This is version 1.3.8 of NfSen. Use least nfdump 1.6.x, Do not use any earlier nfdump version, such as nfdump 1.5.x Make sure you have nfdump configured with option --enable-nfprofile
Upgrade is supported only for NfSen versions v1.2.x. older NfSen versions need to be upgraded in a first step to NfSen 1.2.4.
NfSen is a graphical WEB based front end for the nfdump netflow tools. See http://nfdump.sourceforge.net
With NfSen, you can:
NfSen allows you to keep all the convenient advantages of the command line using nfdump directly and gives you also a graphical overview over your netflow data.
A more detailed documentation is available in the doc directory.
NfSen is distributed under the BSD license - see BSD-license.txt
NfSen has a very flexible directory layout. To simplify matters, the default layout stores everything but the html pages under BASEDIR. However, you may configure NfSen to fit your local needs. See the nfsen-dist.conf config file. The netflow data is stored under PROFILEDATADIR ( BASEDIR/profiles by default ). So make sure you have enough disk space.
To update your current NfSen installation goto point 3.
./install.pl etc/nfsen.conf
Running install.pl will:
After the installation, you will find the nfsen.conf file in CONFDIR.
To upgrade your 1.2.x NfSen installation:
Stop old nfsen, due to nfprofile incompatibilities. ./nfsen.rc stop
Upgrade nfdump to stable 1.6.1. Do not forget to configure nfdump with --enable-nfprofile option. This update is required!
Upgrade NfSen:
./install.pl <path/to/your/nfsen/etc/nfsen.conf>
This will update your current NfSen installation. and you're done.
If you have plugins installed, check the README.plugins file for some small changes required to be changed for each plugin. If you have PortTracker installed, you need to update to the PortTracker version included in the contrib directory, coming with NfSen. You need not to rebuild your current db files, just rebuild nftrack and replace the plugin files. See the INSTALL file.
Start NfSen:
BINDIR/nfsen start
When updating from a newer snapshot ( > snapshot-20070110 ) or from early 1.3b releases the normal update procedure will do:
./install.pl <path/to/your/nfsen/etc/nfsen.conf>
BINDIR/nfsen reload
You may want to link the start/stop file BASEDIR/bin/nfsen.rc into your appropriate rc.d directory. Start NfSen:
BINDIR/nfsen start
Point your web browser to nfsen.php. ( Typically http://yourserver/nfsen/nfsen.php )
To make syslog work for NfSen set the appropriate parameter in nfsen.conf. See nfsen-dist.conf for the logging socket parameter.
The Sys::Syslog perl Module on Solaris 10 is badly broken. You may want to upgrade Sys::Syslog to the latest available on CPAN.
As of snapshot 20060728 nfsen supports the sub directory hierarchy of nfdump.
When installing or upgrading NfSen, the layout is set to '0' ( see nfcapd(1) ),
which means no layout. If you want to make use of any sub hierarchy layout,
add '$SUBDIRLAYOUT =
More information about NfSen as well as working with NfSen is available in the documentation provided in the doc directory.