Hi Cameron, Is it possible you restarted pmacct using pmacctd instead of nfacctd? Your description of what is happening would match 100% with that.
Cheers, Paolo On Tue, Nov 08, 2016 at 01:53:59PM +1000, Cameron Murray wrote: > Further to this it does appear that it is only recordings data flows for > itself and not the rest of the network. > > On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray <[email protected]> > wrote: > > > Guys & Gals, > > > > I have been running PMACCT since September last year v1.5.2 and today I > > have upgraded to v1.6.1. > > > > I am pushing the data collected to two separate MySQL tables; acct_in & > > acct_out > > > > Based on our traffic flow the data being entered into the database does > > not appear to be correct. I've been watching the database not for an hour > > and there is only a dozen entries. In previous versions there would be > > thousands of our IP's showing now. > > > > Our Config: > > > > daemonize: true > > > > nfacctd_port: 9996 > > > > nfacctd_time_new: true > > > > > > plugins: mysql[inbound], mysql[outbound] > > > > > > sql_db: db_name > > > > sql_host: localhost > > > > sql_user: db_user > > > > sql_passwd: db_password > > > > > > sql_refresh_time: 15 > > > > sql_table_version: 8 > > > > > > aggregate[inbound]: dst_host > > > > aggregate[outbound]: src_host > > > > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or > > 103.x.x.0/24 or 103.x.x.0/23 > > > > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or > > 103.x.x.0/24 or 103.x.x.0/23 > > > > > > sql_table[inbound]: acct_in > > > > sql_table[outbound]: acct_out > > > > > > From what I can see, it looks like only data communicating with the server > > from the filtered subnets is being recorded to the DB where infact I only > > want data communicated in and out of our ranges to be written to allow us > > to monitor and bill customers data. > > > > This used to work, all the documents seem to outline that this is the > > correct way to only store data too and from our Subnets? > > > > > > Your assistance is appreciated! > > > > Regards > > > > Cameron > > > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
