Many thanks for your reply, but it doesn't seem to work: [root@nfc ~]# grep -n 10050 /usr/local/nfsen/plugins/PortTracker.pm 294: my $command = "$nftrack -M $netflow_sources -r nfcapd.$timeslot -d $PORTSDBDIR -A -t $timeslot -s -p -w $PORTSDBDIR/portstat.txt 'not (proto tcp and port 10050)' ";
[root@nfc ~]# ls -al /usr/local/nfsen/plugins/PortTracker.pm -rw-r--r-- 1 root root 9194 mar 21 09:45 /usr/local/nfsen/plugins/PortTracker.pm [root@nfc ~]# date mié mar 21 09:55:38 CET 2012 But it stills shows the 10050 port activity at the web page. _________________ Regards, Roberto Navarro Reyes SysAdmin - Tusprofesionales, SL ----- Original Message ----- From: "Peter Haag" <[email protected]> To: "Roberto Navarro - TusProfesionales.es" <[email protected]> Cc: <[email protected]> Sent: Wednesday, March 21, 2012 7:32 AM Subject: Re: [Nfsen-discuss] Port Tracker Plugin > On 3/20/12 12:03, Roberto Navarro - TusProfesionales.es wrote: >> Hi, >> >> I would like to know how to set up the Port Tracker plugin to ignore the >> zabbix traffic (10050 tcp) port. >> >> I couldn't see any config for this plugin inside the nfsen.conf plugin. > > You have manually to patch PortTracker.pm - the backened part of > PortTracker. > Look into PortTracker.pm: In the 'run' function you will fine the line > where nftrack > is called. The arg line looks liek: ".. -A -t $timeslot -s -p > $PORTSDBDIR/portstat.txt" > Append your filter at the end such as: > > ".. -A -t $timeslot -s -p $PORTSDBDIR/portstat.txt 'not (proto tcp and > port 10050)' " > > - Peter >> >> _________________ >> Regards, >> Roberto Navarro Reyes >> SysAdmin - Tusprofesionales, SL >> >> >> ------------------------------------------------------------------------------ >> This SF email is sponsosred by: >> Try Windows Azure free for 90 days Click Here >> http://p.sf.net/sfu/sfd2d-msazure >> _______________________________________________ >> Nfsen-discuss mailing list >> [email protected] >> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss > > -- > -- > Be nice to your netflow data > ------------------------------------------------------------------------------ This SF email is sponsosred by: Try Windows Azure free for 90 days Click Here http://p.sf.net/sfu/sfd2d-msazure _______________________________________________ Nfsen-discuss mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
