Re: [pmacct-discussion] Traffic count only for certain networks

[Slava Dubrovskiy]

10.09.2009 14:24, Slava Dubrovskiy пишет:
> Hi.
>
> I use nfacct in such configuration:
>
> debug: true
> daemonize: true
> pidfile: /var/run/nfacctd.pid
> syslog: daemon
> nfacctd_port: 8818
> plugin_buffer_size: 10240
> plugin_pipe_size: 1024000
> aggregate[min]: src_host, dst_host, src_port, dst_port, proto
> aggregate[hourly]: src_host, dst_host
>   
--skip--
> It is necessary to count the traffic with filtering on certain networks.
> For this purpose I need write ALL this networks to aggregate_filter.
> But this list of networks is big and it periodically varies.
> I cannot specify in aggregate_filter a file with the list of networks.
>
> How it can be made?
>   
make filter for tcpdump

# cat /etc/pmacct/tcpdump-filter.txt
net (
217.175.4.0/22 ||
217.73.128.0/20 ||
217.76.192.0/20 ||
217.77.208.0/20
)

and write
aggregate_filter[hourly_ua]: -F /etc/pmacct/tcpdump-filter.txt

but it's not working too :(

-- 
WBR,
Dubrovskiy Vyacheslav

smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists