On 2004.03.04 05:25 Cleve Allison wrote: > Doug, > Actually, I used the knoppix-installer to lay down a harddrive image of > the knoppix 3.3 live-cd......like Libranet it is a mixture. Then I did > an apt-get update and apt-get dist-upgrade. > I can actually do an apt-get install flowscan to install the package but > I've been downloading all the .tar.gz files and doing the whole > ./configure, make, make install thing. flowscan uses a patched version > of cflowd which in turn uses arts++ > Flowscan is like MRTG on steroids, and it also uses rrdtools to make > graphs, etc...........rather than simply showing the volume of traffic > going in and out of the various interfaces of a device via snmp mib > info, flowscan uses the Cisco NetFlow info along with snmp, etc to > provide a more detailed graph of traffic by protocol, service, etc > Very useful, but so far its been daunting to install and > configure.......the documentation is not for the newbie and this is the > first real enterprise level production deployment of a linux based > application that I am working on. I've been local support for linux > boxes/products before but these were vendor products. > Last night I wiped everything clean and started fresh..........first > thing I noticed was that arts++ didn't make correctly.....Knoppix has > GNU Make 3.8.0 and I think there is an issue with the arts++ software > not having flex headers or .hh or somethingorother.....if that makes any > sense. Today I am going to try an older version of arts++.....and there > is also a reference by the author of flowscan that he had to edit some > file to include a directory where his flex headers were actually > located???? > Does this sound like a lesson in futility? I'm definitely over my head > with this but I have to admit that I am slowly, painfully learning a lot. > cleve >
Yikes! Mixing "first" with hot software, that's got to be tough. Starting from scratch sounds like a good idea. Do you need to start from Knoppix? I'd want as stripped down a box as I could get to learn about a new package like this and I'd want to start with the deb pacage. The debpackage is going to have captured a lot of configuration fiddling and dependency resolution. A quick look at the packages that flowscan depends on runs into mysqlclient10, a fork for working with non-gpl software. If you are working from tarballs, you might have missed that and other issues. Knoppix is an awsome workstation, but it might be the wrong place to start for utilities like flowscan. That you are just learning about a package is double the reason to run the package and nothing but the package on that box. For comfort, I would set up another box with Knoppix to shell into the package box. Thanks for mentioning what looks like a very nice tool. Good luck with it and let us all know how it turns out.
