Hi Gregorics, the issue is aggregation of MAC addresses is currently supported only on plain Ethernet interfaces (not PPPoE for example). Would you mind sending me privately a brief capture in libpcap format of a few packets (full payload)? It might be something that could be sorted easily ...
The command below would capture the packets: tcpdump -i ppp0 -s 1500 -w <file> Cheers, Paolo On Wed, Jan 23, 2008 at 04:06:09PM +0100, Gregorics Tam?s wrote: > Hi, > > I'm trying to install pmaccd with nfprobe plugin to export data into my > collector, but i have some trouble when i start it: > > pmacctd -f ./probe_netflow.conf > INFO ( default/nfprobe ): 109568 bytes are available to address shared > memory segment; buffer size is 120 bytes. > INFO ( default/nfprobe ): Trying to allocate a shared memory segment of > 3287040 bytes. > INFO ( default/nfprobe ): NetFlow probe plugin is based on softflowd > 0.9.7 software, Copyright 2002 Damien Miller <[EMAIL PROTECTED]> All > rights reserved. > INFO ( default/nfprobe ): TCP timeout: 3600s > INFO ( default/nfprobe ): TCP post-RST timeout: 120s > INFO ( default/nfprobe ): TCP post-FIN timeout: 300s > INFO ( default/nfprobe ): UDP timeout: 300s > INFO ( default/nfprobe ): ICMP timeout: 300s > INFO ( default/nfprobe ): General timeout: 3600s > INFO ( default/nfprobe ): Maximum lifetime: 604800s > INFO ( default/nfprobe ): Expiry interval: 60s > INFO ( default/nfprobe ): Exporting flows to [10.10.2.5]:9996 > OK ( default/core ): link type is: 113 > ERROR ( default/core ): MAC aggregation not available for link type: 113 > > > and my config is: > > debug: true > interface: ppp0 > aggregate: src_host, dst_host, src_port, dst_port, proto, tos > plugins: nfprobe > nfprobe_receiver: 10.10.2.5:9996 > nfprobe_version: 9 > > -- > Tisztelettel: > > Gregorics Tam?s > > Szerv?zmunkat?rs > M&M Computer Kft. > 7623 P?cs, M?rt?rok u.42. > Tel.: +36-72/516-517 > Fax: +36-72/516-522 > Mobil: +36-30-747-6553 > e-mail: [EMAIL PROTECTED] > > http://www.mmcomputer.hu > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
