Hi All,

 

I'm relatively new to unRAID and in the process of moving from FreeNAS.

 

I have a few routers in my network which I would like to collect and analyse NetFlow traffic from.

 

Two components to this:

- nfdump : netflow capture daemon that reads the netflow data from the network and stores the data into files.

- nfsen :  graphical web based front end for the nfdump netflow tools, uses php, perl and rrd.

 

I'm a little confused with the Plugin architecture, if this would be a plugin/addon/package/script.

 

Nfdump is a standard daemon; with a simple installation.

Nfsen is also standard but requires integration into a web server for viewing.

 

Does anyone have the skills and time to help out with this? or point me in the right direction for me to start myself..

 

Thanks

 

Hi, let me preface this with "I am not an expert, I built one unMenu package". I looked at this for a bit today.  I couldn't find any Slackware (the distro unRAID is based upon) packages for these applications.  I attempted to build them and almost succeeded.  Unfortunately, there are a few issues.

 

Here is some technical blather about what issues I had:

the standard build of nfdump doesn't include nfprofile, which I found out when I finally got all the other dependencies for nfsen and tried to install it.

 

to build nfprofile (--enable-nfprofile) you need the headers from rddtools, but the rrdtool package I was using (http://www.slackers.it/repository/rrdtool/pkg/rrdtool-1.4.7-i686-2cf.txz) does not have a devel package and trying to "fake it" by copying the headers out of the tar.gz (http://oss.oetiker.ch/rrdtool/pub/rrdtool-1.4.7.tar.gz) didn't work.  That means that someone would have to build a proper rrdtool package (or at least a proper rrdtool-devel package).  I played around with this for a bit, but there were a TON of dependencies that I was digging around to find (because unRAID is very slim on extra packages).

 

Also, there seems to be a bug in the perl version I am running (http://slackware.cs.utah.edu/pub/slackware/slackware-12.2/slackware/d/perl-5.10.0-i486-1.tgz) which causes a  undefined symbol: Perl_xs_apiversion_bootcheck error when trying to install nfsen.  I was able to upgrade to the newest slackware perl to get around this (http://mirrors.slackware.com/slackware/slackware-14.0/slackware/d/perl-5.16.1-i486-1.txz), but am unsure if this version of perl would cause other things to break.

 

That was just trying to get it to compile/install.  who knows if it would have worked.  If I have some more time, I'll try again.

 

Not sure what your linux skill level is so apologies if the next explanation is too basic (or too complicated, or even wrong).  for terminology:

• a package is a binary install of a bunch of files.  In Slackware/unRAID, a package is a .txz or .tgz file.  Basically, someone builds the program from source code (.tar.gz file) and makes the package to save other folks the hassle. You can get packages from the "official" distro page (slackware.com) or other places on the internet (if you trust them) or, if all else fails, build them yourself.  If you can compile something, it is easy to package it up from there (see http://www.slackwiki.com/Building_A_Package)
  
• a script is "glue" to handle the actual install.  if the program you want needs to have a directory created, or a config file copied, or something scheduled, or checking to see if something else is installed, it would be done in a script (shell script, usually).  Some very simple addons are really just scripts.
  
• specific to unRAID, a package can also mean an unMenu package.  This basically is a file that includes a bunch of Slackware packages to install and a little bit of scripting to do anything special that needs to be done.
  
• a plugin is a .plg file that is kind of like an unMenu package except it integrates with the default (v5 only) GUI.  I haven't made one of these so I know nothing else about them.  Suspect unMenu packages became so common/useful, they added the capability to "stock" unRAID in v5
  
• an addon is just something that is put onto unRAID that is not "stock", so any of the above would be an addon.
  

Hope that explanation helped a bit

 

Edit: grammar and spelling

Hi Adam,

 

Thanks for your response, I only just saw your response, so I'll chime in a few extra comments as well.

 

Here are the packages I needed to get RRDTOOL to install:

cairo-1.8.8-i486-3.txz

freetype-2.3.12-i486-1.txz

fontconfig-2.8.0-i486-1.txz

libX11-1.3.3-i486-1.txz

libXau-1.0.5-i486-1.txz

libXdmcp-1.0.3-i486-1.txz

libXft-2.1.14-i486-1.txz

libXrender-0.9.5-i486-1.txz

libpng-1.4.2-i486-1.txz

libxcb-1.6-i486-1.txz

libxml2-2.7.6-i486-1.txz

pango-1.26.2-i486-1.txz

pixman-0.16.6-i486-1.txz

rrdtool-1.4.4-i486-1gds.txz

 

This allowed me to create my own binary package for NFDUMP.

 

Ran into the same issues with perl, but was able to upgrade to perl-5.10.1-i486-1, rather that 5.16.

 

So, moving forward, I actually installed apache+php just for this combination.

 

Thanks,

JB.