Just trying to setup nfacctd to aggregate our traffic on a per host basis. To import into our billing application.
Nfacct.conf debug: true ! daemonize: false nfacctd_time_new: true plugins: mysql aggregate: sum_host sql_db: pmacct sql_table: acct sql_table_version: 1 sql_passwd: ****** sql_user: ****** sql_host: 10.0.8.36 sql_refresh_time: 90 ! sql_optimize_clauses: true sql_history: 10m sql_history_roundoff: mh nfacctd_ip: 10.0.8.40 nfacctd_port: 9996 !logfile: /var/log/nfacctd.log ! sql_preprocess: qnum=1000, minp=5 networks_file: /etc/nfacctd.networks ! ports_file: ./ports.example /etc/nfacctd.networks 192.168.88.0/21 (Not Real Networks) 192.168.40.0/22 Debug Output: [root@pmacct sbin]# nfacctd -f /etc/nfacctd.conf INFO ( default/mysql ): 110592 bytes are available to address shared memory segment; buffer size is 168 bytes. INFO ( default/mysql ): Trying to allocate a shared memory segment of 4644864 bytes. DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG ( /etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 99991 entries. DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG ( /etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 99991 entries. INFO ( default/core ): waiting for NetFlow data on 10.0.8.40:9996 ( default/mysql ) *** Purging queries queue *** ( default/mysql ) *** Purging cache - START *** ( default/mysql ) *** Purging cache - END (QN: 0, ET: 0) *** OK: Exiting ... However, when this writes to MySQL it includes all hosts from all networks. The documentation seems straight forward, but it is not working for me. I have also tried limiting to a single /24 network, but still get all hosts. What am I doing wrong? Thanks in Advance; Terry
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
