Hi Andras, On Fri, Sep 16, 2011 at 02:02:49PM +0200, Andras Horvai wrote:
> nfacctd.conf: > > daemonize: true > plugins: mysql > aggregate: src_host,dst_host,src_port,dst_port,proto > nfacctd_port: 2055 > sql_refresh_time: 120 > sql_history: 1M > sql_table_version: 5 > sql_table: acct_v5_%Y_%m > sql_table_schema: /etc/nfacctd.schema > sql_db: pmacct > sql_user: pmacct > sql_passwd: xxxxxxxxxxxx > sql_num_protos: true > I need two things: > a. The ability to create statistics based on source_ip or destination_ip. I guess it's not just your users speaking among themselves - but rather also to the outside world. Are you interested to capture such off-net information? In my experience the answer is typically no. If this is the case with you aswell then i advice to read the following email (and the whole thread): http://www.mail-archive.com/[email protected]/msg01823.html Even if based on sfacctd thoughts captured in there apply to nfacctd and NetFlow no problems. > b. The ability to create summarized statistics per vlan or subnetwork. Define subnetwork - do you assign subnets to customers and are interested in how much traffic these generate, ie. conversely you don't care about how much specific IP addresses into such subnets generate? Meanwhile, i see you miss the 'vlan' keyword on the 'aggregate' directive in your configuration. I guess the comments above should already answer your questions, to start with. Does the 4506 also route IP? Does it have BGP peerings - and if yes how much of the routing table is advertised to it? Answer to these questions can help afterwards with any issues you might encounter on the 'subnetwork' part. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
