2007 Mar 02 - Fri

Installing Netflow Tool: nfsen

nfsen is companion tool to nfdump. Where nfdump handles the capture and writing to disk of netflow records, nfsen takes the captured files and makes the data available through a web interface.

To install, download and expand the latest snapshot (be sure the nfsen snapshot is compatible with the nfdump snapshot):

cd /usr/src
wget http://internap.dl.sourceforge.net/sourceforge/nfsen/nfsen-snapshot-20070208.tar.gz
tar -zxvf nfsen-snapshot-20070208.tar.gz
cd nfsen-snapshot-20070208

To build and install nfsen is a bit more complicated that installing nfdump:

cd etc
cp nfsen-dist.conf nfsen.conf
nano nfsen.conf
* $BASEDIR = "/usr/local/nfsen";
* $CONFDIR = "/etc/nfsen";
* $VARDIR   = "/var/local/nfsen";
* $PROFILESTATDIR="${VARDIR}/profiles";
* $PROFILEDATADIR="/var/local/nfdump/flows";
* $USER    = "www-data";
* $WWWUSER  = "www-data";
* $WWWGROUP = "www-data";
* $SUBDIRLAYOUT = 7;
* %sources = (
*      'bmr01'        => { 'port'    => '9999', 'col' => '#0000ff', 'type' => 'netflow' },
* );
cd ..
./install.pl etc/nfsen.conf