User Tools

Site Tools


пакет_nfdump

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Both sides previous revision Previous revision
Next revision
Previous revision
пакет_nfdump [2022/03/14 15:41]
val
пакет_nfdump [2022/03/30 09:47] (current)
val
Line 1: Line 1:
 ====== Пакет nfdump ====== ====== Пакет nfdump ======
  
 +  * NetFlow
   * [[https://​ixnfo.com/​ustanovka-nfdump.html|Установка и использование Nfdump]]   * [[https://​ixnfo.com/​ustanovka-nfdump.html|Установка и использование Nfdump]]
  
 <​code>​ <​code>​
 # apt install nfdump # apt install nfdump
 +
 +# cat /​etc/​nfdump/​default.conf
 +</​code><​code>​
 +...
 +options='​-S 2 -l /​var/​cache/​nfdump -p 2055'
 +</​code><​code>​
 +# service nfdump restart
  
 # ps auxwww | grep nfcapd # ps auxwww | grep nfcapd
Line 15: Line 23:
 /OUTPUT FORMATS /OUTPUT FORMATS
  
-# nfdump -o csv -q -R /​var/​cache/​nfdump/​ | grep 192.168.X.128+# nfdump -o csv -q -R /​var/​cache/​nfdump/​ | grep 192.168.X.101
  
-service ​nfdump ​restart+# nfdump ​-o csv -q -R /​var/​cache/​nfdump/​ 'proto tcp and src ip 192.168.X.101'​
  
-# nfdump -o csv -q -R /​var/​cache/​nfdump/​ 'proto tcp and src ip 192.168.X.128'+# nfdump -o csv -q -A dstip -R /​var/​cache/​nfdump/2022/03/ 'dst net 192.168.X.0/24' | cut -d',' ​-f5,12,13
 </​code>​ </​code>​
пакет_nfdump.1647261712.txt.gz · Last modified: 2022/03/14 15:41 by val