Here is a guide you may follow with some minor changes for debian.
http://www.honeynor.no/sharewiki/index.php/Nfsen
Regards,
Tibi
> Date: Wed, 8 Jun 2011 11:57:20 +1200
> From: d...@bowenvale.co.nz
> To: nfsen-discuss@lists.sourceforge.net
> Subject: [Nfsen-discuss] Installation
>
> Hi all,
>
> I'm having a few issues with understanding how to install nfsen.
>
> This installation read me says:
> Make sure you have nfdump configured with option --enable-nfprofile
>
> Where do I find instructions to tell me how to do that? (...or 'how do I
> do that?')
>
>
> # The Profiles directory, where all netflow data is stored
> $PROFILEDATADIR="${BASEDIR}/profiles-data";
>
>
> I already have nfcapd running and am dropping the flow data in
> /var/cache/nfdump so am I meant to set the above to /var/cache/nfdump ?
>
>
> # Netflow sources
> # Define an ident string, port and colour per netflow source
>
> ...
>
> %sources = (
> 'upstream1' => { 'port' => '9995', 'col' => '#0000ff', 'type' =>
> 'netflow' },
> 'peer1' => { 'port' => '9996', 'IP' => '172.16.17.18' },
> 'peer2' => { 'port' => '9996', 'IP' => '172.16.17.19' },
> );
>
>
> Ok, now I'm just confused sorry...
>
> Is nfsen installation going to be taking over control of nfcapd, setting
> up the process and I just make my configurations in the nfsen.conf file?
>
>
> So far I have nfcapd running in a screen session (I couldn't figure how
> to make is start at start up) and I've had a good play with nfdump to
> get some stats out, but clearly I'm not following how all these bits are
> mean to hang together at a conceptual level.
>
> I've read over haag-peter-papers.pdf.
>
> I'm using the nfdump version in the debian 6 repo and nfsen 1.3.5 from
> the web site.
>
> D
> --
> Don Gould
> 31 Acheson Ave
> Mairehau
> Christchurch, New Zealand
> Ph: + 64 3 348 7235
> Mobile: + 64 21 114 0699
>
>
> ------------------------------------------------------------------------------
> EditLive Enterprise is the world's most technically advanced content
> authoring tool. Experience the power of Track Changes, Inline Image
> Editing and ensure content is compliant with Accessibility Checking.
> http://p.sf.net/sfu/ephox-dev2dev
> _______________________________________________
> Nfsen-discuss mailing list
> Nfsen-discuss@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
------------------------------------------------------------------------------
EditLive Enterprise is the world's most technically advanced content
authoring tool. Experience the power of Track Changes, Inline Image
Editing and ensure content is compliant with Accessibility Checking.
http://p.sf.net/sfu/ephox-dev2dev
_______________________________________________
Nfsen-discuss mailing list
Nfsen-discuss@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfsen-discuss
