Re: [pmacct-discussion] Getting nfacctd to NOT aggregate ?

2016-04-19 Thread Robert Juric
No problem! If you feel like RTFM :), check out the official examples http://wiki.pmacct.net/OfficialExamples under Section XVII - Using pmacct as traffic/event logger; they have some initial information that can be used. It took me a little trial and error to figure it out. Robert Juric On Tue,

Re: [pmacct-discussion] Getting nfacctd to NOT aggregate ?

2016-04-19 Thread Dariush Marsh-Mossadeghi
A… aggregating on something which can’t be aggregated. Nice hack :-) Thanks Robert > On 19 Apr 2016, at 15:26, Robert Juric wrote: > > I found you have to build the tables with timestamps and then when you > aggregate with timestamp_start and timestamp_end you can get the individual > flow

Re: [pmacct-discussion] Getting nfacctd to NOT aggregate ?

2016-04-19 Thread Robert Juric
I found you have to build the tables with timestamps and then when you aggregate with timestamp_start and timestamp_end you can get the individual flow records as opposed to aggregating the records. Robert Juric On Tue, Apr 19, 2016 at 9:00 AM, Dariush Marsh-Mossadeghi < dari...@gravitas.co.uk>

[pmacct-discussion] Getting nfacctd to NOT aggregate ?

2016-04-19 Thread Dariush Marsh-Mossadeghi
Hi List, Is there a way to get pmacctd/nfacctd to NOT do any aggregation of flow records ? Specifically, I’ve got IPFIX coming off a router being handed by nfacctd and it would be useful to temporarily have visibility of every flow record. Tcpdump is not a suitable as part of what I’m trying

Re: [pmacct-discussion] Problem compiling pmacct on CentOS 6

2016-04-19 Thread Tech Support
Hello; Just downloaded from Git and I was able to build it without a problem. I Can't than you enough. Regards; John V. -Original Message- From: pmacct-discussion [mailto:pmacct-discussion-boun...@pmacct.net] On Behalf Of Paolo Lucente Sent: Tuesday, April 19, 2016 9:38 AM To: pmacct-d

Re: [pmacct-discussion] Problem compiling pmacct on CentOS 6

2016-04-19 Thread Paolo Lucente
Hi John, Plese consider in 1.6.0, the code currently on GitHub, the build system has totally changed - maybe you want to give a try with that one and see if it works? If it does not or you need to stick to 1.5.3, i'd be happy to have a look myself on your box as i have no way to reproduce this. C

Re: [pmacct-discussion] pmacct and long flows

2016-04-19 Thread Paolo Lucente
Hi Michael, It principle it sounds no problem, you can set those directives even up to one year. I just wonder whether that would make sense, ie. wait for a long flow to complete before account for it. But maybe a better explanation of your use-case and/or what you would like to achieve (ie. what