настроил netams, service data-source type libpcap работает, при указании типа ip-traffic не зависимо от того есть rule или нет, при запуске netams shutdown signal received at ....
netams exiting at .... в чем м.б. проблема?
вот часть результата netams -d:
NeTAMS version 3.1(1829.2) root@localhost / Чтв Окт 28 09:58:10 MSD 2004
24.11.2004 08:47:17.7147 main [INFO]: Stay in debug mode...
24.11.2004 08:47:18.7207 data-source [ERR]: ipq_set_mode failed: Failed to send netlink message
Shutdown signal received at 24.11.2004 08:47:19
а вот мой конфиг:
#NeTAMS version 3.1(1829.2) compiled by root@localhost
#configuration built Tue Nov 23 14:47:30 2004
#begin
#global variables configuration
debug none
user oid 01327B name user1 real-name "makar" crypted $1$$ email user1@domain.ru permit all
schedule oid 08FFFF time 1min- action "html"
#services configuration
service server 0
login any
listen 20001
max-conn 6
service processor 0
lookup-delay 20
flow-lifetime 120
policy acct oid 036633 name all-ip target ip
restrict all pass local pass
unit net oid 112000 name LAN ip 192.168.1.0 mask 255.255.255.0 acct-policy all-ip
unit host oid 112001 name admin ip 192.168.1.1 acct-policy all-ip
unit host oid 112002 name makar ip 192.168.1.2 acct-policy all-ip
storage 1 all
service storage 1
type mysql
user root
service data-source 1
type ip-traffic
service html 1
path /var/www/html/netams
language en
run 1min
client-pages all
#end