Re: [pmacct-discussion] Tolerating small packet flooding with pmacctd/nfacctd

2019-05-16 Thread Paolo Lucente
Hi Mikhail, For the export (pmacctd) part let me point you to Q7 of the FAQS doc: https://github.com/pmacct/pmacct/blob/master/FAQS#L71-#L101 Specifically PF_RING and ZeroMQ-based internal buffering (for this last part grep 'ZeroMQ' in the QUICKSTART document). For the collection (nfacctd)

[pmacct-discussion] pmacct 1.7.3 released !

2019-05-16 Thread Paolo Lucente
VERSION. 1.7.3 DESCRIPTION. pmacct is a small set of multi-purpose passive network monitoring tools. It can account, classify, aggregate, replicate and export forwarding-plane data, ie. IPv4 and IPv6 traffic; collect and correlate control-plane data via BGP and BMP; collect and correlate RPKI

[pmacct-discussion] Tolerating small packet flooding with pmacctd/nfacctd

2019-05-16 Thread Mikhail Sennikovsky
Hi all, We've were experimenting with pmacctd/nfacctd-based IP traffic accounting recently, and have faced some issues with handling small packet floods by pmacctd/nfacctd in our setup. Would be great if someone here could suggest us how we could overcome them. Our goal was actually to