Table of Contents

Netstats: Traffic Monitoring on your network

We run a rather old package called netstats that does a rather good job of accounting for traffic.

http://netacct-mysql.gabrovo.com/

There area number of things that get setup at the same time as netstat. So do not be too concerned if you see things here that seem out of place.

Apache, webalizer

mkdir /var/www/html/usage
chown -R apache.apache /var/www/html/usage
export passwdmysql=somepassword

Setup mysql

Private configuration

/etc/init.d/mysqld start
yum install libpcap-devel php-devel  mysql-devel

---

/bin/rm /home/strider/temp
/bin/cat << EOF >> /home/strider/temp
use mysql;
UPDATE user Set Password=PASSWORD('somepassword') WHERE User='root';
EOF
/etc/init.d/mysqld stop
/etc/init.d/mysqld start
/etc/init.d/mysqld start
echo NO PASSWORD
mysql -uroot -p < /home/strider/temp

Make sure mysql is running

/etc/init.d/mysqld stop
/etc/init.d/mysqld start

chmod 700 /etc/rc.d/init.d/mysqld
chown 0.0 /etc/rc.d/init.d/mysqld
/sbin/chkconfig --add mysqld
/sbin/chkconfig --level 345 mysqld on

Netstat

mkdir /home/strider/netstat
cd /home/strider/netstat
echo "should be in netstat"
pwd

 

wget http://wk.ai.net.nz/mrepo/addons/centos/netacct-mysql-0.78.tar.gz
wget http://wk.ai.net.nz/mrepo/addons/centos/netstat-3.04_1.tar.gz

wget http://192.168.20.254/mrepo/addons/centos/netacct-mysql-0.78.tar.gz
wget http://192.168.20.254/mrepo/addons/centos/netstat-3.04_1.tar.gz

zcat netacct-mysql-0.78.tar.gz|tar -xvf -
zcat netstat-3.04_1.tar.gz|tar -xvf -

We are only interested in the nestat-3.04,as the netacct-mysql does not currently compile on Centos 6.

What we need are the following files.

/etc/init.d/nacctd

/usr/local/sbin/nacctd

/usr/local/etc/naccttab

/usr/local/etc/nacctpeering

/etc/init.d/nacctd

For starting the daemon at startup

/usr/local/sbin/nacctd

The binary file that was compiled on a i386 some time ago and still works.

/usr/local/etc/naccttab

Main configuration file

/usr/local/etc/nacctpeering

Secondary configuration file, generall empty.

 

Do the following:

cd /home/strider

wget http://wk.ai.net.nz/mrepo/addons/netstat/nacctd

mv nacctd /usr/local/sbin/

chmod 755 /usr/local/sbin/nacctd
chown root.root /usr/local/sbin/nacctd

ll /usr/local/sbin/

 

wget http://wk.ai.net.nz/mrepo/addons/netstat/naccttab

mv naccttab /usr/local/etc/

ll /usr/local/etc/

 

wget http://wk.ai.net.nz/mrepo/addons/netstat/nacctpeering

mv nacctpeering /usr/local/etc/

ll /usr/local/etc/

 

wget http://wk.ai.net.nz/mrepo/addons/netstat/init.d/nacctd

mv nacctd /etc/init.d/

ll /etc/init.d/

 

chmod 700 /etc/rc.d/init.d/nacctd
chown 0.0 /etc/rc.d/init.d/nacctd
/sbin/chkconfig --add nacctd
/sbin/chkconfig --level 345 nacctd on

 

/usr/sbin/adduser acct
passwd acct

 

---

 

cd /home/strider/netstat/netstat-3.04_1

mkdir /var/www/html/netstat
cd /var/www/html/netstat

cp -r /home/strider/netstat/netstat-3.04_1/* .

 

emacs /var/www/html/netstat/contrib/netstat.sql # hash the first line

 

Private configuration

 

sed -ie 's/.*"acct_password".*$/SET PASSWORD FOR \"acct\"@\"localhost\"=PASSWORD(\"somepassword\")\;/' /var/www/html/netstat/contrib/netstat.sql \
&& grep PASSWORD /var/www/html/netstat/contrib/netstat.sql

 

mysql -uroot -p$passwdmysql < /var/www/html/netstat/contrib/netstat.sql

 

/bin/rm /home/strider/temp
/bin/cat << EOF >> /home/strider/temp
use netacct;
insert into ipallow values ('192.168.20.1');
grant usage on netacct.* to acct@localhost ;
grant select,update,insert on netacct.* to acct@localhost ;
SET PASSWORD FOR "acct"@"localhost"=PASSWORD("somepassword");
UPDATE users SET Password='encryptedFORMofSOMEpassword' WHERE login='admin';
EOF

 

sed -ie 's/.*\nregister_globals = Off.*$/\nregister_globals = On/' /etc/php.ini \
&& grep "register_globals = On" /etc/php.ini

sed -ie 's/.*\nregister_long_arrays = Off.*$/\nregister_long_arrays = On/' /etc/php.ini \
&& grep "register_long_arrays = On" /etc/php.ini

You also need to edit the following with the admin password.

/var/www/html/netstat/config.php

This is not a full set of instructions, but very close to it. Some I have left out due to security issues. Read through the helpfile supplied or email me.

Next Page: Setting up Cacti