03.09.2013 Views

Implementation of data collection tools using NetFlow for statistical ...

Implementation of data collection tools using NetFlow for statistical ...

Implementation of data collection tools using NetFlow for statistical ...

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

8 Appendix<br />

!<br />

neighbor y.y.y.y remote-as zzzzz<br />

neighbor y.y.y.y update-source x.x.x.x<br />

neighbor y.y.y.y default-originate<br />

neighbor y.y.y.y s<strong>of</strong>t-reconfiguration inbound<br />

neighbor y.y.y.y prefix-list deny-all out<br />

neighbor 127.0.0.1 remote-as zzzzz<br />

neighbor 127.0.0.1 port 17917<br />

neighbor 127.0.0.1 update-source 127.0.0.1<br />

neighbor 127.0.0.1 route-reflector-client<br />

ip prefix-list deny-all seq 5 deny 0.0.0.0/0 le 32<br />

8.5 Configuration <strong>of</strong> pmacct<br />

daemonize: true<br />

pidfile: /var/run/nfacctd.pid<br />

logfile: /usr/local/etc/pmacct/nfacctd.log<br />

!<br />

interface: eth0<br />

nfacctd_ip: x.x.x.x<br />

nfacctd_port: 2100<br />

nfacctd_renormalize: true<br />

!<br />

aggregate[out]: dst_as,peer_src_as,peer_dst_as<br />

aggregate[in]: src_as,peer_src_as<br />

aggregate[attack]:dst_as,src_host,dst_host,src_port,dst_port,proto<br />

,tos<br />

!<br />

pre_tag_filter[attack]: 100<br />

pre_tag_map: /usr/local/etc/pmacct/pretag.map<br />

!<br />

refresh_maps: true<br />

!<br />

bgp_daemon: true<br />

bgp_daemon_ip: 127.0.0.1<br />

bgp_daemon_port: 17917<br />

bgp_daemon_msglog: true<br />

bgp_agent_map: /usr/local/etc/pmacct/agent.map<br />

53

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!