Hi Guys I am running the following config:
pre_tag_map: /etc/pmacct/pretag.map aggregate[dbapps]: tag,sum_host pre_tag_filter[dbapps]: -0 aggregate_filter[dbapps]: src net 10.0.0.0/8 plugins: pgsql[dbapps] Basically I dont 't want any IP in the database that isn't from the 10.0.0.0/8 range. This config works if I use "src_host" instead of sum_host (with the downside that I only get one direction of the data). However, when I use "sum_host" i get 2 copies of a flow, one for the source ip from the 10.0.0.0/8 range (which I want) and one for the internet IP address which I do not: agent_id | ip_src | packets | bytes | stamp_inserted 4 | 10.11.11.163 | 169 | 22050 | 2006-11-17 00:00:00 4 | 212.12.148.98 | 169 | 22050 | 2006-11-17 00:00:00 4 | 10.11.9.183 | 2 | 139 | 2006-11-17 00:00:00 4 | 207.46.108.63 | 2 | 139 | 2006-11-17 00:00:00 Now I could always delete these extra records later, but there really should be an easy way to suppress them as it is causing my database to work exactly twice as hard as it needs too. If I missed an existing way to do this, I appologise... Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
