Re: [pmacct-discussion] Inconsistent Data

[Cameron Murray]

That is exactly what I had done!

On 8 Nov 2016 10:17 pm, "Paolo Lucente"  wrote:

>
> Hi Cameron,
>
> Is it possible you restarted pmacct using pmacctd instead of nfacctd?
> Your description of what is happening would match 100% with that.
>
> Cheers,
> Paolo
>
> On Tue, Nov 08, 2016 at 01:53:59PM +1000, Cameron Murray wrote:
> > Further to this it does appear that it is only recordings data flows for
> > itself and not the rest of the network.
> >
> > On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray <
> cameron.mur...@gmail.com>
> > wrote:
> >
> > > Guys & Gals,
> > >
> > > I have been running PMACCT since September last year v1.5.2 and today I
> > > have upgraded to v1.6.1.
> > >
> > > I am pushing the data collected to two separate MySQL tables; acct_in &
> > > acct_out
> > >
> > > Based on our traffic flow the data being entered into the database does
> > > not appear to be correct. I've been watching the database not for an
> hour
> > > and there is only a dozen entries. In previous versions there would be
> > > thousands of our IP's showing now.
> > >
> > > Our Config:
> > >
> > > daemonize: true
> > >
> > > nfacctd_port: 9996
> > >
> > > nfacctd_time_new: true
> > >
> > >
> > > plugins: mysql[inbound], mysql[outbound]
> > >
> > >
> > > sql_db: db_name
> > >
> > > sql_host: localhost
> > >
> > > sql_user: db_user
> > >
> > > sql_passwd: db_password
> > >
> > >
> > > sql_refresh_time: 15
> > >
> > > sql_table_version: 8
> > >
> > >
> > > aggregate[inbound]: dst_host
> > >
> > > aggregate[outbound]: src_host
> > >
> > > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or
> > > 103.x.x.0/24 or 103.x.x.0/23
> > >
> > > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or
> > > 103.x.x.0/24 or 103.x.x.0/23
> > >
> > >
> > > sql_table[inbound]: acct_in
> > >
> > > sql_table[outbound]: acct_out
> > >
> > >
> > > From what I can see, it looks like only data communicating with the
> server
> > > from the filtered subnets is being recorded to the DB where infact I
> only
> > > want data communicated in and out of our ranges to be written to allow
> us
> > > to monitor and bill customers data.
> > >
> > > This used to work, all the documents seem to outline that this is the
> > > correct way to only store data too and from our Subnets?
> > >
> > >
> > > Your assistance is appreciated!
> > >
> > > Regards
> > >
> > > Cameron
> > >
> > >
>
> > ___
> > pmacct-discussion mailing list
> > http://www.pmacct.net/#mailinglists
>
>
> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Re: [pmacct-discussion] Inconsistent Data

[Paolo Lucente]

Hi Cameron,

Is it possible you restarted pmacct using pmacctd instead of nfacctd?
Your description of what is happening would match 100% with that.

Cheers,
Paolo 

On Tue, Nov 08, 2016 at 01:53:59PM +1000, Cameron Murray wrote:
> Further to this it does appear that it is only recordings data flows for
> itself and not the rest of the network.
> 
> On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray 
> wrote:
> 
> > Guys & Gals,
> >
> > I have been running PMACCT since September last year v1.5.2 and today I
> > have upgraded to v1.6.1.
> >
> > I am pushing the data collected to two separate MySQL tables; acct_in &
> > acct_out
> >
> > Based on our traffic flow the data being entered into the database does
> > not appear to be correct. I've been watching the database not for an hour
> > and there is only a dozen entries. In previous versions there would be
> > thousands of our IP's showing now.
> >
> > Our Config:
> >
> > daemonize: true
> >
> > nfacctd_port: 9996
> >
> > nfacctd_time_new: true
> >
> >
> > plugins: mysql[inbound], mysql[outbound]
> >
> >
> > sql_db: db_name
> >
> > sql_host: localhost
> >
> > sql_user: db_user
> >
> > sql_passwd: db_password
> >
> >
> > sql_refresh_time: 15
> >
> > sql_table_version: 8
> >
> >
> > aggregate[inbound]: dst_host
> >
> > aggregate[outbound]: src_host
> >
> > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or
> > 103.x.x.0/24 or 103.x.x.0/23
> >
> > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or
> > 103.x.x.0/24 or 103.x.x.0/23
> >
> >
> > sql_table[inbound]: acct_in
> >
> > sql_table[outbound]: acct_out
> >
> >
> > From what I can see, it looks like only data communicating with the server
> > from the filtered subnets is being recorded to the DB where infact I only
> > want data communicated in and out of our ranges to be written to allow us
> > to monitor and bill customers data.
> >
> > This used to work, all the documents seem to outline that this is the
> > correct way to only store data too and from our Subnets?
> >
> >
> > Your assistance is appreciated!
> >
> > Regards
> >
> > Cameron
> >
> >

> ___
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists


___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

[pmacct-discussion] Inconsistent Data

[Cameron Murray]

Guys & Gals,

I have been running PMACCT since September last year v1.5.2 and today I
have upgraded to v1.6.1.

I am pushing the data collected to two separate MySQL tables; acct_in &
acct_out

Based on our traffic flow the data being entered into the database does not
appear to be correct. I've been watching the database not for an hour and
there is only a dozen entries. In previous versions there would be
thousands of our IP's showing now.

Our Config:

daemonize: true

nfacctd_port: 9996

nfacctd_time_new: true


plugins: mysql[inbound], mysql[outbound]


sql_db: db_name

sql_host: localhost

sql_user: db_user

sql_passwd: db_password


sql_refresh_time: 15

sql_table_version: 8


aggregate[inbound]: dst_host

aggregate[outbound]: src_host

aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or
103.x.x.0/24 or 103.x.x.0/23

aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or
103.x.x.0/24 or 103.x.x.0/23


sql_table[inbound]: acct_in

sql_table[outbound]: acct_out


>From what I can see, it looks like only data communicating with the server
from the filtered subnets is being recorded to the DB where infact I only
want data communicated in and out of our ranges to be written to allow us
to monitor and bill customers data.

This used to work, all the documents seem to outline that this is the
correct way to only store data too and from our Subnets?


Your assistance is appreciated!

Regards

Cameron
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists