=====Ubuntu 18 - NfSen=====

Install and configure NfSen on Ubuntu 18 server
  * NfSen 1.3.8
  * nfdump 1.6.17


{{:rrdgraph.php.png?nolink|}}


=====Installation=====
  * Download NfSen [[http://nfsen.sourceforge.net/]].
  * Clone nfdump from git [[https://github.com/phaag/nfdump]]. <code>git clone https://github.com/phaag/nfdump</code>
  * Extract files. <code>tar zxf nfsen-1.3.8.tar.gz</code>
  * Install development tools. <code>apt-get update
apt-get upgrade
apt-get install build-essential</code>
  * Install prerequisites. <code>add-apt-repository universe
apt-get install autoconf rrdtool librrds-perl librrdp-perl librrd-dev libmailtools-perl apache2 libapache2-mod-php php bison flex libsocket6-perl liburi-perl libnet-idn-encode-perl libtool m4 automake pkg-config libbz2-dev</code>
  * Create user netflow. <code>useradd netflow</code>
  * Add user netflow to apache group. <code>usermod -G www-data netflow</code>
  * Create seperate /opt filesystem (for lots of data).
  * Compile and install nfdump. <code>cd nfdump
./autogen.sh
./configure --prefix=/opt/nfdump --enable-nfprofile
make
make install</code>
  * Install nfsen. <code>cd nfsen-1.3.8
cd etc
cp nfsen-dist.conf nfsen.conf
vi nfsen.conf</code><code>
  $BASEDIR = "/opt/nfsen";
  $HTMLDIR = "/opt/nfsen/www/";
  $PREFIX  = '/opt/nfdump/bin';
  $WWWUSER  = "www-data";
  $WWWGROUP = "www-data";

  $MAIL_FROM   = 'nfsen@yourdomain.tld';
  $SMTP_SERVER = 'fqdn.mail.server';
  
  %sources = (
      'source1' => { 'port' => '9995', 'col' => '#0000ff', 'type' => 'netflow' },
      'source2' => { 'port' => '9996', 'col' => '#cc3333', 'type' => 'netflow' },
      'source3' => { 'port' => '9997', 'col' => '#99ff33', 'type' => 'netflow' },
  );

# OR

%sources = (
    'ccr1016'      => { 'port' => '9995', 'IP' => 'x.x.x.x', 'col' => '#0000ff', 'type' => 'netflow' },
    'apfloor1'     => { 'port' => '9995', 'IP' => 'x.x.x.x', 'col' => '#8B0000' },
    'apfloor2'     => { 'port' => '9995', 'IP' => 'x.x.x.x', 'col' => '#DC143C'},
    'apfloor3'     => { 'port' => '9995', 'IP' => 'x.x.x.x', 'col' => '#FF7F50'},
);


</code><code>
cd ..
sudo ./install.pl ./etc/nfsen.conf</code>
  * Add apache config. <code><Directory "/opt/nfsen/www">
   AllowOverride None
   Require all granted
</Directory>

Alias /nfsen "/opt/nfsen/www"</code>
  * Enable and start apache: <code>systemctl enable apache2
systemctl start apache2</code>
  * Start nfsen. <code>/opt/nfsen/bin/nfsen start</code>
=====Auto start at boot=====
  * Create **/etc/systemd/system/nfsen.service**:<code>
[Unit]
Description=NfSen Service
After=network.target

[Service]
Type=forking
PIDFile=/opt/nfsen/var/run/nfsend.pid
ExecStart=/opt/nfsen/bin/nfsen start
ExecStop=/opt/nfsen/bin/nfsen stop
Restart=on-abort

[Install]
WantedBy=multi-user.target</code>
  * Enable service:<code>systemctl enable nfsen
systemctl start nfsen</code>

  * Open NfSen: [[http://localhost/nfsen/nfsen.php]]

{{tag>[nfsen network centos7 linux netflow]}}