Re: [pmacct-discussion] Multiples nfacctd deamons writing to same Kafka topic

2020-04-13 Thread Paolo Lucente
Hi Emanuel, I think you are looking for (i admit, non-intuitive) 'peer_src_ip' primitive: $ nfacctd -a | grep peer_src_ip peer_src_ip : IP address or identificator of telemetry exporting device Without the grep you can see all supported primitives by the nfacctd release

Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-13 Thread Paolo Lucente
Hi, Let me confirm that collecting the ICMP type is partially supported; the native dst_port primitive is locked to UDP and TCP only - making this not suitable for NetFlow v5 kind of scenarios; but if using NetFlow v9 and/or IPFIX you could define your own custom primitive via the

Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-13 Thread fireballiso
Hi Paolo, Sorry, I should have said I was replacing the netflow *generators*, not collectors. My mistake! Yes, I posted the config that generates the netflow 9 flows, since I hoped to see if it was missing something for including

Re: [pmacct-discussion] Multiples nfacctd deamons writing to same Kafka topic

2020-04-13 Thread Emanuel dos Reis Rodrigues
Thank you for your help. Appreciate it ! See, I did use it for testing after I sent this email. However, the ip showed there was the IP from my nfacctd machine, the collector itself. Not the exporter. peer_src_ip : IP address or identificator of telemetry exporting device