http://www.packetanalytics.com/community/list/4 EN Wed, 30 Apr 2008 08:50:40 -0500 Wed, 30 Apr 2008 08:50:40 -0500 Net/FSE Event Types Phorum 5.1.25 60 http://www.packetanalytics.com/community/read/4/21/21#msg-21 benuphoff Net/FSE Event Types http://www.packetanalytics.com/community/read/4/21/21#msg-21 Wed, 30 Apr 2008 08:50:40 -0500 http://www.packetanalytics.com/community/read/4/17/17#msg-17 benuphoff
InMon (http://www.inmon.com) has an excellent collection of sFlow processing tools for UNIX systems. Using InMon's sflowtool, sFlow data streams can be converted into NetFlow datagrams. Once converted, the sFlow data is treated as NetFlow data by Net/FSE. Follow the steps below to configure sflowtools to stream data to Net/FSE:

-- Configuring a NetFlow Sensor --

1. Log in to the Net/FSE web interface as an administrator.

2. From the Configuration tab, click the Add link under Sensors and create a new sensor of type "NetFlow".

3. Click the Add link in the NetFlow Configurations section. Select the sensor you just created and assign an unused UDP port (over 1024).

4. Restart Net/FSE: /etc/init.d/nfse stop ; /etc/init.d/nfse start

-- Setting up sFlow --

1. Log in to the server you will be collecting sFlow data from. This can be the Net/FSE server. If not, the server must be able to connect over the network to the Net/FSE server on the UDP port specified in step #3 above.

2. Download the sflowtools source code from InMon (using wget or such): http://www.inmon.com/bin/sflowtool-3.12.tar.gz

3. tar -xzf sflowtool-3.12.tar.gz

4. cd sflowtool-3.12

5. ./configure
6. make
- If either step 5 or 6 fails you may not have the required build tools (gcc, make, libpcap development files) installed. Install these packages and try again.

7. ./sflowtool -p SFLOW_PORT -c NETFSE_IP -d NETFLOW_PORT
- SFLOW_PORT: the port on which the server will listen for sFlow data streams
- NETFSE_IP: the IP address (or hostname) of the Net/FSE server. Use “localhost” or “127.0.0.1” if running sflowtool on the NetFSE server.
- NETFLOW_PORT: the port the Net/FSE server is configured to collect NetFlow on for the selected sensor (from step #3 under “Configuring a NetFlow Sensor” above)

8. Configure your sFlow-capable devices to send sFlow streams to the server running sflowtools. If you don’t have an sFlow enabled device, you can create sFlow data streams using InMon’s sFlow Agent: http://www.inmon.com/bin/InMon_Agent-5.7.tar.gz.]]> Net/FSE Event Types http://www.packetanalytics.com/community/read/4/17/17#msg-17 Fri, 25 Jan 2008 17:11:10 -0600 http://www.packetanalytics.com/community/read/4/12/12#msg-12 benuphoff Net/FSE Event Types http://www.packetanalytics.com/community/read/4/12/12#msg-12 Mon, 21 Jan 2008 08:23:15 -0600