Install and configure NfSen on CentOS6.x
Prerequisites:
tar zxvf nfdump-1.6.12.tar.gz tar zxvf nfsen-1.3.6p1.tar.gz
sudo yum groupinstall development tools
sudo yum install rrdtool rrdtool-devel
sudo yum install apache php perl-MailTools rrdtool-perl perl-Socket6
useradd netflow
sudo usermod -G apache netflow
cd nfdump-1.6.12 ./configure --prefix=/opt/nfdump --enable-nfprofile autoreconf make sudo make install
cd nfsen-1.3.6p1 cd etc cp nfsen-dist.conf nfsen.conf vi nfsen.conf $BASEDIR = "/opt/nfsen"; $HTMLDIR = "/opt/nfsen/www/"; $PREFIX = '/opt/nfdump/bin'; $WWWUSER = "apache"; $WWWGROUP = "apache"; $MAIL_FROM = 'nfsen@yourdomain.tld'; $SMTP_SERVER = 'fqdn.mail.server'; %sources = ( 'source1' => { 'port' => '9995', 'col' => '#0000ff', 'type' => 'netflow' }, 'source2' => { 'port' => '9996', 'col' => '#cc3333', 'type' => 'netflow' }, 'source3' => { 'port' => '9997', 'col' => '#99ff33', 'type' => 'netflow' }, ); cd .. sudo ./install.pl etc/nfsen.conf
-A INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT -A INPUT -m state --state NEW -m udp -p udp --dport 9995 -j ACCEPT -A INPUT -m state --state NEW -m udp -p udp --dport 9996 -j ACCEPT -A INPUT -m state --state NEW -m udp -p udp --dport 9997 -j ACCEPT
service iptables restart
<Directory "/opt/nfsen/www"> AllowOverride None Order allow,deny Allow from all </Directory> Alias /nfsen "/opt/nfsen/www"
sudo chkconfig httpd on
sudo service httpd start
sudo yum install policycoreutils-python setenforce 0 /opt/nfsen/bin/nfsen start /opt/nfsen/bin/nfsen stop cp /var/log/audit/audit.log /var/tmp cd /var/tmp audit2allow -M mynfsen < audit.log semodule -i mynfsen.pp setenforce 1
sudo /opt/nfsen/bin/nfsen start