Hi all, I am another new user of pmacct and I'd need a helping eye to point out what I am missing in my present pmacct-configuration:
A router exports Netflow packets received on its LAN and its WAN interface, as I want to account for all traffic from/to a given subnet. I've validated that the router exports something by using another tool (http://ehnt.sourceforge.net/), which outputs for example <snip> flow #28 received from router A.B.C.D, IP protocol 17 input ifIndex: 6 source IP address: X.X.X.X source port: 32771 source AS: <unknown>(0) output ifIndex: 2 dest IP address: Y.Y.Y.Y dest port: 161 dest AS: <unknown>(0) bytes in flow: 98 packets in flow: 1 </snip> Either source or destination IP are within one of the subnets I defined. Basically I then followed the pmacct/Cacti howto from Pedro Sanchez, and use memory for now, no database. I've defined all subnets I am interested in in a network.conf file, with entries of the form A.B.C.D/24 My pmacctd.conf looks like this interface: eth0 debug: false daemonize: false plugins: memory[in],memory[out] networks_file: /etc/conf.d/pmacct/networks.def aggregate[in]: dst_net aggregate[out]: src_net imt_path[in]: /tmp/in.pipe imt_path[out]: /tmp/out.pipe imt_buckets: 65537 imt_mem_pools_size: 65536 I start the daemon with # pmacctd -f pmacctd.conf_simple OK ( in/memory ): waiting for data on: '/tmp/in.pipe' OK ( out/memory ): waiting for data on: '/tmp/out.pipe' OK ( default/core ): link type is: 1 and everything looks ok so far. When I query the plugin to see what it is collecting, all I get is # pmacct -s -p /tmp/out.pipe SRC_IP PACKETS BYTES 0.0.0.0 46 68632 For a total of: 1 entries Obviously packets are received, but shouldn't there be more information. split up per subnet? Or do I have to use pmacct with other options to see more information? Thanks for any hints (I am sure it is a fundamental thing I am missing, but I simply can't see it). Melitta _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
