Re: [pmacct-discussion] pmacct -1.5.0rc3 rabbitmq integration issue.
Hi, On 17-07-14 20:08, Dhanasekaran Anbalagan wrote: I am trying to integrate pmacct with logstash. I already tired print plugin to write to flat-files it's working. Now I am trying to integrate with rabbitmq. It's not working.. I went to rabbitmq admin. I don't see any message queues. Also tired Debug mode I seen some Json data printing. But actually It's not sending to rabbitmq exchange. But Exchange name created in rabbitmq end, console log: http://paste.ubuntu.com/7809820/ In your log I see: ... publishing [E=pmacct RK=5m_ipip DM=0] ... I read this as publishing to Exchange pmacct with routing key 5m_ipip. Are you sure that your config is properly loaded by pmacct? King regards, Nick Douma signature.asc Description: OpenPGP digital signature ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] Questions about IPFIX and pmacct
Hi all, Le 03/06/2014 16:48, « Thomas King » thomas.k...@de-cix.net a écrit : * Sampling information is not sent over by the router. This, in turn, can be because of a knob to enable on the router or due to a bug. Sniffing the raw IPFIX data and analizing with a tool like Wireshark can tell if it's the latter case. I'd be more than happy to help/support you with such analysis if we reckon all points in the direction of a bug. We double checked the IPFIX data coming from our router. The sampling rate is contained in the data. It comes via a data record (template id=256) and the relevant fields are named samplingPacketInterval and samplingPacketSpace. Do you know if pmacct is able to recognise this information? Is there is anything else (configuration file wise) what we can do? I don¹t know which Hardware is using Thomas. Do you know if Juniper MX(12.3) using Inline Jflow are able to advertise samplingPacketInterval and samplingPacketSpace fields ? We have inline flow instance configured on our equipments but i cannot spot these fields in pcaps. Configuring Flow Aggregation to Use IPFIX Flow Templates docs seems to indicate i should have any hope. http://www.juniper.net/techpubs/en_US/junos12.3/topics/task/configuration/s ervices-ipfix-flow-template-flow-aggregation-configuring.html If anyone have informations or clues, thanks by advance. Best regards, Fabien ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] Questions about IPFIX and pmacct
Le 18 juil. 2014 à 20:36, Fabien DEDENON fabien.dede...@watchever.com a écrit : I don¹t know which Hardware is using Thomas. Do you know if Juniper MX(12.3) using Inline Jflow are able to advertise samplingPacketInterval and samplingPacketSpace fields ? We have inline flow instance configured on our equipments but i cannot spot these fields in pcaps. Configuring Flow Aggregation to Use IPFIX Flow Templates docs seems to indicate i should have any hope. http://www.juniper.net/techpubs/en_US/junos12.3/topics/task/configuration/s ervices-ipfix-flow-template-flow-aggregation-configuring.html If anyone have informations or clues, thanks by advance. Best regards, Fabien Oops i feel dumb. After many researches i found Elisa’s Pmacct Thread ER-058613 submitted for IPFIX attributes 304 to 311 for Juniper MPCs » Anyways, we’ll make the request to Juniper. Sorry for the noise. Fabien signature.asc Description: Message signed with OpenPGP using GPGMail ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
