Install fprobe from sources: cd /usr/src/ If you feel that fprobe is not what you need or there are some problems with installing it you can try softflowd that can do the same job. As Netflow probe I prefer fprobe that is totally simple application that just does its job. In general this piece of sofware will sit in background, store every network activity on certain network interface and then send collected data to Netflow collector nfdump. Netflow probe is required to collect IP traffic data on Linux host. In this article you will see how to deploy all this staff in Linux. Nfsen is graphical tools for generating graphs and querying Nfdump for historical traffic reports. In a few words using Netflow you can collect data about all IP data send/received on multiple Cisco/Linux/BSD/Juniper hosts and send it to central Netflow collector that will show you the nice graphs and also will allow to have a complete picture of what data was sent/received on those hosts (including destination and source IP, port, bytes transfered, int/out interfaces etc). Netflow is the protocol developed by Cisco to manage data about IP traffic. So after you’ve configured nfsen and nfdump to monitor traffic on certain Linux server or router you’ll be able to answer the following example questions: What IP was downloading data through 48161 last Wednesday? or How many bytes were sent to IP 8.8.8.8 via 53 port from Linux server? These are the only examples so nfdump and nfdump netflow tools gives you wide range of capabilities to monitor and analyze traffic on your Linux host. Using nfsen it is possible to view IP traffic statistics on Linux interfaces including the graphs showing data sent and received (see the screenshot to the right) as well as historical information about all data transfers.

How to install fprobe