Chris Wilson wrote:
> Have you tried using "any" as the interface name to capture all flows?
Yes, but...
-------------------------------------------------------------------
r...@mixer# pmacctd -i any -c
src_mac,dst_mac,src_host,dst_host,src_port,dst_port
WARN ( cmdline ): No plugin has been activated; defaulting to in-memory
table.
OK ( default/memory ): waiting for data on: '/tmp/collect.pipe'
OK ( default/core ): link type is: 113
ERROR ( default/core ): MAC aggregation not available for link type: 113
-------------------------------------------------------------------
src_mac and dst_mac are important data in my log.
However this machine is nat-firewall (loc <-> fw <-> net)
My interest is only for traffic through interfaces loc <-> fw,
before nat process.
Cheers,
Mariano
---
($nn='tux300181')=~s/(.)/$b{$a{$1}++}--;$1/eg;@b=map{-$_}values(%b);
print $nn,'.'x3,' ',$b[1],' <> chars, ',$b[0]+$b[1]," total chars\t";
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists