| 1 | # Config file for /etc/init.d/fprobe |
| 2 | |
| 3 | # Do we want the interface in promiscous mode [yes/no] |
| 4 | #PROMISC=no |
| 5 | |
| 6 | # Interface |
| 7 | IFACE=eth0 |
| 8 | |
| 9 | # If configured, only capture packets matching this tcpdump expression |
| 10 | #FILTER="" |
| 11 | |
| 12 | # Flow state timers |
| 13 | #TIMER_EXPIRED=5 |
| 14 | #TIMER_FRAGMENTED=30 |
| 15 | #TIMER_IDLE=60 |
| 16 | #TIMER_ACTIVE=300 |
| 17 | |
| 18 | # This is the default and should be left unless you know what you are doing |
| 19 | #FLOW_VER=5 |
| 20 | |
| 21 | # local ip. if configured fprobe will use this as the source IP for sending ALL flow data |
| 22 | # If you want to specify a specific source address per collecter, customize it below |
| 23 | #LOCALIP= |
| 24 | |
| 25 | # SNMP iface id |
| 26 | SNMP_IFACE="${IFACE//eth}" |
| 27 | |
| 28 | # Maximum number of concurrent flows to track |
| 29 | # using a specified amount of memory |
| 30 | #MEMBULK=10000 |
| 31 | #MEMLIMIT= |
| 32 | |
| 33 | # Pending queue |
| 34 | #PENDING=100 |
| 35 | |
| 36 | # Kernel capture buffer size (kB) |
| 37 | #KERNBUF=1024 |
| 38 | |
| 39 | # Realtime priority [0=disabled, 1..99] |
| 40 | #RTPRIO=0 |
| 41 | |
| 42 | # Delay N nanoseconds after each B bytes |
| 43 | #DELAY="0:0" |
| 44 | |
| 45 | # How much of the start of each packet to grab |
| 46 | #SNAPLEN=256 |
| 47 | |
| 48 | # chroot() to this location after startup |
| 49 | CHROOT="/var/empty" |
| 50 | |
| 51 | # User to run as. must have perms to the pidfile directory /var/run/fprobe/ |
| 52 | USER=nobody |
| 53 | |
| 54 | # logging level for syslog (0=EMERG, ..., 6=INFO, 7=DEBUG) |
| 55 | #LOGLEVEL=6 |
| 56 | |
| 57 | # If you want to run multiple instances of fprobe, |
| 58 | # You MUST set this variable to a unique INTEGER for each one! |
| 59 | PIDFILE_ID='' |
| 60 | |
| 61 | # remote ip. this is where we send flows |
| 62 | REMOTEIP=127.0.0.1 |
| 63 | # port to listen on |
| 64 | PORT=2055 |
| 65 | # Collector type, see the manpage for valid types |
| 66 | TYPE='' |
| 67 | |
| 68 | # If you want multiple collectors, just specify each one here |
| 69 | COLLECTORS="${REMOTEIP}:${PORT}/${LOCALIP}/${TYPE}" |
| 70 | |