Quick Start Guide for Linux Installation

Please go to Learning Center for complete set of instructions and documentation.

  1. Download nLive full installation. The downloaded file will have a name like nlive.4.x.y.p.zip where x is the minor version and y is the sub-version.
  2. Login as 'root' into the Linux command prompt and create an empty temporary folder. Transfer the zip file into this folder. Use binary mode for transferring. If you have downloaded the file on to a Windows machine, you may use WinSCP to transfer. Unzip all contents directly into the folder which you just created
  3. Make sure that your anti-spyware and firewall allows nLive processes (see process list in the documentation). Make sure there are no web or other servers running to conflict with nLive, which has a built-in web server and listens on a port for netflow.
  4. Open a bash shell in this folder.Change your working directory to this folder and run ini_inst.sh or setup.sh. If necessary, give it executable permission first, using chmod 744 ini_inst.sh
  5. Follow the prompts and answer the questions with full 'yes' or 'no'.
  6. It is advised that you install nLive under the default directory only (/opt/nlive/) at this time. For custom installation, refer to the documentation.
  7. After the installation is complete, for nLive Core or Enterprise, mirror traffic onto a port on your switch and connect to eth1 port or any other free Ethernet port on the machine (Refer to Learning Center for instructions)
  8. To ensure that the packets are being sent to the machine, issue the command tcpdump -i eth1 and observe output
  9. For nLive Flow or Enterprise, send netflow version 5 exports from routers to nLive on UDP port 9996 (Refer to Learning Center for instructions)
  10. Start nLive by the command service nlive start
  11. Go to a web browser and connect to nLive using http://address_of_machine/ (you can use HTTPS also). If you are using custom ports for the web server, use those port numbers in the browser. Login with username admin and password admin. Change password to something you can easily remember.
  12. Follow the screens to complete the setup.
  13. Do not go through the initial setup screens on the web browser until you provide packet or netflow input
  14. After providing packet or netflow input and setting up the initial screen, wait for about 5-10 minutes to start seeing information on the web interface. It will take about 1 full day to self-tune for the problem detection to become meaningful.

Enterprise edition only

  1. If you want to install the Enterprise edition you might need to get a license key from the vendor. You will need to supply the install code and the email address (case sensitive) in order to obtain the license key. Without a license key, the nLive Enterprise edition will appear like nLive Flow. If you want to enable packet analysis in parallel with netflow on nLive Enterprise, you will need to go to the settings under System Settings::Sensors::General, choose the Local Overrides tab, select the sensor, and then select the Ethernet interfaces on the sensor where you receive the mirrored packets.
  2. While installing the Enterprise edition, one of the prompts will be to select whether you want install the package (console+sensor) or just a component alone. A package is typically for headquarters where one would install the console and sensor together on a single machine. The sensor alone installation can be for a branch office where there is no need for a separate console.