alex
Fri, 11 Apr 2008 09:05:57 -0700
Sorry very much list and Paolo. It's my fault.
I read with no attention about 'nfprobe_engine' parameter.
I must use it with 'nfprobe' plugins with 'nfprobe_version: 9'.
But two questions rest.
1. How i can in my configuration (several 'nfprobe' plugins on one
machine and 'nfacctd' collector on another) setting 'agent_id'
field in database? Now i use follow configurations:
nfacctd:
-------
daemonize: true
nfacctd_ip: 192.168.5.8
nfacctd_port: 2100
nfacctd_allow_file: /usr/local/etc/allow.lst
aggregate: tag, src_host, dst_host, src_port, dst_port, proto
plugins: mysql
sql_db: pmacct
sql_table: acct_v7
sql_table_version: 7
sql_host: 127.0.0.1
sql_user: pmacct
sql_passwd: password
sql_refresh_time: 10
sql_history: 1d
sql_history_roundoff: h
pmacctd:
-------
daemonize: true
interface: eth1
post_tag: 1
promisc: false
pmacctd_force_frag_handling: true
plugins: nfprobe[in], nfprobe[out]
nfprobe_receiver: 192.168.5.8:2100
nfprobe_version: 9
nfprobe_engine: 1:1
aggregate[in]: tag, dst_host, src_host, src_port, proto
aggregate[out]: tag, src_host, dst_host, dst_port, proto
aggregate_filter[in]: dst net ( 192.168.5.0/24 or 172.16.200.0/24 ) and src
net ! ( 192.168.0.0/16 or 172.16.0.0/12 or 10.0.0.0/8 )
aggregate_filter[out]: src net ( 192.168.5.0/24 or 172.16.200.0/24 ) and dst
net ! ( 192.168.0.0/16 or 172.16.0.0/12 or 10.0.0.0/8 ) and ds
t host ! 255.255.255.255
I setting up 'nfprobe_engine', 'post_tag' parameters but in
table i see only 'agent_id=0' for all records.
2. How i can count 'flows' field?
Thank you very much,
Alex
----------
Доставка на дом и в офис пиццы, суши, шашлыка, напитков круглосуточно.
Закажи сейчас! http://www.pizza.by
(017) 290-93-93, (029) 690-93-93, 555-93-93
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists