diff --git a/Howtonfdump.md b/Howtonfdump.md index de1f4241..a371c949 100644 --- a/Howtonfdump.md +++ b/Howtonfdump.md @@ -94,6 +94,38 @@ Quelques exemples utiles : # nfdump -M /var/cache/nfdump -R . 'proto tcp and dst host 192.0.2.1 and dst port 80' -s srcip/flows ~~~ -## NfSen +## NfSen & nfdump -TODO \ No newline at end of file +### Installer le module PERL Socket6 + +~~~ +perl -MCPAN -e 'install Socket6' +~~~ + +### Installer nfdump + +~~~ +wget https://sourceforge.net/projects/nfdump/files/stable/nfdump-1.6.13/nfdump-1.6.13.tar.gz/download +tar zxvf nfdump-1.6.13.tar.gz +cd nfdump-1.6.13 +./configure --enable-nfprofile --enable-nftrack +make && make install +~~~ + +### Installer nfsen + +~~~ +wget https://sourceforge.net/projects/nfsen/files/stable/nfsen-1.3.8/nfsen-1.3.8.tar.gz/download +tar zxvf nfsen-1.3.8.tar.gz +cd ./nfsen-1.3.8 +cp etc/nfsen-dist.conf /etc/nfsen.conf +vim /etc/nfsen.conf +mkdir -p /opt/nfsen/data/nfsen +mkdir -p /opt/nfsen/www +adduser nfsen +adduser nfsen www-data +chown -R nfsen:www-data /opt/nfsen +./install.pl /etc/nfsen.conf +cd /opt/nfsen/data/nfsen/bin/ +./nfsen start +~~~