Hi Paolo, You just caught me doing the upgrade :) I will let you know the outcome. Thank you!
On Wed, May 29, 2019 at 4:17 PM Paolo Lucente <pa...@pmacct.net> wrote: > > Hi Alex, > > First thing first 1.6.1 is a release of almost 3 years ago, i can't > support that - please upgrade to 1.7.3 or master code. That said i can > confirm pmacctd/uacctd should support PPP-encapsulated traffic. Also, you > may send me a trace of the NFLOG traffic (as captured by tcpdump) via > unicast email for some troubleshooting. > > Paolo > > On Wed, May 29, 2019 at 12:37:40PM +0300, Alex K wrote: > > Hi All, > > > > I am facing the following issue: > > > > I have configured iptables to log packets coming through a ppp interface > > (named sim0) using NFLOG target. These packets are forwarded to uacctd to > > the respective uacctd group, as below, which are printed in a CSV file > > using the print plugin: > > > > > > iptables (mangle table): > > -A INPUT -i sim0 -j NFLOG --nflog-group 1 --nflog-size 40 > --nflog-threshold > > 10 --nflog-prefix sim0in > > -A FORWARD -i sim0 -j NFLOG --nflog-group 1 --nflog-size 40 > > --nflog-threshold 10 --nflog-prefix sim0in > > -A POSTROUTING -o sim0 -j NFLOG --nflog-group 1 --nflog-size 40 > > --nflog-threshold 10 --nflog-prefix sim0out > > > > > > uacctd config: > > ! Collect traffic on sim0 > > daemonize: true > > debug: true > > promisc: false > > pidfile: /var/run/uacctd_sim0.pid > > imt_path: /tmp/uacctd_sim0.pipe > > !syslog: daemon > > logfile: /var/log/uacct/uacct_sim0.log > > uacctd_group: 1 > > plugins: print[in_out_sim0] > > aggregate[in_out_sim0]:src_host,dst_host,src_port,dst_port,proto > > print_output[in_out_sim0]: csv > > print_output_file[in_out_sim0]: /var/lib/uacctd-sim0-%Y%m%d.csv > > print_output_file_append[in_out_sim0]: true > > print_refresh_time: 10 > > print_history: 24h > > > > I receive normally outgoing traffic which is logged at the CSV file. > > Using tcpdump I can see all the in/out traffic and iptables counters are > > rising at the respective chains. The sim0 interface is dynamically > brought > > up from a ppp connection. > > > > Do you have any idea why uacctd is not getting those incoming packets > > (INPUT and FORWARD chain) or how this can be troubleshooted. I am using > > pmacct 1.6.1-1. > > > > Thank you! > > Alex > > > _______________________________________________ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists >
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
