Hi,

That's really strange, and almost feels like a bug of sorts. Or it could be a problem with the rest of the configuration. Please post your full config for review.

Also, the way I personally distinguish between in and outbound traffic, is not by IP range (I did do so in the post though), but based on MAC address instead. Not sure if that is an option for you as well?

Regards,
Ruben

On 11-12-2015 09:18, Cameron Murray wrote:
I checked again with the following:

aggregate_filter[inbound]: dst net 27.122.118.0/24
<http://27.122.118.0/24> or 27.122.119.0/24 <http://27.122.119.0/24>
aggregate_filter[outbound]: src net 27.122.118.0/24
<http://27.122.118.0/24> or 27.122.119.0/24 <http://27.122.119.0/24>

Data outputted is only related to those subnets so I changed to

aggregate_filter[inbound]: dst net 103.17.250.0/24
<http://103.17.250.0/24> or 103.17.251.0/24 <http://103.17.251.0/24>
aggregate_filter[outbound]: src net 2103.17.250.0/24 or 103.17.251.0/24
<http://103.17.251.0/24>

And again all data not just the subnets specified.


On Fri, Dec 11, 2015 at 6:14 PM, Cameron Murray
<[email protected] <mailto:[email protected]>> wrote:

    Thanks Ruben however the same results. As soon as I include the 103
    ranges it seems to record everything.



    On Fri, Dec 11, 2015 at 5:55 PM, Ruben Laban <[email protected]
    <mailto:[email protected]>> wrote:

        Hi,

        On 11-12-2015 08:42, Cameron Murray wrote:

            I'm at the point where I am collecting data to MySQL however
            I am having
            issues with the following:

                 aggregate[inbound]: dst_host
                 aggregate[outbound]: src_host
                 aggregate_filter[inbound]: dst net 27.122.118.0/24
            <http://27.122.118.0/24>
                 aggregate_filter[outbound]: src net 27.122.118.0/24
            <http://27.122.118.0/24>
                 aggregate_filter[inbound]: dst net 27.122.119.0/24
            <http://27.122.119.0/24>
                 aggregate_filter[outbound]: src net 27.122.119.0/24
            <http://27.122.119.0/24>
                 aggregate_filter[inbound]: dst net 103.17.250.0/22
            <http://103.17.250.0/22>
                 aggregate_filter[outbound]: src net 103.17.250.0/22
            <http://103.17.250.0/22>


        Try using this instead:

        aggregate[inbound]: dst_host
        aggregate[outbound]: src_host
        aggregate_filter[inbound]: dst net 27.122.118.0/24
        <http://27.122.118.0/24> or 27.122.119.0/24
        <http://27.122.119.0/24> or 103.17.250.0/22 <http://103.17.250.0/22>
        aggregate_filter[outbound]: src net 27.122.118.0/24
        <http://27.122.118.0/24> or 27.122.119.0/24
        <http://27.122.119.0/24> or 103.17.250.0/22 <http://103.17.250.0/22>

        Regards,
        Ruben

        _______________________________________________
        pmacct-discussion mailing list
        http://www.pmacct.net/#mailinglists





_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists



_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to