Hello,

> > I'll get this kind of error:
> > Apr 13 15:27:15 server pmacctd[1341]: ERROR ( default/mysql ): Duplicate
> > entry '0-00:1c:c0:74:5b:e9-00:00:0c:07:ac:6a-0-84.38.64.216-79.221.203.'
> > for key 1
> 
> I get this as well. It means that the primary key is not long enough to
> make the records truly unique. As you can see, it has been truncated.
> Either find out how to make the key longer (and please let me know :) or
> remove some aggregation fields, e.g. mac addresses and vlans.

strange, The primary key could be up to 1000 bytes if I remember
correctly, the whole row isn't that long.

> I'm not sure why "flows" is in your aggregate set since flows are already
> aggregated into flows in all cases by pmacctd, as far as I know (please
> correct me if I'm wrong).

flow isn't in the primary key.

> > Apr 13 15:27:15 server kernel: pmacctd[1341]: segfault at f7002991 ip
> > 00000000f7bfa9ca sp 00000000ffb88334 error 4 in
> > libpthread-2.3.6.so[f7bf2000+e000]
> 
> And that should definitely not happen. Where did you get pmacct from? Did
> you compile it yourself? Can you build a version with debugger symbols and
> run it in gdb to get a backtrace (bt command) when it crashes?

Since I'd had similar problems with the debian version, I compiled it on
my own.

Since I hav't much experience with gdb, any hints, this seems to bee not
the right way:
(gdb) run -f /etc/pmacct/pmacctd.conf 
The program being debugged has been started already.
Start it from the beginning? (y or n) y

Starting program: /usr/sbin/pmacctd -f /etc/pmacct/pmacctd.conf
[Thread debugging using libthread_db enabled]
[New Thread -139180352 (LWP 4975)]
bt
^C
Program received signal SIGINT, Interrupt.
[Switching to Thread -139180352 (LWP 4975)]
0xffffe430 in __kernel_vsyscall ()
(gdb) bt
#0  0xffffe430 in __kernel_vsyscall ()
#1  0xf7c587f3 in write () from /lib/tls/i686/cmov/libc.so.6
#2  0x080579d4 in exec_plugins (pptrs=0xfff30fd8) at plugin_hooks.c:254
#3  0x08054331 in pcap_cb (user=0xfff31188 "", pkthdr=0xfff31098,
buf=0x80d4a50 "")
    at pmacctd.c:604
#4  0xf7d150d3 in pcap_read_linux (handle=0x80d47b0, max_packets=-1,
callback=0x8054277 <pcap_cb>, 
    user=0xfff31188 "") at pcap-linux.c:797
#5  0xf7d15f8b in pcap_loop (p=0x80d47b0, cnt=-1, callback=0x8054277
<pcap_cb>, user=0xfff31188 "")
    at pcap.c:107
#6  0x08054223 in main (argc=3, argv=0xfff314a4, envp=0xfff314b4) at
pmacctd.c:564

(The error has been loged bevore I pressen ctrl+c)

regards

Johannes

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to