Ubuntu 12.04 Install Yaf

1. Introduction

YAF is the abbreviation of yet Another flowmeter.

2. Installation process

1 First install the compilation tool

$ sudo apt-get install make GCC

2) Installation Libglib, Libpcap, Libpcre
$ sudo apt-get install Libglib2.0-dev libpcap-dev Libpcre3-dev

3) Download Libfixbuf

$ sudo mkdir/usr/local/src/netsa
$ sudo chown USER. User/usr/local/src/netsa
$ cd/usr/local/src/netsa
$ wget http://tools.netsa.cert.org/releases/libfixbuf-1.2.0.tar.gz

4) Installation Libfixbuf

$ tar zxvf libfixbuf-1.2.0.tar.gz
$ CD libfixbuf-1.2.0
$./configure
$ make
$ sudo make install

5) Download Yaf

$ cd/usr/local/src/netsa
$ wget http://tools.netsa.cert.org/releases/yaf-2.3.2.tar.gz

6) Installation Yaf

$ tar zxvf yaf-2.3.2.tar.gz
$ CD yaf-2.3.2
$./configure--enable-applabel
$ make
$ sudo make install

7) Configure YAF

$ sudo cp/usr/local/src/netsa/yaf-2.3.2/etc/yaf.conf/usr/local/etc/

Modify the following contents of the yaf.conf:

Enabled=true
Yaf_cap_if=eth1

$sudo Ldconfig

References: http://davelowe.com.au/network-security-monitoring/installing-yaf-on-ubuntu-server-12-10/
$ tar zxvf libfixbuf-1.2.0.tar.gz
$ CD libfixbuf-1.2.0
$./configure
$ make
$ sudo make install