pmacct-discussion  

[pmacct-discussion] NO pmacct aggregation bug

alex
Fri, 11 Apr 2008 09:05:57 -0700

    Sorry very much list and Paolo. It's my fault.
    I read with no attention about 'nfprobe_engine' parameter.
    I must use it with 'nfprobe' plugins with 'nfprobe_version: 9'.
    But two questions rest.

1.  How i can in my configuration (several 'nfprobe' plugins on one
     machine and 'nfacctd' collector on another) setting 'agent_id'
     field in database? Now i use follow configurations:

   nfacctd:
   -------
daemonize: true
nfacctd_ip: 192.168.5.8
nfacctd_port: 2100
nfacctd_allow_file: /usr/local/etc/allow.lst
aggregate: tag, src_host, dst_host, src_port, dst_port, proto
plugins: mysql
sql_db: pmacct
sql_table: acct_v7
sql_table_version: 7
sql_host: 127.0.0.1
sql_user: pmacct
sql_passwd: password
sql_refresh_time: 10
sql_history: 1d
sql_history_roundoff: h

   pmacctd:
   -------
daemonize: true
interface: eth1
post_tag: 1
promisc: false
pmacctd_force_frag_handling: true
plugins: nfprobe[in], nfprobe[out]
nfprobe_receiver: 192.168.5.8:2100
nfprobe_version: 9
nfprobe_engine: 1:1
aggregate[in]: tag, dst_host, src_host, src_port, proto
aggregate[out]: tag, src_host, dst_host, dst_port, proto
aggregate_filter[in]: dst net ( 192.168.5.0/24 or 172.16.200.0/24 ) and src 
net ! ( 192.168.0.0/16 or 172.16.0.0/12 or 10.0.0.0/8 )
aggregate_filter[out]: src net ( 192.168.5.0/24 or 172.16.200.0/24 ) and dst 
net ! ( 192.168.0.0/16 or 172.16.0.0/12 or 10.0.0.0/8 ) and ds
t host ! 255.255.255.255


     I setting up 'nfprobe_engine', 'post_tag' parameters but in
     table i see only 'agent_id=0' for all records.

2.  How i can count 'flows' field?


     Thank you very much,
     Alex
   

----------
Доставка на дом и в офис пиццы, суши, шашлыка, напитков круглосуточно. 
Закажи сейчас! http://www.pizza.by
(017) 290-93-93, (029) 690-93-93, 555-93-93

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists