchurch, New Zealand
Ph: + 64 3 348 7235
Mobile: + 64 21 114 0699
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
