Thank you, that was my problem.
Terry
-Original Message-
From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf
Of Paolo Lucente
Sent: Wednesday, December 04, 2013 5:53 PM
To: pmacct-discussion@pmacct.net
Subject: Re: [pmacct-discussion] nfacctd Networks Problem
Hi Terry,
What version of pmacct are you running? If a recent one, ie.
= 0.14.3, you should have 'networks_file_filter: true' in
your config in order to explicitely enable filtering (as is documented in the
CONFIG-KEYS file).
Cheers,
Paolo
On Thu, Dec 05, 2013 at 12:37:58AM +, Terry Duchcherer wrote:
Just trying to setup nfacctd to aggregate our traffic on a per host basis. To
import into our billing application.
Nfacct.conf
debug: true
!
daemonize: false
nfacctd_time_new: true
plugins: mysql
aggregate: sum_host
sql_db: pmacct
sql_table: acct
sql_table_version: 1
sql_passwd: **
sql_user: **
sql_host: 10.0.8.36
sql_refresh_time: 90
! sql_optimize_clauses: true
sql_history: 10m
sql_history_roundoff: mh
nfacctd_ip: 10.0.8.40
nfacctd_port: 9996
!logfile: /var/log/nfacctd.log
! sql_preprocess: qnum=1000, minp=5
networks_file: /etc/nfacctd.networks
! ports_file: ./ports.example
/etc/nfacctd.networks
192.168.88.0/21 (Not Real Networks)
192.168.40.0/22
Debug Output:
[root@pmacct sbin]# nfacctd -f /etc/nfacctd.conf INFO ( default/mysql
): 110592 bytes are available to address shared memory segment; buffer size
is 168 bytes.
INFO ( default/mysql ): Trying to allocate a shared memory segment of 4644864
bytes.
DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0
net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks
table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG (
/etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 1
entries.
DEBUG ( /etc/nfacctd.networks ): [networks table IPv4] nh: asn: 0
net: 192.168.40.0 mask: 22 DEBUG ( /etc/nfacctd.networks ): [networks
table IPv4] nh: asn: 0 net: 192.168.88.0 mask: 21 DEBUG (
/etc/nfacctd.networks ): IPv4 Networks Cache successfully created: 1
entries.
INFO ( default/core ): waiting for NetFlow data on 10.0.8.40:9996 (
default/mysql ) *** Purging queries queue *** ( default/mysql ) ***
Purging cache - START *** ( default/mysql ) *** Purging cache - END
(QN: 0, ET: 0) ***
OK: Exiting ...
However, when this writes to MySQL it includes all hosts from all networks.
The documentation seems straight forward, but it is not working for me.
I have also tried limiting to a single /24 network, but still get all hosts.
What am I doing wrong?
Thanks in Advance;
Terry
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
