Hi all,
Wondering if anyone has a simillar problem with kafka plugin. nfacctd
dosn't send to kafka , using :
conf
---
kafka_topic: pmacct1
kafka_topic[test]: pmacct1
kafka_refresh_time[test]: 300
kafka_history[test]: 5m
kafka_history_roundoff[test]: m
---
logs:
Jul 27 23:55:01 DEBUG ( test/kafka
Hello,
I mean that when you enable sflow on an interface you cannot configure
ingress/egress option.
It captures both directions while we need only data for ingress traffic.
There are two major problems with your solution. I think /direction /is
not a valid sfacct key and we already use
Hello,
we use nfacctd to account our customers inbound/outbound traffic with
dst_net,dst_mask/src_net,src_mask aggregation, but if the networks_file
list contains networks like:
10.0.0.0/26
10.0.0.0/24
10.0.0.0/22
and traffic goes to some IP belonging to 10.0.0.0/26, it only accounted
for
Hi List,
Maybe someone can point out what I am doing wrong. I am trying to get nfacctd to
only do inserts and not do updates
but my data looks like it is still doing updates, see row from pgsql below:
tag | ip_src | ip_dst | port_src | port_dst | ip_proto | tos |
packets |
Hi Jordan,
not sure what you mean with “equipment that cannot separate inbound/outbound
traffic” but as long as you have direction in your flow data you can add a
pre-tag map like
!
! tag=1 - inbound IPv4 traffic
! tag=2 - outbound IPv4 traffic
! tag=3 - inbound IPv6 traffic
!
Hello,
We're having issues with equipment that cannot separate inbound/outbound
traffic using sflow V5.
Looking at the sflow V5 protocol it's having the following fields.
Usually they match the snmp interface indexes.
/source_id/
/interface input/
/interface output/
What I suggest as a
Hi Mario,
I want to make configuration in PMacct for my requirement.
Let me reframe this question.
-I get triggering message in PMacct (e.g. from TCP/UDP port).
-I decode the message.
-I get an IP address and database logging on/off information.
If I get logging ON for an IP address then I want
