Hi ho Paolo,

> Hmmm. Does your 'aggregate' directive include the 'proto' key ? 

Come to think of it - no. No wonder it didn't show up then. I'll take my 
slightly red face to the kitchen and make another espresso.

> BTW, what is
>DD-WRT rFlow ? Is it something based upon NetFlow ? 

Yes - it's a Linux implementation of Netflow, now a part of the DD-WRT 
alternate firmware for Linksys wireless routers and look-alikes - 
http://www.dd-wrt.com/. There is very little info on the implementation, but 
the source code is available for download(and I believe it is GPL, so anyone 
can put it onto their favorite Linux-based router). I've had it running at home 
for little over two weeks and so far it seems to work well.

Of course there is a big difference between these tiny routers and the big 
Ciscos, but for network control freaks or general home computer hobbyists, it 
is a nice scaled-down version that works well with ADSL/cable connections. I 
find the Linksys'es with this FW convenient for prototyping as well. Don't want 
to disrupt production systems and many people can't afford a big Cisco in a 
staging environment.

I also compiled pmacct for a small embedded platform - the ARM-based NSLU2 from 
Linksys - a tiny, fanless Linux-based computer that costs nothing (eh... 
~$100), is reasonably stable and with a USB memory key is just right for such 
applications as online network statistics (not pcap-based - there is not enough 
CPU power for that), honeypots and so on. Haven't gotten sqlite to work yet, 
but that is most probably not pmacct's fault (MySQL runs, but slowly and 
requires a hard drive). If pmacct lives up to expectations during testing, I 
hope to have a binary distribution ready soon (since it is a small device, 
applications are normally cross-compiled). No idea if there is interest in this 
outside of my apartment, but time will tell.

Thanks,

-- Inge

<<winmail.dat>>

Reply via email to