Hi Renato, What you are looking for should be 'nfprobe_peer_as: true'.
Cheers, Paolo On Mon, Jul 09, 2012 at 10:40:41AM -0300, Renato Westphal wrote: > Hi all, > > I'm not managing to get pmacctd (v0.14.0) to send BGP peer-AS > information via Netflow-v9. Here is the config I'm using: > > ------------------- > debug: true > daemonize: false > interface: tap0 > ! > aggregate[out]: src_mac, dst_mac, src_host, dst_host, src_port, > dst_port, proto, peer_dst_as > aggregate_filter[out]: icmp and ether src f6:be:9b:cc:8b:e6 > aggregate[in]: src_mac, dst_mac, src_host, dst_host, src_port, > dst_port, proto, peer_src_as > aggregate_filter[in]: icmp and ether src !(f6:be:9b:cc:8b:e6) > ! > plugins: nfprobe[out],nfprobe[in] > ! > nfprobe_direction[in]:in > nfprobe_direction[out]:out > ! > nfprobe_receiver: 127.0.0.1:9996 > nfprobe_version: 9 > nfprobe_timeouts: maxlife=10:general=10:icmp=10:expint=10 > ! > pmacctd_as: bgp > bgp_daemon: true > bgp_daemon_ip: 127.0.0.1 > bgp_peer_src_as_type: bgp > bgp_agent_map: /home/renato/netflow/conf/agent_to_peer.map > bgp_daemon_port: 17917 > ------------------- > > It works if I use src_as/dst_as instead of peer_src_as/peer_dst_as, > but now I'm more interested in BGP peer AS information rather than BGP > origin AS information. I don't know what I'm doing wrong.. any ideas? > > Regards, > -- > Renato Westphal > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
