ubuntu 12.04下安装yaf

1、简介

    yaf是Yet Another Flowmeter的缩写。

2、安装过程

1）首先安装编译工具

     $ sudo apt-get install make gcc

2）安装libglib, libpcap, libpcre

    $ sudo apt-get install libglib2.0-dev libpcap-dev libpcre3-dev

3）下载libfixbuf

     $ sudo mkdir /usr/local/src/netsa

     $ sudo chown USER.USER /usr/local/src/netsa

     $ cd /usr/local/src/netsa

     $ wget http://tools.netsa.cert.org/releases/libfixbuf-1.2.0.tar.gz

4）安装libfixbuf

     $ tar zxvf libfixbuf-1.2.0.tar.gz

     $ cd libfixbuf-1.2.0

     $ ./configure

     $ make

     $ sudo make install

5）下载yaf

     $ cd /usr/local/src/netsa

     $ wget http://tools.netsa.cert.org/releases/yaf-2.3.2.tar.gz

6）安装yaf

     $ tar zxvf yaf-2.3.2.tar.gz

     $ cd yaf-2.3.2

     $ ./configure --enable-applabel

     $ make

     $ sudo make install

7）配置yaf

     $ sudo cp /usr/local/src/netsa/yaf-2.3.2/etc/yaf.conf /usr/local/etc/

     修改yaf.conf的如下内容：

     ENABLED=TRUE

     YAF_CAP_IF=eth1

     $sudo ldconfig

参考文献：http://davelowe.com.au/network-security-monitoring/installing-yaf-on-ubuntu-server-12-10/

$ tar zxvf libfixbuf-1.2.0.tar.gz

$ cd libfixbuf-1.2.0

$ ./configure

$ make

$ sudo make install