Hello Fabien.

I wrote the patch for fwdstatus;
my config looks like this:

! Only tag denys with 10
set_tag2=10                     fwdstatus=129
set_tag2=20                     fwdstatus=64

And it works. Can you check your source code and look for
"PT_map_fwdstatus_handler"
in src/pretag_handlers.c If that is present it _should_ work.

Best Regards.

2017-09-25 8:22 GMT+01:00 Fabien VINCENT <fab...@beufa.net>:

> Le 2017-09-25 03:41, Paolo Lucente a écrit :
>
>
> Hi Fabien,
>
> What version are you running? You can confirm this with a 'nfacctd -V';
> the feature was added in 1.7.0 (that is, master code on GitHub). I can
> also confirm you, on your original question, that an atoi() is performed
> on the input value - so you should express values in decimal.
>
> Paolo
>
> On Sun, Sep 24, 2017 at 10:28:22PM +0200, Fabien VINCENT wrote:
>
> Le 2017-09-22 15:23, Fabien VINCENT a écrit :
>
> Hi,
>
> I'm looking for some examples around fwdstatus on pretag
>
> _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see
> https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific
> semantics of the field and some examples._
>
> How to use it ? I was looking to do king of pretag like
>
> set_tag=0 fwdstatus=00b
>
> set_tag=1 fwdstatus=01b
>
> set_tag=2 fwdstatus=10b
>
> Is it the way of dealing with this parameter ?
>
> --
>
> FABIEN VINCENT
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
>
> Is the option available ?
> Sep 24 22:30:13 INFO ( default/core ): Trying to (re)load map:
> /etc/pmacct/nfacctd.pretag.map
> Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line
> 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored.
> Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line
> 2 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored.
>
> [22:30 root@netflows pmacct-master] > cat /etc/pmacct/nfacctd.pretag.map
> set_tag=1 fwdstatus=65
> set_tag=2 fwdstatus=138
>
> --
>
> FABIEN VINCENT
> -------------------------------------------------------------------
>
>
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
> I'm running the git master version (I tried)
>
> [15:36 root@netflows opt] > /usr/local/sbin/nfacctd -V
> NetFlow Accounting Daemon, nfacctd 1.7.0-git (20170924-00)
>
> Arguments:
>  '--build=x86_64-linux-gnu' '--prefix=/usr/local' 
> '--includedir=${prefix}/include'
> '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info'
> '--sysconfdir=/etc' '--localstatedir=/var' 
> '--libdir=/usr/lib/x86_64-linux-gnu'
> '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode'
> '--disable-dependency-tracking' '--enable-mmap' '--enable-pgsql'
> '--with-pgsql-includes=/usr/include/postgresql' '--enable-mysql'
> '--enable-sqlite3' '--enable-ipv6' '--enable-v4-mapped' '--enable-64bit'
> '--enable-threads' '--enable-jansson' '--enable-geoip' '--enable-ulog'
> 'build_alias=x86_64-linux-gnu' '--enable-l2' '--enable-traffic-bins'
> '--enable-bgp-bins' '--enable-bmp-bins' '--enable-st-bins'
>
> Libs:
> libpcap version 1.6.2
> MySQL 5.5.57
> PostgreSQL 90413
> sqlite3 3.8.7.1
> jansson 2.7
>
> System:
> Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64
>
> For suggestions, critics, bugs, contact me: Paolo Lucente <
> pa...@pmacct.net>.
>
>
> But seems option not catched, I've always the log
>
> unknown key 'fwdstatus' at line
> 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored.
>
> [09:23 root@netflows opt] > cat /etc/pmacct/nfacctd.pretag.map
> set_tag=1 fwdstatus=65
> set_tag=2 fwdstatus=138
>
> Any ETA for v1.7.0 out ?
>
>
> Thanks for your help.
>
>
>
> --
> *Fabien VINCENT*
> -------------------------------------------------------------------
>
> _______________________________________________
> pmacct-discussion mailing list
> http://www.pmacct.net/#mailinglists
>
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to