Hi,
In logfile i see this
Feb 9 16:47:46 oam02 sfacctd[14477]: DEBUG ( default/mysql ): INSERT INTO
`acct_v5_06` (stamp_updated, stamp_inserted, vlan, src_port, dst_port, tos,
ip_proto, agent_id, class_id, mac_src, mac_dst, ip_src, ip_dst, packets,
bytes, flows) VALUES (FROM_UNIXTIME(1265730466), FROM_UNIXTIME(1265730300),
200, 6007, 54654, 104, 'ip', 0, 'unknown', '0:0:0:0:0:0', '0:0:0:0:0:0',
'0.0.0.0', '0.0.0.0', 1, 242, 0)
As you can see a lot of fields are inserted with null values.
This is my config
debug: true
daemonize: true
plugins: mysql
aggregate: vlan,tos
nfacctd_port: 6343
sql_refresh_time: 120
sql_history: 5m
sql_history_roundoff: mhd
sql_table_version: 5
sql_passwd: sflow
sql_table: acct_v5_%W
sql_table_schema: /var/lib/pmacct/mysql_v5.schema
syslog: local0
!
Here is sample output from my mysql.
mysql select * from acct_v5_06 limit 10;
+--+--+-+-+--+-+-+--+--+--+-+-+---+---+-+-+
| agent_id | class_id | mac_src | mac_dst | vlan | ip_src | ip_dst
| src_port | dst_port | ip_proto | tos | packets | bytes | flows |
stamp_inserted | stamp_updated |
+--+--+-+-+--+-+-+--+--+--+-+-+---+---+-+-+
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 104 | 67 | 36641 | 0 |
2010-02-09 15:25:00 | 2010-02-09 15:30:01 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 252 | 2 | 228 | 0 |
2010-02-09 15:25:00 | 2010-02-09 15:30:01 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 0 | 7 | 693 | 0 |
2010-02-09 15:25:00 | 2010-02-09 15:30:01 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 104 | 10 | 5740 | 0 |
2010-02-09 15:30:00 | 2010-02-09 15:32:02 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 0 | 10 | 990 | 0 |
2010-02-09 15:30:00 | 2010-02-09 15:36:03 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 100 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 104 | 5 | 430 | 0 |
2010-02-09 15:30:00 | 2010-02-09 15:36:03 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 100 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 0 | 1 |68 | 0 |
2010-02-09 15:35:00 | 2010-02-09 15:36:03 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 100 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 104 | 2 | 172 | 0 |
2010-02-09 15:35:00 | 2010-02-09 15:38:02 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 0 | 7 | 662 | 0 |
2010-02-09 15:35:00 | 2010-02-09 15:40:01 |
|0 | unknown | 0:0:0:0:0:0 | 0:0:0:0:0:0 | 200 | 0.0.0.0 | 0.0.0.0
|0 |0 | ip | 104 | 39 | 17610 | 0 |
2010-02-09 15:35:00 | 2010-02-09 15:40:01 |
+--+--+-+-+--+-+-+--+--+--+-+-+---+---+-+-+
I probably have missed something in my config. But i cant find what. I also
need help undestanding the TOS values? What is tos 67? in VLAN 200 i only
should see DSCP AF31, and DSCP 47.
Im also including a capture of sflow packets.
//Regards Jonas
sflow.cap
Description: Binary data
___
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists
