mirror of
https://github.com/pavel-odintsov/fastnetmon.git
synced 2024-09-21 18:37:13 +00:00
94 lines
3.0 KiB
Markdown
94 lines
3.0 KiB
Markdown
|
At first you should install PF_RING (you can install any latest version
|
||
|
|
|
||
|
|
```bash
|
||
|
|
cd /usr/src
|
||
|
|
wget 'http://downloads.sourceforge.net/project/ntop/PF_RING/PF_RING-6.0.2.tar.gz?r=http%3A%2F%2Fsourceforge.net%2Fprojects%2Fntop%2Ffiles%2FPF_RING%2F&ts=1402307916&use_mirror=cznic' -OPF_RING-6.0.2.tar.gz
|
||
|
|
tar -xf PF_RING-6.0.2.tar.gz
|
||
|
|
cd PF_RING-6.0.2
|
||
|
|
# Debian way
|
||
|
|
apt-get install build-essential bison flex linux-headers-$(uname -r) libnuma-dev
|
||
|
|
# CentOS
|
||
|
|
yum install -y make bison flex kernel-devel gcc gcc-c++
|
||
|
|
# CentOS openvz case
|
||
|
|
yum install -y make bison flex vzkernel-devel gcc gcc-c++
|
||
|
|
```
|
||
|
|
|
||
|
|
Build PF_RING kernel module:
|
||
|
|
```bash
|
||
|
|
cd kernel
|
||
|
|
make
|
||
|
|
make install
|
||
|
|
modprobe pf_ring
|
||
|
|
```
|
||
|
|
|
||
|
|
You can use precompiled and statically linced version of this tool without any compiling:
|
||
|
|
```bash
|
||
|
|
mkdir /root/fastnetmon
|
||
|
|
cd /root/fastnetmon
|
||
|
|
wget https://raw.githubusercontent.com/FastVPSEestiOu/fastnetmon/master/fastnetmon -Ofastnetmon
|
||
|
|
chmod +x fastnetmon
|
||
|
|
./fastnetmon eth0
|
||
|
|
```
|
||
|
|
|
||
|
|
If you want to use static version you can skip this guide to part about "networks_list".
|
||
|
|
|
||
|
|
Build lib (We disabled bpf because it requires linking to PCAP):
|
||
|
|
```bash
|
||
|
|
# Debian
|
||
|
|
apt-get install -y libnuma-dev
|
||
|
|
# CentOS
|
||
|
|
yum install -y numactl-devel
|
||
|
|
cd /usr/src/PF_RING-6.0.2/userland/lib
|
||
|
|
./configure --disable-bpf --prefix=/opt/pf_ring
|
||
|
|
make
|
||
|
|
make install
|
||
|
|
```
|
||
|
|
|
||
|
|
Install FastNetMon:
|
||
|
|
|
||
|
|
```bash
|
||
|
|
# Debian 7 Wheezy
|
||
|
|
apt-get install -y git g++ gcc libboost-all-dev make libgpm-dev libncurses5-dev liblog4cpp5-dev libnuma-dev libgeoip-dev libhiredis-dev libpcap-dev
|
||
|
|
# CentOS
|
||
|
|
yum install -y git make gcc gcc-c++ boost-devel GeoIP-devel log4cpp-devel ncurses-devel glibc-static ncurses-static gpm-static gpm-devel
|
||
|
|
|
||
|
|
# For compiling on CentOS please remove line "STATIC = -static" from file Makefile and replace line "LIBS += -lboost_thread" by line "LIBS += -lboost_thread-mt"
|
||
|
|
|
||
|
|
cd /usr/src
|
||
|
|
git clone https://github.com/FastVPSEestiOu/fastnetmon.git
|
||
|
|
cd fastnetmon
|
||
|
|
```
|
||
|
|
|
||
|
|
|
||
|
|
Select backend, we use PF_RING as default, if you need PCAP you must change variable ENGINE in Makefile.
|
||
|
|
Compile it:
|
||
|
|
```bash
|
||
|
|
make
|
||
|
|
```
|
||
|
|
|
||
|
|
You should start fastnetmon using this options:
|
||
|
|
```bash
|
||
|
|
LD_LIBRARY_PATH=/opt/pf_ring/lib/ ./fastnetmon eth3,eth4
|
||
|
|
```
|
||
|
|
|
||
|
|
If you want to avoid LD_LIBRARY_PATH on every call you should add pf_ring path to system:
|
||
|
|
```bash
|
||
|
|
echo "/opt/pf_ring/lib" > /etc/ld.so.conf.d/pf_ring.conf
|
||
|
|
ldconfig -v
|
||
|
|
```
|
||
|
|
|
||
|
|
It's REQUIRED to add all your networks in CIDR form to file /etc/networks_list if form when one subnet on one line. Please aggregate your networks because long networks list will significatly slow down programm. And please change REDIS_SUPPORT = yes to no in Makefile if you do not need traffic counting feature. When you running this software in OpenVZ node you may did not specify networks explicitly, we can read it from file /proc/vz/veip.
|
||
|
|
|
||
|
|
You can add whitelist subnets in similar form to /etc/networks_whitelist (CIDR masks too).
|
||
|
|
|
||
|
|
Copy standard config file to /etc:
|
||
|
|
```bash
|
||
|
|
cp fastnetmon.conf /etc/fastnetmon.conf
|
||
|
|
```
|
||
|
|
|
||
|
|
Start it:
|
||
|
|
```bash
|
||
|
|
./fastnetmon eth1,eth2
|
||
|
|
```
|
||
|
|
|