I reviewed the mail message about the issue of lacking BGP-related
information in the memory dump, and make following configuration for my
pmacctd:

>> pmacctd.conf
!
daemonize: true
imt_path[inbound]: /tmp/collect.pipe-eth0-in
imt_path[outbound]: /tmp/collect.pipe-eth0-out
pidfile: /var/run/pmacctd.pid
logfile: /var/log/pmacctd.log
interface: eth0
!
aggregate[inbound]: tag, tag2, src_host, dst_host, src_port, dst_port,
peer_src_as
aggregate[outbound]: tag, tag2, src_host, dst_host, src_port, dst_port,
peer_dst_as
aggregate_filter[inbound]: dst net 2001:db8:3::/48
aggregate_filter[outbound]: src net 2001:db8:3::/48
!
plugins: memory[inbound], memory[outbound], nfprobe[inbound],
nfprobe[outbound]
!
pmacctd_as: bgp
bgp_daemon: true
bgp_daemon_ip: 2001:db8:3:3::3
bgp_daemon_id: 172.17.0.2
bgp_agent_map: .../maps/agent_to_peer.map-eth0
!bgp_daemon_port: 179
!bgp_daemon_msglog: false
!
plugin_pipe_size: 2000000
plugin_buffer_size: 10000
imt_mem_pools_number: 0
!
bgp_table_dump_file: /tmp/bgp-$peer_src_ip.txt
bgp_table_dump_refresh_time: 300
!

>> maps/agent_to_peer.map-eth0
bgp_ip=2001:db8:3:3::1 ip=0.0.0.0/0

while the bgp router is at 2001:d8:3:3::1 and the pmacct is running on
2001:db8:3:3::3.

then i got the result as follows: why the outbound part has the peer_dst_as
correctly while the inbound part shows only AS 0 for the peer_src_as field?

----
~/pmacct_work$ pmacct -s -p /tmp/collect.pipe-eth0-in
TAG         TAG2        PEER_SRC_AS SRC_IP
        DST_IP                                         SRC_PORT  DST_PORT
 PACKETS               BYTES
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                53428     33449     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                54045     33446     1
                    80
0           0           0           2001:db8:3:3::1
       2001:db8:3:6::2                                39475     22
 88                    7300
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                55216     33443     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                46928     33443     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                36485     33448     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                52681     33444     1
                    80
0           0           0           fe80::42:acff:fe11:2
        2001:db8:3:3::1                                0         0
62                    10224
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                43491     33449     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                60351     33447     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                60558     33447     1
                    80
0           0           0           2001:db8:3:3::3
       2001:db8:3:3::1                                179       38546
29                    2624
0           0           0           2001:db8:3:3::1
       2001:db8:3:3::3                                58451     22
 2247                  172324
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                33840     33443     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                35861     33447     1
                    80
0           0           0           fe80::1
       2001:db8:3:3::3                                0         0
14                    1008
0           0           0           2001:db8:3:3::1
       2001:db8:3:3::3                                38546     179
52                    4586
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                43479     33445     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                38198     33443     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                41602     33448     1
                    80
0           0           0           2001:db8:3:6::2
       2001:db8:3:3::1                                22        39475
71                    10564
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                49961     33444     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                35605     33446     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                59543     33447     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                38170     33449     1
                    80
0           0           0           2001:db8:2:2::1
       2001:db8:3:6::2                                22        35279
104                   14176
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                49707     33446     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                44551     33448     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                51801     33445     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                34869     33445     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                37776     33448     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                48220     33446     1
                    80
0           0           0           2001:db8:3:3::3
       2001:db8:3:3::1                                22        58451
2805                  3024392
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                59607     33449     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                41632     33445     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                40006     33444     1
                    80
0           0           0           2001:db8:2:ff3::2
       2001:db8:3:6::2                                48786     33444     1
                    80

For a total of: 37 entries

~/pmacct_work$ pmacct -s -p /tmp/collect.pipe-eth0-out
TAG         TAG2        PEER_DST_AS SRC_IP
        DST_IP                                         SRC_PORT  DST_PORT
 PACKETS               BYTES
0           0           65530       2001:db8:3:3::3
       2001:db8:2:ff3::2                              0         0
12                    1536
0           0           0           2001:db8:3:3::1
       2001:db8:3:6::2                                39475     22
 88                    7300
0           0           0           2001:db8:3:3::3
       fe80::1                                        0         0
14                    896
0           0           0           2001:db8:3:3::1
       2001:df0:232:eea0::fff4                        123       123
1024                  98304
0           0           0           2001:db8:3:3::3
       2001:db8:3:3::1                                179       38546
29                    2624
0           0           0           2001:db8:3:3::1
       2001:db8:3:3::3                                58451     22
 2290                  175912
0           0           0           2001:db8:3:3::1
       2001:db8:3:3::3                                38546     179
52                    4586
0           0           65530       2001:db8:3:6::2
       2001:db8:2:ff3::2                              0         0
16                    2048
0           0           0           2001:db8:3:6::2
       2001:db8:3:3::1                                22        39475
71                    10564
0           0           65530       2001:db8:3:6::2
       2001:db8:2:2::1                                35279     22
 108                   8740
0           0           0           2001:db8:3:3::1
       2001:df0:232:eea0::fff3                        123       123
1024                  98304
0           0           0           2001:db8:3:3::3
       2001:db8:3:3::1                                22        58451
2838                  3035204
0           0           0           2001:db8:3:3::1
       fe80::42:acff:fe11:2                           0         0
14                    896

For a total of: 13 entries

~/pmacct_work$ sudo cat /tmp/bgp-2001_db8_3_3__1.txt
{"timestamp": "2015-04-09 02:40:01.687531", "peer_ip_src":
"2001:db8:3:3::1", "event_type": "dump_init"}
{"peer_ip_src": "2001:db8:3:3::1", "bgp_nexthop": "2001:db8:1:1::2",
"event_type": "dump", "ip_prefix": "2001:db8:2::/48", "as_path": "65530",
"origin": 0, "local_pref": 100}
{"peer_ip_src": "2001:db8:3:3::1", "bgp_nexthop": "2001:db8:1:1::2",
"event_type": "dump", "ip_prefix": "2001:db8:2:f00::/56", "as_path": "65530
65533", "origin": 0, "local_pref": 100}
{"peer_ip_src": "2001:db8:3:3::1", "bgp_nexthop": "2001:db8:3:3::1",
"event_type": "dump", "ip_prefix": "2001:db8:3::/48", "as_path": "",
"origin": 0, "local_pref": 100}
{"timestamp": "2015-04-09 02:40:01.687531", "peer_ip_src":
"2001:db8:3:3::1", "event_type": "dump_close"}

----

best regards,
maoke (Noriyuki Arai, Dr.)
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to