Re: [pmacct-discussion] nfacctd and NBAR

2016-12-14 Thread Yann Belin
Thanks Paolo, The class field was showing up as "unknown" for me, but by using aggregate_primitive I was indeed able to extract the field I need (#95). Cool stuff! Cheers, Yann On Wed, Dec 14, 2016 at 2:38 AM, Paolo Lucente wrote: > > Hi Yann, > > You should use the 'class' aggregation primiti

Re: [pmacct-discussion] nfacctd and NBAR

2016-12-13 Thread Paolo Lucente
Hi Yann, You should use the 'class' aggregation primitive for that - or are you already doing so ant it's not working? To your other question: yes, you can extend, within some limits, the set of natively supported primitives with custom ones: please look at the aggregate_primitives framework (in

[pmacct-discussion] nfacctd and NBAR

2016-12-12 Thread Yann Belin
Hello, I am trying to use the NBAR "application ID" field (#95) in nfacctd aggregation but I cannot figure out how to do that. My situation is very similar to what Olaf encountered a couple of years ago (see link below) but unfortunately that thread did not reach a conclusion (at least on its publ