Hi paolo,
Thanks for the quick reponse. According to your advice, now I can run pmacctd
successfully. But I still have two problems using pmacctd classifier as
following:
1) I start pmacctd with plugins set to mysql to classify traffic. I send
traffic stream to pmacct using tcpreplay to replay a pcap tracefile. But there
is no data generated in database. I think I have set interface correctly, and I
have tried to delete the interface line in config file, in both way there is
no data generated.
2)Also, I have problem with plugins set to print. The config file is as
following:
daemonize: true
interface: eth2
aggregate: flows, class
plugins: print
classifiers: /path/to/classifiers/
snaplen: 700
print_refresh_time: 900
pirnt_output: csv
print_output_file: ...
print_time_roundoff: ...
After I run pmacctd, I get the following msg;
Unkown key: print_output. Line 8 ignored
Unkown key: print_output_file. Line 9 ignored
Unkown key: print_time_roundoff. Line 10 ignored
3) An another question: What kind of the data is the data stored in mysql
database? Is it decoded packet data or decoded netflow data? The reason to ask
this question is that we want to mine the data in database.
Your help is very much appreciated!
Hellen
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists