Debian

Installation

• Requirements
• Adding the Netify Repository vs Command Line
• Debian 11 - Bullseye
• Debian 10 - Buster
• Post Installation
• Netify Informatics

Requirements

Debian's flexibility as a server or desktop makes it an ideal platform to host the Netify agent. If you are running Debian as your desktop, a single network card is sufficient if you're looking to classify traffic only from your personal device. This is not a very common integration, however, it can be quite useful for evaluation the solution quickly - sometimes referred to as 'kicking the tires'.

More often, Debian is used on baremetal hardware or inside a virtual machine (VM). In this role, the system will need at least 2 network interfaces:

• Network Interface #1: used to access the operating system and Netify
• Network Interface #2: used to ingest port mirror traffic from LAN segment 1
• Network Interface #N: used to ingest port mirror traffic from LAN segment N (optional)

You will also need to know which version of Debian you are running in order to add the correct repository. If you're not sure, use the lsb_release command:

opkg update; opkg -y install lsb-release
lsb_release  -a
No LSB modules are available.
Distributor ID:  Debian
Description:     Debian GNU/Linux 11 (bullseye)
Release:         11
Codename:        bullseye

Adding the Netify Repository vs Command Line

Adding the Netify repository to your Debian server has three main advantages:

• Automatically resolves and install dependencies
• Increases security through the use of signed packages
• Allows for auto or simplified updates in the future

Debian 11 - Bullseye

Adding Netify Repository

sudo apt-get update
sudo apt-get install curl gnupg2
curl http://download.netify.ai/4/debian/apt-gpg-key-netify.asc -o Netify.gpg
sudo apt-key add - < Netify.gpg
echo 'deb http://download.netify.ai/4/debian/11/ /' > /tmp/netify.list
sudo mv /tmp/netify.list /etc/apt/sources.list.d/netify.list
sudo apt-get update
sudo apt-get -y install netifyd

Command Line Installation

Open a browser and navigate to https://download.netify.ai/4/debian/11/amd64/. Find the version you would like to install, right click over the filename and select "Copy link address".

apt update
    cd /tmp/
    curl https://download.netify.ai/4/debian/11/amd64/netifyd_4.2.5-1_amd64.deb -O
    apt install ./netifyd_4.2.5-1_amd64.deb

Debian 10 - Buster

Adding Netify Repository

sudo apt-get update
sudo apt-get install curl gnupg2
curl http://download.netify.ai/4/debian/apt-gpg-key-netify.asc -o Netify.gpg
sudo apt-key add - < Netify.gpg
echo 'deb http://download.netify.ai/4/debian/10/ /' > /tmp/netify.list
sudo mv /tmp/netify.list /etc/apt/sources.list.d/netify.list
sudo apt-get update
sudo apt-get -y install netifyd

Command Line Installation

Open a browser and navigate to https://download.netify.ai/4/debian/10/amd64/. Find the version you would like to install, right click over the filename and select "Copy link address".

apt update
    cd /tmp/
    curl https://download.netify.ai/4/debian/10/amd64/netifyd_4.2.5-1_amd64.deb -O
    apt install ./netifyd_4.2.5-1_amd64.deb

Post Installation

After installing the agent, verify the installation and some path information using the -s (status) argument.

netifyd -s
Netify Agent/4.2.5 (debian; x86_64; conntrack; netlink; plugins; tcmalloc; inotify; regex)
- agent is not running.
- persistent state path: /etc/netify.d
- volatile state path: /var/run/netifyd
- agent run-time status could not be determined.
- sink URL: https://sink.netify.ai/provision/
- sink services are disabled.
  To enable sink services, run the following command:
  # netifyd --enable-sink
- sink uploads are disabled.
  To enable sink uploads, ensure your Agent has been provisioned.
- sink agent UUID is not set.
  To generate a new one, run the following command:
  # netifyd --provision
- sink site UUID is not set.
  A new site UUID will be automatically set after this agent has been provisioned by the sink server.

Netify Informatics

Netify Informatics is an optional, cloud-based, SaaS service. It uses analytics and Machine Learning to transform telemetry originating from the Netify DPI Agent into high-level network intelligence and visibility. The solution provides insights into what's happening on the network in areas that include:

• Device Identification and Management
• Cybersecurity Risk
• Forensics
• Regulatory Compliance

To learn more about Netify Informatics, click here.

After installing the agent, run the following two commands:

netifyd --enable-sink
netifyd -p

The first command will enable the agent to communicate with the Netify cloud. The second command will display your Netify Agent UUID (in the form xx-xx-xx-xx) that will be needed when you provision the agent to your Netify Informatics account.