This shows you the differences between two versions of the page.
Both sides previous revision Previous revision Next revision | Previous revision | ||
пакет_flow-tools [2020/02/28 10:36] val [Вывод информации в читабельном виде] |
пакет_flow-tools [2020/04/23 14:10] (current) val |
||
---|---|---|---|
Line 3: | Line 3: | ||
* [[https://sourceforge.net/projects/flowviewer/|FlowViewer]] | * [[https://sourceforge.net/projects/flowviewer/|FlowViewer]] | ||
===== Установка, настройка, запуск ===== | ===== Установка, настройка, запуск ===== | ||
- | |||
- | ==== FreeBSD ===== | ||
- | <code> | ||
- | [server:~] # pkg install flow-tools | ||
- | |||
- | [server:~] # rehash | ||
- | |||
- | [server:~] # cat /etc/rc.conf | ||
- | </code><code> | ||
- | ... | ||
- | flow_capture_enable=yes | ||
- | flow_capture_port=2055 | ||
- | </code><code> | ||
- | [server:~] # /usr/local/etc/rc.d/flow_capture start | ||
- | </code> | ||
==== Debian/Ubuntu ==== | ==== Debian/Ubuntu ==== | ||
Line 25: | Line 10: | ||
root@server:~# cat /etc/flow-tools/flow-capture.conf | root@server:~# cat /etc/flow-tools/flow-capture.conf | ||
</code><code> | </code><code> | ||
- | -w /var/db/flows 0/0/2055 | + | -w /var/flows 0/0/2055 |
</code><code> | </code><code> | ||
- | root@server:~# mkdir -p /var/db/flows | + | root@server:~# mkdir /var/flows |
root@server:~# service flow-capture restart | root@server:~# service flow-capture restart | ||
- | </code> | ||
- | |||
- | ==== CentOS/SL ==== | ||
- | <code> | ||
- | [root@server ~]# yum install postgresql-libs | ||
- | |||
- | [root@server ~]# yum install mysql | ||
- | |||
- | [root@server ~]# wget http://centos.alt.ru/pub/flow-tools/RHEL/RPMS/i386/flow-tools-0.68.5-1.el5.i386.rpm | ||
- | |||
- | [root@server ~]# rpm -i flow-tools-0.68.5-1.el5.i386.rpm | ||
</code> | </code> | ||
Line 46: | Line 20: | ||
Для скорейшего преобразования временного файла в постоянный можно перезапустить сервис | Для скорейшего преобразования временного файла в постоянный можно перезапустить сервис | ||
<code> | <code> | ||
- | server# flow-cat /var/db/flows/ | flow-print | less | + | server# flow-cat /var/flows/ | flow-print | less |
</code> | </code> | ||
или более подробно, включая дату начала и окончания потоков | или более подробно, включая дату начала и окончания потоков | ||
<code> | <code> | ||
- | server# flow-cat /var/db/flows/ | flow-print -f5 | + | server# flow-cat /var/flows/ | flow-print -f5 |
- | + | ||
- | server# flow-cat -t "25/2/2012 00:00:00" -T "25/2/2012 23:59:59" /var/db/flows/ | flow-print | + | |
</code> | </code> | ||
- | (время считается местное) | + |