[CentOS] Monitor Network Traffic

On Mon, Dec 21, 2009 at 12:27 PM, Jake <jakepaulus at gmail.com> wrote:
> We had the same problems with Ntop (we monitor netflows, not local
> interfaces). There was a thread about a good netflow tool a week or two ago
> where someone suggested NfSen + nfdump. I set it up Thursday (took 30 mins
> or so) and it totally rocks. We've gone to production with it to monitor
> flows from around 50 devices. I highly recommend you take a look if you have
> serious needs to see what's really on the wire.

I'm going to kick this old thread because I'm just getting around to
nfdump and nfsen myself, and am having trouble building nfsen.  I do
not see a mailing list for it so I'll try here first.

I am using softflowd to pump netflow information from various linux
boxes into a central collector.  The collector is running nfcapd to
capture everything.  And I also want to run nfsen on this box to be
able to view the pretty graphs on the web :-)   I have verified with
nfdump built on this box that the collector seems to be working fine -
so far so good.

Then when trying to build nfsen it complained about nfprofile not
being there - so some googling later and I found that I have to go
back and rebuild nfdump to include it.

So I do :
./configure --enable-nfprofile
which dies thus :
[...]
checking for stdint.h... yes
checking for unistd.h... yes
checking for rrd_update in -lrrd... no
configure: error: Can not link librrd. Please specify
--with-rrdpath=.. configure failed!

But I check and I see I have librrd installed.

[root at rcadmin:~/nf/nfdump-1.6.1]# rpm -qa | grep -i rrd
perl-rrdtool-1.3.7-1.el5.rf
rrdtool-1.3.7-1.el5.rf
[root at rcadmin:~/nf/nfdump-1.6.1]# ls -al /usr/lib/librrd*
-rw-r--r-- 1 root root 321930 May 23  2009 /usr/lib/librrd.a
lrwxrwxrwx 1 root root     15 Jun  3  2009 /usr/lib/librrd.so.4 ->
librrd.so.4.0.6
-rwxr-xr-x 1 root root 493565 May 23  2009 /usr/lib/librrd.so.4.0.6
-rw-r--r-- 1 root root 319096 May 23  2009 /usr/lib/librrd_th.a
lrwxrwxrwx 1 root root     18 Jun  3  2009 /usr/lib/librrd_th.so.4 ->
librrd_th.so.4.0.6
-rwxr-xr-x 1 root root 488881 May 23  2009 /usr/lib/librrd_th.so.4.0.6

And I do not seem to be able to tell configure how to find it.
These all fail :
./configure --enable-nfprofile --with-rrdpath=/usr/lib
./configure --enable-nfprofile --with-rrdpath=/usr
./configure --enable-nfprofile --with-rrdpath=..
./configure --enable-nfprofile --with-rrdpath=/usr/lib/librrd.so.4
./configure --enable-nfprofile --with-rrdpath=/usr/lib/librrd.a

What am I doing wrong?


-- 
“Don't eat anything you've ever seen advertised on TV”
         - Michael Pollan, author of "In Defense of Food"