Thanks for your help Paolo, Using your suggested config i'm begining to get out put that would work for me (see below).
I am however not seeing the NBAR application ID being poputated in the class field is, I have double checked the incoming netflow data with wireshark to make sure that the application ID is actually being exported and it all looks OK is there some extra configuration i need to perform to achive this? Many thanks Olaf # pmacct -s CLASS SRC_IP PACKETS BYTES unknown 10.1.0.20 4 303 unknown 10.1.0.7 2 473 unknown 0.0.0.0 52140 36474168 unknown 10.1.0.3 40341 35254306 unknown 10.1.0.23 3 234
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
