From djm at mindrot.org Thu Oct 1 16:05:22 2009 From: djm at mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 16:05:22 +1000 (EST) Subject: [netflow-tools] Simple netflow probe for linux In-Reply-To: References: Message-ID: On Mon, 24 Aug 2009, Koteswar wrote: > But while sending template record better not to add the unwanted fields like > protocol and port. And in case of sending data record also donot add the > fields protocol and ports if track level "ip" is selected. In softflowd we > are sending all the fields independent of track level but setting unwanted > fields to 0. Yes, this is true. I did it this way to keep the nf.9 export code simple, and because the track level stuff was really only intended as a way to reduce load on the sensor and the total number of exported flows. If someone wants to help renovate the nf.9 export code then this can change :) -d From djm at fuyu.mindrot.org Thu Oct 1 16:29:19 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 16:29:19 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: softflowd Message-ID: <20091001062919.C767CA4F7C@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: softflowd Changes by: djm at fuyu.mindrot.org 09/10/01 16:29:19 Modified files: . : ChangeLog softflowctl.8 softflowd.8 softflowd.c Log message: Lots of manpage tweaks from Tamas TEVESZ, ice AT extreme.hu Diff commands: cvs -nQq rdiff -u -r1.96 -r1.97 softflowd/ChangeLog cvs -nQq rdiff -u -r1.2 -r1.3 softflowd/softflowctl.8 cvs -nQq rdiff -u -r1.19 -r1.20 softflowd/softflowd.8 cvs -nQq rdiff -u -r1.98 -r1.99 softflowd/softflowd.c ViewVC: http://anoncvs.mindrot.org/index.cgi/softflowd/ChangeLog?r1=1.96;r2=1.97&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowctl.8?r1=1.2;r2=1.3&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.8?r1=1.19;r2=1.20&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.c?r1=1.98;r2=1.99&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 16:46:15 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 16:46:15 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: flowd Message-ID: <20091001064615.7CB2CA4F7C@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: flowd Changes by: djm at fuyu.mindrot.org 09/10/01 16:46:15 Modified files: . : ChangeLog flowd.c flowd.conf.5.in flowd.h parse.y privsep.c privsep.h Log message: - (djm) Support for forwarding flow packets on to other flow collectors. Patch from kempf AT rpi.edu Diff commands: cvs -nQq rdiff -u -r1.175 -r1.176 flowd/ChangeLog cvs -nQq rdiff -u -r1.79 -r1.80 flowd/flowd.c cvs -nQq rdiff -u -r1.15 -r1.16 flowd/flowd.conf.5.in cvs -nQq rdiff -u -r1.19 -r1.20 flowd/flowd.h cvs -nQq rdiff -u -r1.36 -r1.37 flowd/parse.y cvs -nQq rdiff -u -r1.33 -r1.34 flowd/privsep.c cvs -nQq rdiff -u -r1.9 -r1.10 flowd/privsep.h ViewVC: http://anoncvs.mindrot.org/index.cgi/flowd/ChangeLog?r1=1.175;r2=1.176&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/flowd.c?r1=1.79;r2=1.80&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/flowd.conf.5.in?r1=1.15;r2=1.16&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/flowd.h?r1=1.19;r2=1.20&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/parse.y?r1=1.36;r2=1.37&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/privsep.c?r1=1.33;r2=1.34&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/privsep.h?r1=1.9;r2=1.10&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 17:06:08 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 17:06:08 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: softflowd Message-ID: <20091001070608.58061A4F7C@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: softflowd Changes by: djm at fuyu.mindrot.org 09/10/01 17:06:08 Modified files: . : ChangeLog netflow1.c netflow5.c netflow9.c softflowd.8 softflowd.c softflowd.h Log message: - (djm) Support manual specification of an interface index to be used as the input and output interface of all flows generated. Patch from kempf AT rpi.edu Diff commands: cvs -nQq rdiff -u -r1.97 -r1.98 softflowd/ChangeLog cvs -nQq rdiff -u -r1.2 -r1.3 softflowd/netflow1.c cvs -nQq rdiff -u -r1.3 -r1.4 softflowd/netflow5.c cvs -nQq rdiff -u -r1.9 -r1.10 softflowd/netflow9.c cvs -nQq rdiff -u -r1.20 -r1.21 softflowd/softflowd.8 cvs -nQq rdiff -u -r1.99 -r1.100 softflowd/softflowd.c cvs -nQq rdiff -u -r1.13 -r1.14 softflowd/softflowd.h ViewVC: http://anoncvs.mindrot.org/index.cgi/softflowd/ChangeLog?r1=1.97;r2=1.98&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/netflow1.c?r1=1.2;r2=1.3&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/netflow5.c?r1=1.3;r2=1.4&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/netflow9.c?r1=1.9;r2=1.10&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.8?r1=1.20;r2=1.21&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.c?r1=1.99;r2=1.100&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.h?r1=1.13;r2=1.14&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 17:09:04 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 17:09:04 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: flowd Message-ID: <20091001070904.5C658A4F7D@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: flowd Changes by: djm at fuyu.mindrot.org 09/10/01 17:09:04 Modified files: . : ChangeLog Flowd-perl/lib : Flowd.pm Log message: - (djm) Require Carp for Flowd.pm. Pointed out by tholo AT sigmasoft.com Diff commands: cvs -nQq rdiff -u -r1.176 -r1.177 flowd/ChangeLog cvs -nQq rdiff -u -r1.7 -r1.8 flowd/Flowd-perl/lib/Flowd.pm ViewVC: http://anoncvs.mindrot.org/index.cgi/flowd/ChangeLog?r1=1.176;r2=1.177&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/Flowd-perl/lib/Flowd.pm?r1=1.7;r2=1.8&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 17:22:33 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 17:22:33 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: flowd Message-ID: <20091001072233.E157CA4F7C@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: flowd Changes by: djm at fuyu.mindrot.org 09/10/01 17:22:33 Modified files: . : ChangeLog flowd.conf.5.in Log message: - (djm) The old PACKETS_OCTETS store keyword has long been separated into PACKETS and OCTETS, so adjust man page. Reported by Steve Meier. Diff commands: cvs -nQq rdiff -u -r1.177 -r1.178 flowd/ChangeLog cvs -nQq rdiff -u -r1.16 -r1.17 flowd/flowd.conf.5.in ViewVC: http://anoncvs.mindrot.org/index.cgi/flowd/ChangeLog?r1=1.177;r2=1.178&view=patch http://anoncvs.mindrot.org/index.cgi/flowd/flowd.conf.5.in?r1=1.16;r2=1.17&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 17:25:34 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 17:25:34 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: softflowd Message-ID: <20091001072534.31B04A4F7D@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: softflowd Changes by: djm at fuyu.mindrot.org 09/10/01 17:25:34 Modified files: . : ChangeLog softflowd.8 Log message: - (djm) One more manpage tweak from Tamas TEVESZ. Diff commands: cvs -nQq rdiff -u -r1.98 -r1.99 softflowd/ChangeLog cvs -nQq rdiff -u -r1.21 -r1.22 softflowd/softflowd.8 ViewVC: http://anoncvs.mindrot.org/index.cgi/softflowd/ChangeLog?r1=1.98;r2=1.99&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.8?r1=1.21;r2=1.22&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From djm at fuyu.mindrot.org Thu Oct 1 18:23:33 2009 From: djm at fuyu.mindrot.org (Damien Miller) Date: Thu, 1 Oct 2009 18:23:33 +1000 (EST) Subject: [netflow-tools] CVS: fuyu.mindrot.org: softflowd Message-ID: <20091001082333.7DDE8A4F7C@fuyu.mindrot.org> CVSROOT: /var/cvs Module name: softflowd Changes by: djm at fuyu.mindrot.org 09/10/01 18:23:33 Modified files: . : ChangeLog softflowctl.8 softflowd.c Log message: - (djm) Display softflowd start time in "softflowctl statistics" display. Suggestion from Tamas TEVESZ. Diff commands: cvs -nQq rdiff -u -r1.99 -r1.100 softflowd/ChangeLog cvs -nQq rdiff -u -r1.3 -r1.4 softflowd/softflowctl.8 cvs -nQq rdiff -u -r1.100 -r1.101 softflowd/softflowd.c ViewVC: http://anoncvs.mindrot.org/index.cgi/softflowd/ChangeLog?r1=1.99;r2=1.100&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowctl.8?r1=1.3;r2=1.4&view=patch http://anoncvs.mindrot.org/index.cgi/softflowd/softflowd.c?r1=1.100;r2=1.101&view=patch Please note that there may be a delay before commits are available on the public ViewVC site. From leegold at operamail.com Sat Oct 3 02:58:57 2009 From: leegold at operamail.com (Lee Gold) Date: Fri, 2 Oct 2009 12:58:57 -0400 Subject: [netflow-tools] nflow install Python Message-ID: <20091002165857.9B41CCBEA7@ws5-11.us4.outblaze.com> Hi, I have Ubuntu and tried installing nflow according to the install instructions. If a command didn't work I just put sudo in front of it and that solved it. Mostly I use the packages to install so I might ask some basic questions - please bear with me if I do... Everything worked up until trying: > python setup.py build Wondered if anyone can help I have some output below, seems like the Python part didn't take...Thanks I got: linux at linux-laptop:~/flowd-0.9.1$ sudo python setup.py build running build running build_ext building 'flowd' extension gcc -pthread -fno-strict-aliasing -DNDEBUG -g -fwrapv -O2 -Wall -Wstrict-prototypes -fPIC -DPROGVER="0.9.1" -I/usr/include/python2.6 -c flowd_python.c -o build/temp.linux-i686-2.6/flowd_python.o flowd_python.c:17:20: error: Python.h: No such file or directory flowd_python.c:19:26: error: structmember.h: No such file or directory In file included from flowd_python.c:20: store.h:266: error: expected ?)? before ?*? token store.h:268: error: expected ?)? before ?*? token flowd_python.c:26: error: expected ?=?, ?,?, ?;?, ?asm? or ?__attribute__? before ?initflowd? flowd_python.c:36: error: expected specifier-qualifier-list before ?PyObject_HEAD? flowd_python.c:47: error: expected ?=?, ?,?, ?;?, ?asm? or ?__attribute__? before ?Flow_Type? flowd_python.c: In function ?newFlowObject?: flowd_python.c:54: warning: implicit declaration of function ?PyObject_New? flowd_python.c:54: error: expected expression before ?FlowObject? ....SNIP.... I have Python installed: linux at linux-laptop:~$ python Python 2.6.2 (release26-maint, Apr 19 2009, 01:56:41) [GCC 4.3.3] on linux2 Type "help", "copyright", "credits" or "license" for more information. >>> -- -- _______________________________________________ Surf the Web in a faster, safer and easier way: Download Opera 9 at http://www.opera.com Powered by Outblaze From sgeorge.ml at gmail.com Tue Oct 27 15:16:51 2009 From: sgeorge.ml at gmail.com (Siju George) Date: Mon, 26 Oct 2009 21:16:51 -0700 (PDT) Subject: [netflow-tools] Invitation to connect on LinkedIn Message-ID: <2132753568.1964471.1256617011919.JavaMail.app@ech3-cdn13.prod> LinkedIn ------------ I'd like to add you to my professional network on LinkedIn. - Siju Accept Siju George's invite: https://www.linkedin.com/e/isd/822151510/4MQC5mk8/ ------ (c) 2009, LinkedIn Corporation -------------- next part -------------- An HTML attachment was scrubbed... URL: