So I worked a little with pmacct an had a few results.
here is the config file I wrote.
debug: false
daemonize: false
nfacctd_port: 9999
nfacctd_allow_file: /home/cedric/pmacct-0.10.1/maconfig/routeurs.lst
ports_file: /home/cedric/pmacct-0.10.1/maconfig/ports.lst
plugin_buffer_size: 2048
plugin_pipe_size: 2048000
!networks_file: /home/cedric/pmacct-0.10.1/maconfig/reseaux.lst
plugins: memory[in], memory[out]
aggregate[in]: src_host,dst_host
aggregate[out]: src_host,dst_host
aggregate_filter[in]: dst net x.x.0.0/16
aggregate_filter[out]: src net x.x.0.0/16
imt_path[in]: /tmp/in.pipe
imt_path[out]: /tmp/out.pipe
daemonize: false
nfacctd_port: 9999
nfacctd_allow_file: /home/cedric/pmacct-0.10.1/maconfig/routeurs.lst
ports_file: /home/cedric/pmacct-0.10.1/maconfig/ports.lst
plugin_buffer_size: 2048
plugin_pipe_size: 2048000
!networks_file: /home/cedric/pmacct-0.10.1/maconfig/reseaux.lst
plugins: memory[in], memory[out]
aggregate[in]: src_host,dst_host
aggregate[out]: src_host,dst_host
aggregate_filter[in]: dst net x.x.0.0/16
aggregate_filter[out]: src net x.x.0.0/16
imt_path[in]: /tmp/in.pipe
imt_path[out]: /tmp/out.pipe
I use it with this command :
nfacctd -f nfacct.conf
It works fine but a few sec after running it, these messages appears :
WARN ( in/memory ): Unable to allocate more memory pools, clear stats manually!
WARN ( out/memory ): Unable to allocate more memory pools, clear stats manually!
WARN ( out/memory ): Unable to allocate more memory pools, clear stats manually!
using this command : pmacct -s -p /tmp/out.pipe , I can see that nfacctd collects more and more data in spite of this error.
SRC_IP
DST_IP
PACKETS BYTES
x.x.x.x 66.249.85.104 84 16970
x.x.x.x 67.43.10.51 23 2166
x.x.x.x 193.62.157.66 8 596
x.x.x.x 66.249.85.104 84 16970
x.x.x.x 67.43.10.51 23 2166
x.x.x.x 193.62.157.66 8 596
Entries count increase and pass 32900.
So I have datas (yeh!) :) . I would like now create a graph showing the incoming and outgoing trafic of my network.
I first tried to wiew with pmacct the network use.
pmacct -N x.x.0.0 -c src_net -p /tmp/out.pipe gives me "0".
But it works fine for a computer :
pmacct -N x.x.131.29 -c dst_host -p /tmp/in.pipe returns 944470 bytes
So is there an easy way to see stats about my network (and subnetworks).
lisening your advices, I installed cacti (not so easy) and created a graph using pedro's method. It seams to work fine. Thanks pedro :)
My problem is now that i need informations about many sub-networks and machines (dns, dhcp ...). Is there a way to script graphs creation (from a conf file or oter) ?
Thanks
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
