Hi all, I'm not managing to get pmacctd (v0.14.0) to send BGP peer-AS information via Netflow-v9. Here is the config I'm using:
------------------- debug: true daemonize: false interface: tap0 ! aggregate[out]: src_mac, dst_mac, src_host, dst_host, src_port, dst_port, proto, peer_dst_as aggregate_filter[out]: icmp and ether src f6:be:9b:cc:8b:e6 aggregate[in]: src_mac, dst_mac, src_host, dst_host, src_port, dst_port, proto, peer_src_as aggregate_filter[in]: icmp and ether src !(f6:be:9b:cc:8b:e6) ! plugins: nfprobe[out],nfprobe[in] ! nfprobe_direction[in]:in nfprobe_direction[out]:out ! nfprobe_receiver: 127.0.0.1:9996 nfprobe_version: 9 nfprobe_timeouts: maxlife=10:general=10:icmp=10:expint=10 ! pmacctd_as: bgp bgp_daemon: true bgp_daemon_ip: 127.0.0.1 bgp_peer_src_as_type: bgp bgp_agent_map: /home/renato/netflow/conf/agent_to_peer.map bgp_daemon_port: 17917 ------------------- It works if I use src_as/dst_as instead of peer_src_as/peer_dst_as, but now I'm more interested in BGP peer AS information rather than BGP origin AS information. I don't know what I'm doing wrong.. any ideas? Regards, -- Renato Westphal _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
