On Wed 19 Apr 2006 16:52, Paolo Lucente wrote: > Hi Peter, > i was wondering whether it's something related with VLANs and the > aggregate_filter directives: traffic seen on tunnel0 is tagged > (and doesn't match the filter -- pcap filter need to match the > vlan layer, ie. "vlan and src net ...") while the one on the eth0 > isn't (thus, matching it). Do you see this possible ? And what > does it happen if you remove both aggregate_filter directives on > the x86_64 box ?
Hi Paolo It does appear to be related to filters not working correctly when applied to a tunnel interface. The tunnels we use are GRE and pmacctd correctly summarises the data and writes it to Postgres if no filters are used, but no data makes it to the database if a filter is applied which should generate a subset of the same data. We are not using VLANs at present. The traffic I am trying to account for comes into an ethernet interface encapsulated in GRE, gets NATed and leaves again via the same ethernet interface, so I really need to account for the traffic before it gets NATed on the tunnel interface otherwise I can't see the source hosts. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
pgpWeBuzA8QUZ.pgp
Description: PGP signature
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
