Hi Evgeniy, You are doing all good except aggregate_filter need to be bound to a specific plugin, can't be global. The daemon is surely spitting an error out about that. Please rewrite the two following lines and try again:
plugins: print[bla] aggregate_filter[bla]: net not 178.120.0.0/13 It should be that the daemon is logging errors somewhere, you might want to add a 'logfile' directive for catching errors, etc. Cheers, Paolo On Tue, Sep 18, 2012 at 04:38:47PM +0300, Evgeniy Kozhuhovskiy wrote: > Hello. > > We're using some proprietary software (dsmgr by ispsystems), that uses > nfacctd as it's part to calculate traffic usage (by netflow/sflow). > > By default dsmgr generate such nfacctd config: > daemonize: true > plugins: print > aggregate: src_host,dst_host > nfacctd_port: 9995 > print_refresh_time: 900 > print_output: csv > print_output_file: /var/flowstat/%Y:%m:%d-%H:%M > > and csv file is processed via proprietary utility runned from cron. > > We need to exclude some networks (in fact, our local IX) from billing. > I've added this line: > aggregate_filter: net not 178.120.0.0/13 > to config. (178.120.0.0/13 is one of networks that we dont need to bill) > > But traffic from this network still goes to csv file: > > debian:/var/flowstat# cat 2012\:09\:18-16\:23 | grep 178.120 | head -4 > 0,0,unknown,00:00:00:00:00:00,00:00:00:00:00:00,0,0,0,0,0,0,,0,0,0,0,,,0,0,0:0:0,178.120.88.201,178.172.181.110,0,0,0,0,0,ip,0,1072,0,75723 > 0,0,unknown,00:00:00:00:00:00,00:00:00:00:00:00,0,0,0,0,0,0,,0,0,0,0,,,0,0,0:0:0,178.172.181.128,178.120.217.213,0,0,0,0,0,ip,0,22085,0,16089127 > 0,0,unknown,00:00:00:00:00:00,00:00:00:00:00:00,0,0,0,0,0,0,,0,0,0,0,,,0,0,0:0:0,178.172.181.95,178.120.60.190,0,0,0,0,0,ip,0,1695,0,159303 > 0,0,unknown,00:00:00:00:00:00,00:00:00:00:00:00,0,0,0,0,0,0,,0,0,0,0,,,0,0,0:0:0,178.120.112.234,178.172.181.64,0,0,0,0,0,ip,0,1326,0,120156 > > Where i'm wrong? > > -- > With best regards, Evgeniy Kozhuhovskiy > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
