Hello, > > I'll get this kind of error: > > Apr 13 15:27:15 server pmacctd[1341]: ERROR ( default/mysql ): Duplicate > > entry '0-00:1c:c0:74:5b:e9-00:00:0c:07:ac:6a-0-84.38.64.216-79.221.203.' > > for key 1 > > I get this as well. It means that the primary key is not long enough to > make the records truly unique. As you can see, it has been truncated. > Either find out how to make the key longer (and please let me know :) or > remove some aggregation fields, e.g. mac addresses and vlans.
strange, The primary key could be up to 1000 bytes if I remember correctly, the whole row isn't that long. > I'm not sure why "flows" is in your aggregate set since flows are already > aggregated into flows in all cases by pmacctd, as far as I know (please > correct me if I'm wrong). flow isn't in the primary key. > > Apr 13 15:27:15 server kernel: pmacctd[1341]: segfault at f7002991 ip > > 00000000f7bfa9ca sp 00000000ffb88334 error 4 in > > libpthread-2.3.6.so[f7bf2000+e000] > > And that should definitely not happen. Where did you get pmacct from? Did > you compile it yourself? Can you build a version with debugger symbols and > run it in gdb to get a backtrace (bt command) when it crashes? Since I'd had similar problems with the debian version, I compiled it on my own. Since I hav't much experience with gdb, any hints, this seems to bee not the right way: (gdb) run -f /etc/pmacct/pmacctd.conf The program being debugged has been started already. Start it from the beginning? (y or n) y Starting program: /usr/sbin/pmacctd -f /etc/pmacct/pmacctd.conf [Thread debugging using libthread_db enabled] [New Thread -139180352 (LWP 4975)] bt ^C Program received signal SIGINT, Interrupt. [Switching to Thread -139180352 (LWP 4975)] 0xffffe430 in __kernel_vsyscall () (gdb) bt #0 0xffffe430 in __kernel_vsyscall () #1 0xf7c587f3 in write () from /lib/tls/i686/cmov/libc.so.6 #2 0x080579d4 in exec_plugins (pptrs=0xfff30fd8) at plugin_hooks.c:254 #3 0x08054331 in pcap_cb (user=0xfff31188 "", pkthdr=0xfff31098, buf=0x80d4a50 "") at pmacctd.c:604 #4 0xf7d150d3 in pcap_read_linux (handle=0x80d47b0, max_packets=-1, callback=0x8054277 <pcap_cb>, user=0xfff31188 "") at pcap-linux.c:797 #5 0xf7d15f8b in pcap_loop (p=0x80d47b0, cnt=-1, callback=0x8054277 <pcap_cb>, user=0xfff31188 "") at pcap.c:107 #6 0x08054223 in main (argc=3, argv=0xfff314a4, envp=0xfff314b4) at pmacctd.c:564 (The error has been loged bevore I pressen ctrl+c) regards Johannes _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists