Abstract L7 Flows
The SF-TAP flow abstractor provides flow abstraction interfaces for application level network traffic analysis.
Required:
Optional:
SF-TAP flow abstractor is available on the following OSes.
Before compiling, set environment variables for cmake as follows.
$ export CMAKE_LIBRARY_PATH=/lib:/usr/lib:/usr/local/lib$ export CMAKE_INCLUDE_PATH=/usr/include:/usr/local/include
$ cmake -DCMAKE_BUILD_TYPE=Release CMakeLists.txt$ make
If you want to compile as debug mode, set an option of CMAKE_BUILD_YPE=Debug when running cmake. Debug mode passes an option of -g and a definition of DEBUG=1 to the compiler.
$ cmake -DCMAKE_BUILD_TYPE=Debug CMakeLists.txt$ make
If you want to build static library, set an option of COMPILE_STATIC_LIB=1.
$ cmake -DCOMPILE_STATIC_LIB=1 CMakeLists.txt$ make
If you want to use jemalloc, set an option of USE_JEMALLOC=1.
$ cmake -DUSE_JEMALLOC=1 CMakeLists.txt$ make
If you want to use netmap, set an option of USE_NETMAP=1.
$ cmake -DUSE_NETMAP=1 CMakeLists.txt$ make
You can use a verbose mode when compiling.
$ make VERBOSE=1
If you installed above libraries in unordinal places (not /usr or /usr/local), please tell paths to the directoris as follows.
$ cmake -DBOOST_ROOT=/homebrew -DEVENT_ROOT=/homebrew -DRE2_ROOT=/homebrew -DYAMLCPP_ROOT=/homebrew .
You can specify a network interface by -i option, and a config file by -c option.
Example:
$ ./src/sftap_fabs -i eth0 -c ./examples/fabs.yaml
If you encounter an error as follows,
terminate called after throwing an instance of 'std::runtime_error'what(): locale::facet::_S_create_c_locale name not valid
please install the suitable language package like as follows.
$ apt-get install language-pack-ja
If you want to use netmap, pass -n option as follows.
$ ./src/sftap_fabs -i eth0 -c ./examples/fabs.yaml -n
Other documents are available on the following link.