Hi Martin, Actually you don't need to resort to pre_tag_map to distinguish stats from each exporter: you have just to add to your aggregation method the peer_src_ip primitive.
Cheers, Paolo On Tue, Feb 12, 2013 at 04:38:52PM +0100, Martin Volf wrote: > Hello, > > I'd like to use nfacctd 0.14.2 to collect NetFlow v9 statistics from > several Mikrotik routers into one place (linux server). > It almost works, only I'm not able to distinguish which statistics are > from which router. > > The nfacctd is started this way: nfacctd -f /etc/pmacctd/nfacctd.conf > and the .conf file is: > > nfacctd_port: 7654 > daemonize: true > logfile: /var/log/nfacctd.log > plugin_pipe_size: 67108864 > plugin_buffer_size: 65536 > pre_tag_map: /etc/pmacctd/pretag.map > aggregate: tag, src_host, dst_host, src_port, dst_port, proto > plugins: print > print_output_file: /var/log/nfacctd/%Y-%m-%d_%H:%M.csv > print_refresh_time: 300 > print_output: csv > print_time_roundoff: m > print_cache_entries: 65521 > print_num_protos: true > > and the pretag.map is: > > id=1 ip=10.1.1.1 > id=2 ip=10.2.2.2 > > where 10.1.1.1 and 10.2.2.2 are IP addresses of the Mikrotik routers > (only two for now, but more to come). > > The (so far only) problem is that the TAG column is always 0 (so is > the FLOWS column, but I don't care). > > Am I doing something wrong? > > -- > Martin Volf > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
