FlowBAT

FlowBAT copied to clipboard

Fixes to help use flowbat with newer systems.

WojRep

**This is not a perfect instruction.** Before run: silkonabox.sh & install_flowbat_ubuntu.sh: 1) https://www.itechlounge.net/2017/10/linux-how-to-add-rc-local-in-debian-9/ 2) `wget https://install.meteor.com > meteor.sh` and edit line 33: `1.9` -> `1.6` 3) Edit /install_flowbat_ubuntu.sh: Line 26...

WojRep

Error Installing on Centos 7.4

1

Do you wish to have FlowBAT start on boot in the background? [y/n] y cp: unable to create normal file "/etc/init/": not a directory To manually run FlowBAT, cd to...

rocketme

I just set up a new flowbat instance on our network but it seems like the ipfix flows aren't being decoded properly. I can see the flows within the packets...

diyon4

I see in install_flowbat_ubuntu.sh that SecurityOnion installation is detected when installing on Trusty. Doug has since moved on to Xenial as the base OS for SecurityOnion. I assume this should...

petiepooo

Installation on Centos7

3

Hello I do try to install and make it work on Centos7 - It 's seem not working at all. The closest to work that I had was METEOR UI....

nvmike

Hoping to test it, but it would be great to have proper, manual installation instructions. In my case I want to try it on FreeBSD. Besides, manual instructions help debug...

borjam

where's the output data

5

I'm a newer I'm learning flowbat.I only know that the rwcut output is a document that File extension is .csv. But I can't find it.I want to know the path...

Tomligit

mistake

1

I can do sort in rwcount.such as : rwcount --delimited --no-titles --bin-size=300 --skip-zeroes --site-config-file=/data/silk.conf /tmp/S8nPHvQchqMMbomD9.rwf | sort --field-separator=\| --key=+2nr | head --lines=100 | tail --lines=100.it do sort on records.but the...

Tomligit

Easier to add exclusions

2

I miss the opportunity to add exclusions an easier way. E.g based on the flow output. So when I click an IP-address in the output it should also include "Add...

runesyd