Hi Michael, On Tue, Jan 16, 2007 at 11:16:28AM +0100, Muenz, Michael wrote:
> Paolo, I switched over to v9, but now, only bytes and packets went into > my DB. This is my probe config: > > [ ... ] > > aggregate: src_port, dst_port, tag > > IMHO there should be at least src_port and dst_port get inserted. > Perhaps I must also aggregate "proto" in my probes config? That's correct. Making your probe to export IP protocol details will do the job. It may sound fairly non-intuitive but it certainly makes sense: without having precise protocol information, you can't be sure what has been written into src_port / dst_port fields. The most classic example for this being ICMP flows having the ICMP type info written down in the src_port field. BTW, please note tag value is not yet getting propagated from the probe to the collector. I already have such feature in mind as this is what's happening to class field. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
