From e8347e149d70fb581716e931431eb6ccc5889b9f Mon Sep 17 00:00:00 2001 From: jim-p Date: Fri, 6 Feb 2015 10:04:01 -0500 Subject: Add a few more parameters to softflowd --- config/softflowd/softflowd.xml | 130 ++++++++++++++++++++++++++++++++++++++--- 1 file changed, 123 insertions(+), 7 deletions(-) (limited to 'config') diff --git a/config/softflowd/softflowd.xml b/config/softflowd/softflowd.xml index 88e521a7..0c89faac 100644 --- a/config/softflowd/softflowd.xml +++ b/config/softflowd/softflowd.xml @@ -1,6 +1,6 @@ softflowd - 0.9.8 pkg v1.0.1 + 0.9.8_2 pkg v1.1 softflowd: Settings pkg_edit.php?xml=softflowd.xml&id=0 @@ -18,6 +18,10 @@ installedpackages->package->$packagename->configuration->settings + + General Settings + listtopic + Interface interface @@ -43,6 +47,12 @@ Specify the maximum number of flows to concurrently track before older flows are expired. Default: 8192. input + + Hop Limit + hoplimit + Set the IPv4 TTL or the IPv6 hop limit to hoplimit. softflowd will use the default system TTL when exporting flows to a unicast host. When exporting to a multicast group, the default TTL will be 1 (i.e. link-local). + input + Netflow version version @@ -63,6 +73,72 @@ + + Flow Tracking Level + flowtracking + Specify which flow elements softflowd should be used to define a flow. track_level may be one of: "full" (track everything in the flow, the default), "proto" (track source and destination addresses and protocol), or "ip" (only track source and destination addresses). Selecting either of the latter options will produce flows with less information in them (e.g. TCP/UDP ports will not be recorded). This will cause flows to be consolidated, reducing the quantity of output and CPU load that softflowd will place on the system at the cost of some detail being lost. + select + + + + + + + + Timeout Values + listtopic + + + General + timeout-general + (Seconds) This is the general timeout applied to all traffic unless overridden by one of the other timeouts. + input + + + Maximum Liftime + timeout-maxlife + (Seconds) This is the maximum lifetime that a flow may exist for. All flows are forcibly expired when they pass maxlife seconds. To disable this feature, specify a maxlife of 0. + input + + + Expire Interval + timeout-expint + (Seconds) Specify the interval between expiry checks. Increase this to group more flows into a NetFlow packet. To disable this feature, specify a expint of 0. + input + + + TCP + timeout-tcp + (Seconds) This is the general TCP timeout, applied to open TCP connections. + input + + + TCP RST + timeout-tcp-rst + (Seconds) This timeout is applied to a TCP connection when a RST packet has been sent by one or both endpoints. + input + + + TCP FIN + timeout-tcp-fin + (Seconds) This timeout is applied to a TCP connection when a FIN packet has been sent by both endpoints. + input + + + UDP + timeout-udp + (Seconds) This is the general UDP timeout, applied to all UDP connections. + input + "softflowd.sh", @@ -108,6 +202,28 @@ $input_errors[] = 'You must specify a valid ip address in the \'Host\' field'; if (($post['port'] == "") || !is_port($post['port'])) $input_errors[] = 'You must specify a valid port number in the \'Port\' field'; + + if (($post['version'] == "" || !in_array($post['version'], array(1, 5, 9)))) + $input_errors[] = 'You must specify a netflow version'; + if (($post['flowtracking'] == "" || !in_array($post['flowtracking'], array("full", "proto", "ip")))) + $input_errors[] = 'You must specify a valid flow tracking selection'; + + if (!empty($post['hoplimit']) && (!is_numeric($post['hoplimit']) || ($post['hoplimit'] < 1) || ($post['hoplimit'] > 255))) + $input_errors[] = 'You must specify a valid hop limit'; + if (!empty($post['timeout-general']) && (!is_numeric($post['timeout-general']) || ($post['timeout-general'] < 0))) + $input_errors[] = 'You must specify a valid General Timeout'; + if (!empty($post['timeout-maxlife']) && (!is_numeric($post['timeout-maxlife']) || ($post['timeout-maxlife'] < 0))) + $input_errors[] = 'You must specify a valid Maximum Lifetime Timeout'; + if (!empty($post['timeout-expint']) && (!is_numeric($post['timeout-expint']) || ($post['timeout-expint'] < 0))) + $input_errors[] = 'You must specify a valid Expire Interval'; + if (!empty($post['timeout-tcp']) && (!is_numeric($post['timeout-tcp']) || ($post['timeout-tcp'] < 0))) + $input_errors[] = 'You must specify a valid TCP Timeout'; + if (!empty($post['timeout-tcp-rst']) && (!is_numeric($post['timeout-tcp-rst']) || ($post['timeout-tcp-rst'] < 0))) + $input_errors[] = 'You must specify a valid TCP RST Timeout'; + if (!empty($post['timeout-tcp-fin']) && (!is_numeric($post['timeout-tcp-fin']) || ($post['timeout-tcp-fin'] < 0))) + $input_errors[] = 'You must specify a valid TCP FIN Timeout'; + if (!empty($post['timeout-udp']) && (!is_numeric($post['timeout-udp']) || ($post['timeout-udp'] < 0))) + $input_errors[] = 'You must specify a valid UDP Timeout'; } function cleanup_config_softflowd() { -- cgit v1.2.3