On Thu, 23 Feb 2006, Paolo Lucente wrote:
Hey Prakash,
On Thu, Feb 23, 2006 at 01:50:29PM -0700, Prakash RudraRaju wrote:
Thanks a bunch. I am now getting records filled in with src and dst IP
addresses... even though there are many records with both fields empty. I
will go through CONFIG_KEYS and play with options.
Maybe some subnet has been leaved out (just an idea, some private service
network like 192.168) from the networks map.
I also want to get rid of mac_src and mac_dst fields in the table and want
to add as_src and as_dst fields. just creatign a table deleting some
fields is not working.
Remember that MAC addresses are not supported by NetFlow v5, so enabling
them in the 'aggregate' line will return just empty fields. The chance is
to upgrade to NetFlow v9.
I am getting netflow data from a router.. so I don't think I will get MAC
addresses even if I upgrade. I have modified the table from example.
sql_table_schema:
create table acct_%m_%d (
^^^^^^
ip_src CHAR(15) NOT NULL,
ip_dst CHAR(15) NOT NULL,
src_port INT(2) UNSIGNED NOT NULL,
dst_port INT(2) UNSIGNED NOT NULL,
ip_proto CHAR(6) NOT NULL,
packets INT UNSIGNED NOT NULL,
bytes BIGINT UNSIGNED NOT NULL,
stamp_inserted DATETIME NOT NULL,
stamp_updated DATETIME,
PRIMARY KEY (ip_src, ip_dst, src_port, dst_port, ip_proto,
stamp_inserted)
)
sql_table: acct_%m_%d
but I have manually created a table(acct) in the database.
I am planning to create a dynamic table for each day.. but I am getting
the following error
ALERT ( default/mysql ): PRIMARY 'mysql' backend failed.
Thanks,
Prakash.
Cheers,
Paolo
_______________________________________________
pmacct-discussion mailing list
[email protected]
http://muffin.area.ba.cnr.it/mailman/listinfo/pmacct-discussion
--
Prakash Rudraraju Systems Programmer
520 626-1225 (W) CCIT - NTS
520 307-0949 (C) University of Arizona
I would love to change the world, but they won't give me the source code
-------------------------------------
Printed using 100% recycled electrons
