On 9/17/2011 10:54 AM, azadeh hashemi wrote:
actually I'm using nprobe, sO i don't know any information about
router or anything else! nOw what?
The name is just a label. Call it whatever you like to reflect what you
are capturing with nprobe. he important thing is the name and port need
to be unique and the port needs to match the port you use to send data
to your nfdump collector.
Mark
------------------------------------------------------------------------
*From:* Adrian Popa <[email protected]>
*To:* azadeh hashemi <[email protected]>
*Cc:* "[email protected]"
<[email protected]>
*Sent:* Saturday, September 17, 2011 5:00 PM
*Subject:* Re: [Nfsen-discuss] nfsen config problem
Here is the default sources setting that comes with nfsen:
%sources = (
'upstream1' => { 'port' => '9995', 'col' => '#0000ff',
'type' => 'netflow' },
'peer1' => { 'port' => '9996', 'col' => '#ff0000' },
);
This is perl syntax, but it shouldn't worry you.
You will define some hash keys (upstream1, peer1) with the names of
your routers (the same names will be visible in the web interface
later on). There is a 20 character limit per source if I remember
correctly...
Next, for each source you will set the port parameter to the UDP port
where you want to export the flows to. Just pick an empty UDP port and
configure your router to export to this port. After restarting nfsen,
you should see a nfcapd process listening on this port in your server.
col is another parameter and sets the default colour for this router.
This can be later changed in the web interface.
type can be netflow or sflow. Default is netflow.
Good luck,
Adrian
P.S. An example that I use is:
%sources = (
'gatewayb' => { 'port' => '9901', 'col' => '#000fcc', 'type' =>
'netflow' },
'gatewayff' => { 'port' => '9902', 'col' => '#cc0000', 'type' =>
'netflow' },
'peering' => { 'port' => '9903', 'col' => '#cc00cc', 'type' =>
'netflow' },
);
On Sat, Sep 17, 2011 at 11:16 AM, azadeh hashemi <[email protected]
<mailto:[email protected]>> wrote:
>
> in the config file, I don't know what should I write in the sources
field. there are some samples on the net but I can't understand clearly.
>
>
------------------------------------------------------------------------------
> BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
> http://p.sf.net/sfu/rim-devcon-copy2
> _______________________________________________
> Nfsen-discuss mailing list
> [email protected]
<mailto:[email protected]>
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
>
This message has been scanned by CanIt-PRO.
------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
http://p.sf.net/sfu/rim-devcon-copy2
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
BlackBerry® DevCon Americas, Oct. 18-20, San Francisco, CA
http://p.sf.net/sfu/rim-devcon-copy2
_______________________________________________
Nfsen-discuss mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
