Hi, On Mon, Oct 15, 2012 at 02:42:34PM +0800, cyl123 wrote:
> 1) I am intend to using mysql to store the classified data, and I have create > the configure file according to OfficalExamples wik as following: > > [ .. ] > > But after I run "pmacctd -f configure-file", I get the following information: > WARN ...: Unkown plugin type:mysql. Ignoring. If you successfully compiled the package with support for MySQL you should definitely not be seeing this message. Make sure you do not have multiple executables of pmacctd and that you are calling the correct one, ie. do a 'which pmacctd'. > 2) After I set plugins to "print" and run pmacct, I get the following > information: > WARN Deamonizing. Hmm, bye bye ... > > The question here is: Is there anything wrong if I get the above msg? And, if > I set plugins to "print" to print the classified data, where can I see the > classified data? If you do not point output to a file (print_output_file) then yes, you have a problem - it will show data on stdout but the process is daemonized and you will not get to see anything. See at this propo chapter XV of the QUICKSTART doc (enclosed in the standard pmacct distribution tarball). > 3) What's the format of the classified data? According to the database table > to store the classifed data, I guess it's Netflow v5 format. Or the traffic > classified is still generated as packet format? And, is there any other > format that I can get? For example, Netflow v7 or v9 data? It's text. Adding 'print_output: csv' to print_output_file makes it CSV. This should also answer to your point #4. So you should not expect pmacct to retain the original binary format and somehow label the packet for you. If this is what you are looking for, you are on the wrong track - pmacct can't help you. > 5) The documents pmacct provided say pmacct support Netflow v9 data, then > which database table is used to store the v9 data? Yes. pmacct relies on the concept of traffic primitives for aggregation purposes (see 'aggregate' entry in CONFIG-KEYS document for a full list of supported primitivrs) - meaning you cannot store, say, NetFlow v9 packets into the backend as such. Data is read from a protocol, say, NetFlow v9, gets abstracted and then written to the backend. Cheers, Paolo _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
