https://wiki.gacq.com/index.php?action=history&feed=atom&title=Flowscan
Flowscan - Historial de revisiones
2026-04-04T19:23:29Z
Historial de revisiones para esta página en el wiki
MediaWiki 1.29.2
https://wiki.gacq.com/index.php?title=Flowscan&diff=2554&oldid=prev
Gacq en 22:35 27 ago 2007
2007-08-27T22:35:01Z
<p></p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='es'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Revisión anterior</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revisión del 22:35 27 ago 2007</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l83" >Línea 83:</td>
<td colspan="2" class="diff-lineno">Línea 83:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>====/etc/<del class="diffchange diffchange-inline">init.d</del>/fprobe<del class="diffchange diffchange-inline">-ng</del>====</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>====/etc/<ins class="diffchange diffchange-inline">default</ins>/fprobe====</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><pre><nowiki></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><pre><nowiki></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>INTERFACE="eth0"</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>INTERFACE="eth0"</div></td></tr>
<tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l96" >Línea 96:</td>
<td colspan="2" class="diff-lineno">Línea 96:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>chown root.root /etc/init.d/flowscan</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>chown root.root /etc/init.d/flowscan</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>ln -s /etc/init.d/flowscan /etc/rc2.d/S98flowscan</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>ln -s /etc/init.d/flowscan /etc/rc2.d/S98flowscan</div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">adduser flowscan</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">====/etc/init.d/flowscan====</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;">Change lines:</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> bindir=/usr/bin</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> scandir=/var/lib/netflow/ft</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> logfile=/tmp/flowscan.log</ins></div></td></tr>
<tr><td colspan="2"> </td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div><ins style="font-weight: bold; text-decoration: none;"> user=flowscan</ins></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>====Reiniciar servicios====</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>====Reiniciar servicios====</div></td></tr>
</table>
Gacq
https://wiki.gacq.com/index.php?title=Flowscan&diff=2507&oldid=prev
Gacq: /* Reiniciar servicios */
2007-04-30T03:30:50Z
<p><span dir="auto"><span class="autocomment">Reiniciar servicios</span></span></p>
<table class="diff diff-contentalign-left" data-mw="interface">
<col class='diff-marker' />
<col class='diff-content' />
<col class='diff-marker' />
<col class='diff-content' />
<tr style='vertical-align: top;' lang='es'>
<td colspan='2' style="background-color: white; color:black; text-align: center;">← Revisión anterior</td>
<td colspan='2' style="background-color: white; color:black; text-align: center;">Revisión del 03:30 30 abr 2007</td>
</tr><tr><td colspan="2" class="diff-lineno" id="mw-diff-left-l102" >Línea 102:</td>
<td colspan="2" class="diff-lineno">Línea 102:</td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><pre><nowiki></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div><pre><nowiki></div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/flow-capture restart</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/flow-capture restart</div></td></tr>
<tr><td class='diff-marker'>−</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #ffe49c; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/fprobe<del class="diffchange diffchange-inline">-ng </del>restart</div></td><td class='diff-marker'>+</td><td style="color:black; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #a3d3ff; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/fprobe restart</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/flowscan start</div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div>/etc/init.d/flowscan start</div></td></tr>
<tr><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td><td class='diff-marker'> </td><td style="background-color: #f9f9f9; color: #333333; font-size: 88%; border-style: solid; border-width: 1px 1px 1px 4px; border-radius: 0.33em; border-color: #e6e6e6; vertical-align: top; white-space: pre-wrap;"><div></nowiki></pre></div></td></tr>
</table>
Gacq
https://wiki.gacq.com/index.php?title=Flowscan&diff=1873&oldid=prev
WikiSysop en 14:56 24 ago 2006
2006-08-24T14:56:31Z
<p></p>
<p><b>Página nueva</b></p><div>=Informacion=<br />
*http://net.doit.wisc.edu/~plonka/lisa/FlowScan/<br />
*http://www.switch.ch/tf-tant/floma/software.html<br />
*http://www.caida.org/tools/utilities/flowscan/<br />
=Reportes de ejemplo=<br />
*http://mrtg.uv.es/flowscan/<br />
*http://wwwstats.net.wisc.edu/<br />
*http://flowscan.frgp.net/<br />
<br />
= Analisis del trafico por una interface ethernet en un servidor debian =<br />
Fuente: http://www.prolixium.com/sitenews.php?id=482<br />
<br />
<pre><nowiki><br />
apt-get install fprobe-ng flow-tools flowscan flowscan-cuflow flowscan-cugrapher rrdtool<br />
mkdir -p /var/lib/netflow/ft<br />
mkdir /var/lib/netflow/rrds<br />
mkdir /var/lib/netflow/scoreboard<br />
</nowiki></pre><br />
<br />
====/etc/flow-tools/flow-capture.conf====<br />
<pre><nowiki><br />
-w /var/lib/netflow/ft -E 1G -N 0 -n 287 -S 60 -V 5 -z 9 0/0/555<br />
</nowiki></pre><br />
<br />
====/etc/flowscan/flowscan.cf====<br />
<pre><nowiki><br />
FlowFileGlob /var/lib/netflow/ft/ft-v05.*<br />
ReportClasses CUFlow<br />
WaitSeconds 30<br />
Verbose 1<br />
</nowiki></pre><br />
<br />
====/etc/flowscan/CUFlow.cf====<br />
<pre><nowiki><br />
Subnet 192.168.0.0/24<br />
Network 200.114.249.74/24 Internet<br />
OutputDir /var/lib/netflow/rrds<br />
Multicast<br />
Scoreboard 10 /var/lib/netflow/scoreboard /var/lib/netflow/topten.html<br />
AggregateScore 10 /var/lib/netflow/scoreboard/agg.dat /var/lib/netflow/scoreboard/overall.html<br />
Router 127.0.0.1 geacequ<br />
Service 20-21/tcp ftp<br />
Service 22/tcp ssh<br />
Service 23/tcp telnet<br />
Service 25/tcp smtp<br />
Service 53/udp,53/tcp dns<br />
Service 80/tcp http<br />
Service 110/tcp pop3<br />
Service 119/tcp nntp<br />
Service 143/tcp imap<br />
Service 412/tcp,412/udp dc<br />
Service 443/tcp https<br />
Service 1214/tcp kazaa<br />
Service 4661-4662/tcp,4665/udp edonkey<br />
Service 5190/tcp aim<br />
Service 6346-6347/tcp gnutella<br />
Service 6665-6669/tcp irc<br />
Service 54320/tcp bo2k<br />
Service 7070/tcp,554/tcp,6970-7170/udp real<br />
Protocol 1 icmp<br />
Protocol 4 ipinip<br />
Protocol 6 tcp<br />
Protocol 17 udp<br />
Protocol 47 gre<br />
Protocol 50 esp<br />
Protocol 51 ah<br />
Protocol 57 skip<br />
Protocol 88 eigrp<br />
Protocol 169<br />
Protocol 255<br />
TOS 0 normal<br />
TOS 1-255 other<br />
ASNumber 1 Genuity<br />
</nowiki></pre><br />
Se puede ver la sintaxis aca: http://www.columbia.edu/acis/networks/advanced/CUFlow/CUFlow.html<br />
<br />
====/etc/flowscan/CUGrapher.cf====<br />
<pre><nowiki><br />
OutputDir /var/lib/netflow/rrds<br />
DefaultGraph report=bits;hours=48;imageType=png;width=640;height=320;duration=;router=all;all_all_services=1;legend=1;title=My%20Graph<br />
AggregateScore /var/lib/netflow/scoreboard/overall.html<br />
Scoreboard /var/lib/netflow/topten.html<br />
</nowiki></pre><br />
<br />
====/etc/init.d/fprobe-ng====<br />
<pre><nowiki><br />
INTERFACE="eth0"<br />
FLOW_COLLECTOR="localhost:555"<br />
OTHER_ARGS="-p -a 127.0.0.1"<br />
</nowiki></pre><br />
<br />
====Configurar para el el flowscan inicie automaticamente ====<br />
<pre><nowiki><br />
zcat /usr/share/doc/flowscan/examples/rc/flowscan.gz > /etc/init.d/flowscan<br />
chmod 755 /etc/init.d/flowscan<br />
chown root.root /etc/init.d/flowscan<br />
ln -s /etc/init.d/flowscan /etc/rc2.d/S98flowscan<br />
</nowiki></pre><br />
<br />
<br />
====Reiniciar servicios====<br />
<pre><nowiki><br />
/etc/init.d/flow-capture restart<br />
/etc/init.d/fprobe-ng restart<br />
/etc/init.d/flowscan start<br />
</nowiki></pre><br />
<br />
Abrir: http://localhost/cgi-bin/CUGrapher.cgi<br />
<br />
===Errores===<br />
Errores al correr flowscan<br />
<pre><nowiki><br />
2006/07/26 18:12:22 working on file /var/lib/netflow/ft/ft-v05.2006-07-26.174716-0300...<br />
/var/lib/netflow/ft/ft-v05.2006-07-26.174716-0300: Invalid index in cflowd flow file: 0xCF100103! Version 5 flow-export is required with *all* fields being saved.<br />
</nowiki></pre><br />
Pasa con la version 0.67-8 - http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=327367</div>
WikiSysop