Hi Frédéric, that is an interesting question. There is no easy way that I know to do what you want as far as I know. Obviously, this advocates the need for a "plugin architecture" inside pmacct, which I strongly support.
Also, let me imagine something: - have a special BGP daemon that would be plugged into your geoip database and that could encode geographical information into BGP communities - then the pmacct BGP daemon could read these communities and aggregate with that information This is probably not feasible yet. Jerome. On Tue, Nov 20, 2012 at 8:30 PM, Frédéric GABUT-DELORAINE < [email protected]> wrote: > Hello everybody, > > First of all, pmacct is a great tool, thanks for the amazing work :-) > > We use it to collect netflow and sflow from our routers and we have a lot > of mysql instances to aggregate into different ways our flows. We aggregate > per AS, per flow, per subnet, per interface, per router… And we would like > to be able to aggregate per geographical information (country, continent, > etc.). I have not seen anywhere a way to do that in pmacct so : > > 1. Is there an easy way I missed ? :-) > 2. Would you advise to use per subnet aggregation and to have a lookup in > our geoip base ? (we loose pmacct flexibility and we have really a lot of > sql entries to update :-) ) > 3. Would you advise to develop the same mecanism pmacct has with the bgp > daemon ? Except of instead of getting the BGP information from the route > our "plugin" would return all the geographical information ? > > What is the best way to implement the geographical aggregation according > to you ? > > Thanks in advance, > > Best regards, > > -- > Frédéric Gabut-Deloraine | Network Architect > Dailymotion | 140 boulevard Malesherbes, 75017 Paris, France > > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
