Hi Fabien,

Can you better describe "This was working before"? In a previous version
of pmacct, doing a different query, with a different plugin? Your config
looks simple enough and correct - and i could not reproduce the issue in
lab. Did you check with wireshark, for example, the original NetFlow data?
Does it contain the output interface info? 

Cheers,
Paolo

On Fri, Aug 12, 2016 at 11:21:26AM +0200, Fabien VINCENT wrote:
> Hello all,
> 
> This was working before, but don't know why I lost the information :
> 
> [11:16 ~] > pmacct -se -p /tmp/traffic_out.pipe  | more
> OUT_IFACE   AS_PATH                  PEER_SRC_IP
> PACKETS               BYTES
> 0           9498_9829_9829_9829      a.b.c.d
> 0                     23200100
> 0           20764_60299_34703_34703_34703   a.b.c.d
> 0                     3239624986
> 0           286_34984_34984_34984_16135   a.b.c.d
> 0                     3441282336
> 
> My nfacctd config file :
> 
> ! nfacctd configuration
> daemonize: true
> pidfile: /var/run/nfacctd.pid
> logfile: /var/log/nfacctd.log
> nfacctd_time_new: true
> aggregate[traffic_out]: out_iface, peer_src_ip, as_path
> plugins: memory[traffic_out]
> imt_path[traffic_out]: /tmp/traffic_out.pipe
> 
> plugin_pipe_size:   8192000000
> plugin_buffer_size: 8192000
> imt_buckets: 65537
> imt_mem_pools_size: 65536
> imt_mem_pools_number: 0
> 
> bgp_daemon: true
> bgp_daemon_max_peers: 100
> bgp_daemon_ip: x.y.z.w
> bgp_peer_src_as_type: bgp
> bgp_src_as_path_type: bgp
> bgp_src_std_comm_type: bgp
> bgp_table_dump_file: /opt/pmacct/output/bgp-$peer_src_ip.dump
> bgp_table_dump_refresh_time: 3600
> 
> nfacctd_as_new: bgp
> nfacctd_renormalize: true
> nfacctd_ext_sampling_rate: 4000
> nfacctd_disable_checks: true
> 
> My nfacctd version :
> 
> [11:20 ] > nfacctd -V
> NetFlow Accounting Daemon, nfacctd 1.5.3 (20160114-00)
>  --enable-jansson --enable-ipv6
> 
> For suggestions, critics, bugs, contact me: Paolo Lucente
> <pa...@pmacct.net>.
> 
> Thanks for your help !
> 
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists

_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to