Export netflow from linux server

 
https://github.com/irino/softflowd

pico /etc/systemd/system/softflowd.service

[Unit]
Description=Softflowd exporter
After=network.target


[Service]
ExecStart=softflowd -i ens160 -v 9 -s 1 -t maxlife=1 -t general=15 -d -n 10.25.10.59:9996
Restart=always
User=root
Group=root

[Install]
WantedBy=default.target



Check point block a single IP address

  Using Suspicious Activity Monitoring (SAM) Connect to the firewall via SSH and log into Expert mode : expert Run the fw sam command to bl...

Mais vistos