this is the correct one, eth0 is physical interface..
the other thing is if ntop si running on the same box interface will it break the pmacct results ?
!
! pmacct: In + Out
!
debug: false
daemonize: true
interface: eth0
plugin_buffer_size: 2048
plugin_pipe_size: 2048000
plugins: memory
aggregate: src_port,dst_port
imt_path: /tmp/traf.pipe
pidfile: /var/run/pmacctd.pid
On 7/27/06, Karl Latiss <[EMAIL PROTECTED]> wrote:
On Wed, 2006-07-26 at 15:22 +0200, Gregory Machin wrote:
> Hi
>
> Im using the following perl script that is called via zabbix every 5
> seconds,
>
> #!/usr/bin/perl
> use strict;
> my $port = @ARGV[0];
> my $intf = @ARGV[1];
> my $result = `/usr/local/bin/pmacct -c src_port,dst_port -N "*,$port; $port,*" -
> print "$result";
>
> eg porttraf.pl 80 eth0
>
> but the values display do not make sense .. for example traffic on
> port 80 is next to nothing my traffic on port 53 is high , and does
> not corrilate usage .. ?
>
>
> with the following config...
>
> !
> ! pmacct: In + Out
> !
> debug: false
> daemonize: true
> interface: tun0
> plugin_buffer_size: 2048
> plugin_pipe_size: 2048000
> plugins: memory
> aggregate: src_port,dst_port
> imt_path: /tmp/traf.pipe
> pidfile: /var/run/pmacctd.pid
>
I had this same issue with a bridged interface. Changing to one of the
underlying eth interfaces (eth2 in my case) fixed the problem.
The only warning I get from pmacct now is that eth2 has no ipv4 address,
which I can ignore.
Karl.
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
--
Gregory Machin
[EMAIL PROTECTED]
www.linuxpro.co.za
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
