树莓派安装nfsen监控路由器流量

#更新
sudo apt-get update & upgrade -y

#安装相关组件
sudo apt-get install nfdump php7.3 rrdtool librrdtool-oo-perl libmailtools-perl libsocket-perl libsocket6-perl

#从sourceforge下载nfsen，当前版本1.3.8
#https://sourceforge.net/projects/nfsen/
#解压到～/nfsen目录

#修改～/nfsen/etc/下的nfsen-dist.conf并另存为nfsen.conf
nano ～/nfsen/etc/nfsen.conf
#    $BASEDIR = "/data/nfsen";                --> /var/nfsen
#    $HTMLDIR    = "/var/www/nfsen/";         --> /var/www/html/nfsen/
#    $PREFIX  = \'/usr/local/bin\';             --> /usr/bin
#    $WWWUSER  = "www";                       --> www-data
#    $WWWGROUP = "www";                       --> www-data
#    %sources, 移除原有配置，添加自己的源：
#    \'ident\' => { \'port\' => \'<portnum>\', \'col\' => \'<colour>\', \'type\' => \'<type>\' }
#    ident：自定义的名字，用来辨识；portnum：接收数据的侦听端口，type：类型，netflow
#保存退出

#添加相关用户
sudo useradd -d /var/nfsen -G www-data -m -s /bin/false netflow

#安装nfsen，默认设置
cd ～/nfsen/
sudo ./install.pl /home/pi/nfsen/etc/nfsen.conf

#新建启动项
sudo ln -s /var/nfsen/bin/nfsen /etc/init.d/nfsen
sudo update-rc.d nfsen defaults 20                                                   

 

路由器里配置traffic flow，添加新的目标，ip，端口，数据版本9

浏览器打开网址：

http://ip/nfsen/nfsen.php

 

 

 

 参考：

https://nsrc.org/workshops/2016/rwnog-nmm/netmgmt/en/netflow/exercise2-install-nfdump-nfsen.htm

https://unix.stackexchange.com/questions/318891/nfsen-stops-working-after-stretch-debian-9-upgrade

http://nfsen.sourceforge.net

https://github.com/thomnico/nfsen-debian

https://blog.pierky.com/netflow-installation-and-configuration-of-nfdump-and-nfsen-on-debian/