Line 38... |
Line 38... |
38 |
- download, uncompress, and test the compilation of the last version of havp (./configure + make)
|
38 |
- download, uncompress, and test the compilation of the last version of havp (./configure + make)
|
39 |
- copy the tarball in ~/rpmbuild/SOURCES/. copy the patch file ("havp-init.diff") in ~/rpmbuil/SOURCE. Copy and adapt the .spec in ~/rpmbuid/SPEC
|
39 |
- copy the tarball in ~/rpmbuild/SOURCES/. copy the patch file ("havp-init.diff") in ~/rpmbuil/SOURCE. Copy and adapt the .spec in ~/rpmbuid/SPEC
|
40 |
- rpmbuild -bb ***.spec
|
40 |
- rpmbuild -bb ***.spec
|
41 |
|
41 |
|
42 |
**** For ipt_netflow ****
|
42 |
**** For ipt_netflow ****
|
43 |
- Must be complied on a system which runs the target kernel. So install manually the targeted kernel and reboot (ipt_NETFLOW will not load during this reboot)
|
43 |
- Must be complied on a system which runs the target kernel. So install manually the targeted kernel and the same version of kernel-userspace-headers and reboot (ipt_NETFLOW will not load during this reboot)
|
44 |
- install the RPMs "kernel-server-devel" (choose the targeted kernel), "lib64iptables-devel (or libiptables-devel in 32b arch)"
|
44 |
- install the RPMs "kernel-server-devel" (choose the targeted kernel), "lib64iptables-devel"
|
45 |
- download, uncompress and test the compilation of the last version of ipt-netflow (./configure --disable-dkms --disable-snmp-agent, make all install). The module is compiled in the same directory. The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so)
|
45 |
- download, uncompress and test the compilation of the last version of ipt-netflow (./configure --disable-dkms --disable-snmp-agent, make all install). The module is compiled in the same directory. The libs are copied in the /lib64/iptables (libip6t_NETFLOW.so & libipt_NETFLOW.so)
|
46 |
- test the module : go to the directory of sources and try to load it (modprobe ipt_NETFLOW), look at "journalctrl -f" to verify. Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear). Run "alcasar-daemon.sh" to verify that all is ok.
|
46 |
- test the module : go to the directory of sources and try to load it (modprobe ipt_NETFLOW), look at "journalctrl -f" to verify. Run "alcasar-iptables.sh" to reload netfilter rules (no errors should appear). Run "alcasar-daemon.sh" to verify that all is ok.
|
47 |
- if all is ok, copy the tarball in rpmbuild/SOURCES.
|
47 |
- if all is ok, copy the tarball in rpmbuild/SOURCES.
|
48 |
- Copy and adapt the .spec in rpmbuild/SPECS (change the versions of kernel and rpm).
|
48 |
- Copy and adapt the .spec in rpmbuild/SPECS (change the versions of kernel and rpm).
|
49 |
- Run "rpmbuild -bb ****.spec"
|
49 |
- Run "rpmbuild -bb ****.spec"
|