I’m doing some work with NetFlow accounting. FlowScan parses the data captured by flow-tools. However, FlowScan needs Cflow.pm which has to be specially compiled to work with flow-tools, because it’s made for Caida’s now defunct cflowd.
If you don’t compile Cflow.pm using the flow-tools library, you get something like “Invalid index in cflowd flow file: 0xCF100103! Version 5 flow-export is required with *all* fields being saved.”
All the instructions on the Internet that I found tell you to compile Cflow.pm out of the contrib dir for flow-tools. However, flow-tools and flow-tools-devel are packages with Fedora, so that’s not an option.
Easy instructions to fix this.
- Download Cflow.pm (link goes to index page)
- Untar wherever you feel like
- Edit Makefile.PL, look for the find_flow_tools subroutine
- Just before the if (“$libdir”) { line, add $libdir=”-L/usr/lib”;
- perl Makefile.PL, you’ll see Found flow-tools…
- make; make install