Re: [Nfsen-discuss] bakend plugin and topN
Netflow visualisation and investigation tool
Brought to you by:
phaag
|
From: <ced...@gm...> - 2006-08-08 08:10:37
|
Hi all On 8/7/06, Maurizio Molina <mau...@da...> wrote: > > C=E9dric Delaunay wrote: > > > humhum, sorry all , an typing error, the message wasn't finish. > > The frontend insn't actually operational. > > It'll be very simple. > > Hi Cedric, > any developement on that, since June? I'm facing teh same problem... Yes a few advance in this project. Here is a little description : perl nfsen is installed on my server. 1) I wrote few perl scripts running regulary which create a daily topN file= . 2) - A web interface present this result and an html form enable to create = a nfdump command line. This command is simply send to the server and the result stick on the screen. - This interface can be called by a small nfsen plugin (redirect) and you have to authenticate on a sso-cas server to enter. This project is the subject of my placment and isn't ended. I'll probably propose it to the mail-list but as I'm not a developper, it isn't well developped. I works ;) Here are some screenshots : http://cedric.delaunay.free.fr/nfsen/ We decided to develop this interface because to use nfsen search form you have to learn nfdump filters. I tried to imagine one which is as intuitive as possible. I first tried to develop a backend and a frontend but I came up against a post data problem for my form (I think because of the parseInput and run functions) . So I decided to develop an independent interface. Maybee adding John Kristoff's scripts is there something interesting to do = ? :) > > > My problem today is the next : > > As I execute the command I wrote, the result contains adress whiwh > > don't belong to my local networks. > > might be spoofing? > is URPF activated on your routers? > Cheers, > Maurizio Finaly, the problem was in my masks !!!! What an idiot !!! Thanks C=E9dric |