$ uname -a;cat /etc/debian_version
Linux deb 2.6.26-2-686 #1 SMP Thu Nov 25 01:53:57 UTC 2010 i686 GNU/Linux
5.0.7
$ cat /etc/apt/sources.list
#
# deb cdrom:[Debian GNU/Linux 5.0.6 _Lenny_ - Official i386 CD Binary-1 20100904-18:58]/ lenny main
# deb cdrom:[Debian GNU/Linux 5.0.6 _Lenny_ - Official i386 CD Binary-1 20100904-18:58]/ lenny main
deb http://mirror.yandex.ru/debian/ lenny main non-free
deb-src http://mirror.yandex.ru/debian/ lenny main non-free
deb http://security.debian.org/ lenny/updates main
deb-src http://security.debian.org/ lenny/updates main
deb http://volatile.debian.org/debian-volatile lenny/volatile main
deb-src http://volatile.debian.org/debian-volatile lenny/volatile main
$ su -c "aptitude update; aptitude install nfdump"
$ su -c "aptitude install apache2 libapache2-mod-php5 librrds-perl libmailtools-perl"
$ cd /usr/local/src/
$ su -c "wget
http://downloads.sourceforge.net/project/nfsen/stable/nfsen-1.3.5/nfsen-1.3.5.tar.gz"
$ su -c "tar -xvf nfsen-1.3.5.tar.gz"
$ cd nfsen-1.3.5/
$ su -c "cp etc/nfsen-dist.conf etc/nfsen.conf -v"
$ su -c "cat etc/nfsen.conf|grep -v "^#"|awk NF"
$BASEDIR = "/srv/nfsen";
$BINDIR="${BASEDIR}/bin";
$LIBEXECDIR="${BASEDIR}/libexec";
$CONFDIR="${BASEDIR}/etc";
$HTMLDIR = "/var/www/nfsen/";
$DOCDIR="${HTMLDIR}/doc";
$VARDIR="${BASEDIR}/var";
$PROFILESTATDIR="${BASEDIR}/profiles-stat";
$PROFILEDATADIR="${BASEDIR}/profiles-data";
$BACKEND_PLUGINDIR="${BASEDIR}/plugins";
$FRONTEND_PLUGINDIR="${HTMLDIR}/plugins";
$PREFIX = '/usr/bin';
$USER = "www-data";
$WWWUSER = "www-data";
$WWWGROUP = "www-data";
$BUFFLEN = 200000;
$SUBDIRLAYOUT = 1;
$ZIPcollected = 1;
$ZIPprofiles = 1;
$PROFILERS = 2;
$DISKLIMIT = 98;
$PROFILERS = 6;
%sources = (
'gw' => { 'port' => '9999', 'col' => '#00ff00', 'type' => 'netflow' },
);
$low_water = 90;
$syslog_facility = 'local3';
@plugins = (
# profile # module
# [ '*', 'demoplugin' ],
);
%PluginConf = (
# For plugin demoplugin
demoplugin => {
# scalar
param2 => 42,
# hash
param1 => { 'key' => 'value' },
},
# for plugin otherplugin
otherplugin => [
# array
'mary had a little lamb'
],
);
$MAIL_FROM = 'your@from.example.net';
$SMTP_SERVER = 'localhost';
$MAIL_BODY = q{
Alert '@alert@' triggered at timeslot @timeslot@
};
1;
$ su -c "./install.pl etc/nfsen.conf"
$ su -c "/srv/nfsen/bin/nfsen start"
$ su -c "ln -s /srv/nfsen/bin/nfsen /etc/init.d/nfsen"
$ su -c "update-rc.d nfsen defaults 20"
$ su -c "aptitude install fprobe"
interface to capture: eth1
collector address: localhost:9999
http://localhost/nfsen/nfsen.php