How can we help?

How to set up the Kentik flow collector (chfagent)

Follow

When should I use chfagent?

When you require:

    • Encrypted flow transmission to Kentik 

      and/or
    • Multiple devices sharing the same public IP to send flow to Kentik (proxy)

NOTE: Cisco ASAs are currently incompatible with AuvikFlow.

Assumptions

  • You’ve already signed up for AuvikFlow and have an active subscription.
  • You’ve already added the AuvikFlow (Kentik) integration to your account and have set up your devices.

Download and install chfagent

Currently, chfagent is Linux-only. You can deploy it on any distribution and version listed below. Deploying it on a distribution and version other than what’s listed below is unsupported. Our recommended distribution is Ubuntu 14.04

Download:

Distribution

Download path: https://kentik.com/packages/builds/...

CentOS/RHEL 5

rhel/5/chfagent_rhel_5-latest-1.x86_64.rpm

CentOS/RHEL 6

rhel/6/chfagent_rhel_6-latest-1.x86_64.rpm

CentOS/RHEL 7

rhel/7/chfagent_rhel_7-latest-1.x86_64.rpm

Debian 7

debian/7/chfagent-wheezy_latest_amd64.deb

Debian 8

debian/8/chfagent-jessie_latest_amd64.deb

Ubuntu 10.04

ubuntu/10.04/chfagent-lucid_latest_amd64.deb

Ubuntu 12.04

ubuntu/12.04/chfagent-precise_latest_amd64.deb

Ubuntu 14.04

ubuntu/14.04/chfagent-trusty_latest_amd64.deb

Download and install: Debian / Ubuntu

To download and install a Debian/Ubuntu version of chfagent, use the following command:

wget https://kentik.com/packages/builds/[download_path]

dpkg -i chfagent*.deb

Note for Ubuntu installations

To have chfagent appropriately forward flow data, execute the following on your shell:

sudo sysctl -w "net.ipv4.conf.all.rp_filter=1"

Download and install: CentOS / Red Hat Enterprise Linux

To download and install a CentOS/RHEL version of chfagent, use the following command:

wget https://kentik.com/packages/builds/[download_path]

rpm --install chfagent*.rpm

Execute chfagent

Use these command line arguments to configure chfagent as a NetFlow proxy agent:

  • -api_email (required): Provided by Auvik Support when your AuvikFlow account was provisioned.
  • -api_token (required): Provided by Auvik Support when your AuvikFlow account was provisioned.
  • -type (required): Set to proxy.
  • -host (required): Set to one of the following interface IPs:
    • - The IP of a single interface for chfagent to listen on
    • - 0.0.0.0 to listen on all interfaces
  • -port (optional): Set the port to listen on. Most devices default to port 2055, which is what we’ll use in this example. However, you can specify a different port if needed. If you specify a different port, your devices’ flow export configurations will need to be modified appropriately.

Example:

chfagent -api_email=$api_email -api_token=$api_token -type=proxy -host=$interface_ip -port 2055

Note: Use -h to return a list of arguments.

Chfagent startup script and watchdog

Now that you have chfagent configured, you will need to create a few scripts to ensure that chfagent starts with the system and remains running. To create these scripts, follow the instructions located in this article.

Have more questions? Submit a request

Comments

Powered by Zendesk