HP Intelligent Management Center v7.1 Probe Installation Guide Abstract This document provides instructions for installing the IMC Probe. HP Part Number: 5998-6773 Published: September 2014 Volume: IMC NTA/UBA 7.0 1 (E0201E0301) Edition: 1.0 © Copyright 2014 Hewlett-Packard Development Company, L.P. Legal and notice information No part of this documentation may be reproduced or transmitted in any form or by any means without prior written consent of Hewlett-Packard Development Company, L.P. The information contained herein is subject to change without notice. HEWLETT-PACKARD COMPANY MAKES NO WARRANTY OF ANY KIND WITH REGARD TO THIS MATERIAL, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. The only warranties for HP products and services are set forth in the express warranty statements accompanying such products and services. Nothing herein should be construed as constituting an additional warranty. HP shall not be liable for technical or editorial errors or omissions contained herein. Contents 1 Overview..................................................................................................4 2 Installing the IMC probe..............................................................................5 Installation preparations............................................................................................................5 Hardware requirements........................................................................................................5 Software requirements..........................................................................................................5 Installation environment verification........................................................................................5 Installation...............................................................................................................................6 Preparing for installation.......................................................................................................6 Installing the IMC probe.......................................................................................................6 Uninstallation...........................................................................................................................8 3 FAQ.......................................................................................................10 How does one launch the IMC probe manually after installation?.................................................10 How does one manually stop the IMC probe?............................................................................10 How does one solve the prbkern.ko error during the installation of the IMC probe in the Red Hat Enterprise Linux Server 6.4 server?............................................................................................10 4 Support and other resources......................................................................12 Contacting HP........................................................................................................................12 Subscription service................................................................................................................12 Related information.................................................................................................................12 Documents........................................................................................................................12 Websites..........................................................................................................................12 Conventions...........................................................................................................................12 Port numbering in examples................................................................................................13 Index.........................................................................................................14 Contents 3 1 Overview HP Intelligent Management Center (IMC) is an integrated network management product. With service management as its core functionality and using a modular structure, IMC provides network administrators with a scalable network management platform, various service components, and network management solutions, depending on actual requirements. Based on the IMC platform, two components have been developed: Network Traffic Analyzer (NTA) and User Behavior Auditor (UBA). NTA monitors and analyzes network traffic and UBA audits user behavior. Both of them support log collection through a probe. The IMC probe installation package contains a probe installation program for NTA and UBA. This document describes in detail the installation procedure of the IMC probe. 4 Overview 2 Installing the IMC probe Installation preparations Hardware requirements Install the IMC probe on an independent server. Table 1 lists the basic server hardware requirements to run the IMC probe. Table 1 Server hardware requirements Item Requirement Type: Intel x86 Frequency: 3.0 GHz CPU Number of processors: 1 or 2 NOTE: To process traffic less than 300 Mbps, use one single-core CPU. To process traffic greater than 300 Mbps, use two single-core CPUs or one dual-core CPU. Memory 2 GB Hard disk drive 80 GB Network adapter card Type: Built-in Gigabit NIC Number of cards: 2 NOTE: For greater stability, HP recommends installing the IMC probe on a physical sever. Software requirements The IMC probe supports following operating systems: • Red Hat Enterprise Linux Server 5.0 (32-bit) • Red Hat Enterprise Linux Server 5.5 (32-bit) • Red Hat Enterprise Linux Server 6.1 (64-bit) • Red Hat Enterprise Linux Server 6.4 (64-bit) IMPORTANT: The IMC probe supports Red Hat Enterprise Linux Server 5.0 and 5.5, and cannot run if the Linux kernel is Physical Address Extension (PAE)-enabled. PAE is enabled by default when Red Hat Enterprise Linux 5.5 is installed on a host that has 4 GB or more memory. Before installing a probe, disable the PAE feature. For more information about the PAE feature, see documents related to Red Hat Enterprise Linux Server. Installation environment verification Before installing the IMC probe, make sure that all requirements listed in Table 2 are met. Installation preparations 5 Table 2 Installation environment checklist Item Requirement Hardware Make sure the hardware requirements stated in the contract are met. The requirements include CPU, memory size, and hard disk size. Make sure that the software requirements stated in the contract are met. The IMC probe version must be correct and the operating system must be one of the following: Software • Red Hat Enterprise Linux Server 5.0 (32-bit) • Red Hat Enterprise Linux Server 5.5 (32-bit) • Red Hat Enterprise Linux Server 6.1 (64-bit) • Red Hat Enterprise Linux Server 6.4 (64-bit) Installation Preparing for installation CAUTION: Before installing the probe, make sure that you have root permission and are authorized to execute the installation program. To install the IMC probe, first decompress the downloaded installation package in the Red Hat Linux operating system. Use the following command to enter the install/ directory in the IMC probe installation package: # cd install/ This directory contains the installation script probe_installer.sh. To install the IMC probe: 1. Decompress the downloaded installation package in the Red Hat Linux operating system. 2. Go to the install/ directory in the IMC probe installation package: # cd install/ This directory contains the installation script probe_installer.sh. Installing the IMC probe 1. 2. 3. Run chmod +x ./probe_installer.sh, which grants execution permission to the probe_installer.sh script. Run probe_installer.sh. Specify the installation path. You can specify an absolute path, or press Enter to use the default path /usr/local/ for installation. 6 4. Specify a directory to install the IMC probe: 5. Specify a monitor network adapter card (enter the name of the network adapter card of the server where the IMC probe is to be installed): Installing the IMC probe NOTE: The network adapter card set here is the monitor network adapter card, used to receive mirror traffic from the network devices. You can use the ifconfig command to obtain the name of the network adapter card to designate as the monitor network adapter card. 6. Add another network adapter card. If you decline to add additional network adapter cards, enter n: 7. Enable or disable the IMC probe to monitor IPv6 traffic. To disable the IMC probe from monitoring IPv6 traffic, enter n: Installation 7 8. Set a password for the IMC probe: a. Enter y. b. Enter and confirm a password: NOTE: With a password configured, you are asked to enter the password when adding a new IMC probe. If you do not want to use a password, enter n when you see the message Do you want to set a password for probe?. When the installation is complete, the system asks you to reboot the server: NOTE: You must restart the server before the IMC probe can work normally. The IMC probe runs automatically after the server is restarted. You can use the ps -ax | grep probe command to confirm that the probe process is running. If errors occur during installing the Red Hat Enterprise Linux Server 6.4 server, see “FAQ” for solutions. Uninstallation 1. Delete the unba directory under the directory where the IMC probe is installed: # cd /usr/local/unba # rm -rf * 2. Delete the /opt/unba_data directory: # rm -rf /opt/unba_data 3. Delete the /data directory: # unlink /data 4. Delete the probe services: # chkconfig --del probed 8 Installing the IMC probe 5. Delete the /etc/probed file: # cd /etc/init.d # rm -rf probed 6. Open the /etc/probe file with the vi command and delete information about the probe. # vi /etc/profile 7. Restart the server after removing the IMC probe. Uninstallation 9 3 FAQ How does one launch the IMC probe manually after installation? 1. 2. 3. Enter the unba directory under the directory where the IMC probe is installed. Change to the bin subdirectory. Execute the ./monitor command. How does one manually stop the IMC probe? 1. 2. 3. Enter the unba directory under the directory where the IMC probe is installed. Change to the bin subdirectory. Execute the ./monitor stop command. How does one solve the prbkern.ko error during the installation of the IMC probe in the Red Hat Enterprise Linux Server 6.4 server? Figure 1 shows the error sequence. Figure 1 Failure to install the IMC probe The error results from the lack of software packages required for installing the IMC probe. Solution I: Re-install the operating system (see the Red Hat Enterprise Linux Server 6.4 Installation Guide), customize the software settings, and then install the IMC probe on the server. Solution II: Verify that all the required software packages are installed in the operating system by executing the following commands: • rpm –qa to check all installed software. • rpm –q to check a specific rpm file. The required software packages are: 10 FAQ • libgomp-4.4.7-3.el6 • kernel-headers-2.6.32-358.el6 • glibc-headers-2.12-1.107.el6 • glibc-devel-2.12-1.107.el6 • gcc-4.4.7-3.el6 • kernel-devel-2.6.32-358.el6 If any software package is not installed, insert the operating system installation disk into the CD-ROM driver, copy the software package from the server working folder to your local server, and use the rpm -ihv xxx.rpm command to install the package. After all the software packages are installed, install the IMC probe. How does one solve the prbkern.ko error during the installation of the IMC probe in the Red Hat Enterprise Linux Server 6.4 server? 11 4 Support and other resources Contacting HP For worldwide technical support information, see the HP support website: http://www.hp.com/support Before contacting HP, collect the following information: • Product model names and numbers • Technical support registration number (if applicable) • Product serial numbers • Error messages • Operating system type and revision level • Detailed questions Subscription service HP recommends that you register your product at the Subscriber's Choice for Business website: http://www.hp.com/go/wwalerts After registering, you will receive email notification of product enhancements, new driver versions, firmware updates, and other product resources. Related information Documents To find related documents, browse to the Manuals page of the HP Business Support Center website: http://www.hp.com/support/manuals • For related documentation, navigate to the Networking section, and select a networking category. • For a complete list of acronyms and their definitions, see HP A-Series Acronyms. Websites • HP.com: http://www.hp.com • HP Networking: http://www.hp.com/go/networking • HP manuals http://www.hp.com/support/manuals • HP download drivers and software: http://www.hp.com/support/downloads • HP software depot http://www.software.hp.com Conventions Table 3 GUI conventions 12 Convention Description Boldface Window names, button names, field names, and menu items are in bold text. For example, the New User window appears; click OK. > Multi-level menus are separated by angle brackets. For example, File > Create > Folder. Support and other resources Table 4 Symbols Convention Description CAUTION: An alert that calls attention to important information that, if not understood or followed, can result in data loss, data corruption, or damage to hardware or software. NOTE: An alert that contains additional or supplementary information. Port numbering in examples The port numbers in this document are for illustration only and might be unavailable on your device. Conventions 13 Index C W contacting HP, 12 websites, 12 D documentation, 12 F FAQ, 10 frequently asked questions, 10 H hardware requirements, 5 help obtaining, 12 HP technical support, 12 I installation environment checklist, 6 environment verification, 5 preparing for, 6 procedure, 6 installation preparations, 5 installing the probe, 5 O operating systems supported, 5 Overview, 4 P preparations installation, 5 R registering product, 12 subscription service, 12 requirements hardware, 5 software, 5 S software requirements, 5 supported operating systems, 5 T technical support, 12 HP, 12 U uninstallation, 8 14 Index