Skip to content

Instantly share code, notes, and snippets.

@evoxco

evoxco/start_nprobe

Created September 8, 2015 17:42
Show Gist options
  • Save evoxco/d00466df1a79af0f4674 to your computer and use it in GitHub Desktop.
Save evoxco/d00466df1a79af0f4674 to your computer and use it in GitHub Desktop.
Download ZIP
Nprobe command line with ElasticSearch logging
Raw
start_nprobe
/usr/local/bin/nprobe -b 0 -i eth1 --json-labels -t 60 --elastic "nProbe;nprobe;http://127.0.0.1:9200/_bulk" -T "%IPV4_SRC_ADDR %L4_SRC_PORT %IPV4_DST_ADDR %L4_DST_PORT %PROTOCOL %IN_BYTES %OUT_BYTES %FIRST_SWITCHED %LAST_SWITCHED %IN_PKTS %OUT_PKTS %IP_PROTOCOL_VERSION %APPLICATION_ID %L7_PROTO_NAME %ICMP_TYPE %SRC_IP_COUNTRY %DST_IP_COUNTRY %APPL_LATENCY_MS %HTTP_URL %HTTP_RET_CODE %HTTP_REFERER %HTTP_UA %HTTP_MIME %HTTP_HOST %HTTP_FBOOK_CHAT %HTTP_SITE %HTTP_METHOD" -G 2>/tmp/log
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment