Mike Lykov
Wed, 09 Dec 2009 02:53:44 -0800
> Mike kindly offered access to his box. The classification engine was found > to work just fine - issue being related to some catch-all patterns included > with the L7-filter classifiers package (namely unknown.pat and unset.pat). > By removing them, classification was working much better. Indeed, I don't > enter the discussion of the precision of the 3rd party regex classifiers.
yes, when I remove half of patterns (mostly p2p or overmatching, with unknown & unset of course) - it works! original (default from tarball) http pattern work, other patterns also works (not all, but reasonably sufficient). among often used protocols, only jabber classified as unknown now ;) Big thanks for Paolo for spend his time and good software ;) -- Mike _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists