Hi Renato, I would be interested whether you already have any scalability figures for your approach. Regardless, I think it would be good idea to include your patch in mainstream code so to offer an alternative to who does not prefer to effectively run two BGP daemon instances on the same box when acting as a router/netflow probe.
If you like the idea, please send the patch privately to me so that i can review and merge it with the current code in the CVS. Cheers, Paolo On Wed, Jul 18, 2012 at 02:35:20PM -0300, Renato Westphal wrote: > Hi Paolo, > > Thanks, that's exactly what I was looking for ;) > > I added some small extensions to pmacctd to avoid the use of the > skinny BGP daemon thread. I that know using this internal daemon has > advantages, but the memory requirements for this are not acceptable > for my equipment. I'm using AF_UNIX sockets to fetch BGP ASN > information directly from Quagga' bgpd daemon (a better solution would > be pushing this information into FIB, like Cisco does, but that would > make things harder to implement). If anyone is interested in these > patches let me know. > > Thanks again, > Renato > > 2012/7/13 Paolo Lucente <[email protected]>: > > Hi Renato, > > > > What you are looking for should be 'nfprobe_peer_as: true'. > > > > Cheers, > > Paolo > > > > On Mon, Jul 09, 2012 at 10:40:41AM -0300, Renato Westphal wrote: > >> Hi all, > >> > >> I'm not managing to get pmacctd (v0.14.0) to send BGP peer-AS > >> information via Netflow-v9. Here is the config I'm using: > >> > >> ------------------- > >> debug: true > >> daemonize: false > >> interface: tap0 > >> ! > >> aggregate[out]: src_mac, dst_mac, src_host, dst_host, src_port, > >> dst_port, proto, peer_dst_as > >> aggregate_filter[out]: icmp and ether src f6:be:9b:cc:8b:e6 > >> aggregate[in]: src_mac, dst_mac, src_host, dst_host, src_port, > >> dst_port, proto, peer_src_as > >> aggregate_filter[in]: icmp and ether src !(f6:be:9b:cc:8b:e6) > >> ! > >> plugins: nfprobe[out],nfprobe[in] > >> ! > >> nfprobe_direction[in]:in > >> nfprobe_direction[out]:out > >> ! > >> nfprobe_receiver: 127.0.0.1:9996 > >> nfprobe_version: 9 > >> nfprobe_timeouts: maxlife=10:general=10:icmp=10:expint=10 > >> ! > >> pmacctd_as: bgp > >> bgp_daemon: true > >> bgp_daemon_ip: 127.0.0.1 > >> bgp_peer_src_as_type: bgp > >> bgp_agent_map: /home/renato/netflow/conf/agent_to_peer.map > >> bgp_daemon_port: 17917 > >> ------------------- > >> > >> It works if I use src_as/dst_as instead of peer_src_as/peer_dst_as, > >> but now I'm more interested in BGP peer AS information rather than BGP > >> origin AS information. I don't know what I'm doing wrong.. any ideas? > >> > >> Regards, > >> -- > >> Renato Westphal > >> > >> _______________________________________________ > >> pmacct-discussion mailing list > >> http://www.pmacct.net/#mailinglists > > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > > -- > Renato Westphal _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
