Re: [pmacct-discussion] docker

2021-10-01 Thread Steve Clark
Hi, I found if I set daemonize: false in my pmacctd.conf file and use the -d flag on the docker run line it seems to work. Don't know if this is the proper solution though. Thanks, Steve On 10/1/21 7:21 AM, Steve Clark wrote: Hello, I am having trouble getting the "latest&quo

[pmacct-discussion] docker

2021-10-01 Thread Steve Clark
Hello, I am having trouble getting the "latest" or "bleeding-edge" docker image to run by using the following command: docker run --privileged --network host -v /etc/pmacct_netwolves/pmacctd.conf:/etc/pmacct/pmacctd.conf pmacct/pmacctd:bleeding-edge $ docker ps CONTAINER ID IMAGE COMMAN

[pmacct-discussion] nDPI warning

2020-07-23 Thread Steve Clark
Hi Paolo, just sending this because the message said to. pmacctd[26649]: WARN ( default/core ): nDPI support for fragmented traffic not implemented. If you see this message, please get in touch: Paolo Lucente Regards, Steve Email Confidentiality Notice: The information contained in this tran

Re: [pmacct-discussion] master - ndpi on 32bit CentOS 6

2020-07-10 Thread Steve Clark
/Linux As i was suspecting, passing the pcap you sent me through a daemon compiled on this box went fine (that is, i can't reproduce the issue). From what i see, by the way, this is not something related to nDPI. Paolo On 09/07/2020 18:19, Steve Clark wrote: Thanks for checking, could you tell

Re: [pmacct-discussion] master - ndpi on 32bit CentOS 6

2020-07-09 Thread Steve Clark
nd me privately your capture and i may try with that one (although i am not highly positive it will be a successful test); or you could arrange me access to your box to read the pcap. Let me know. Paolo On 09/07/2020 14:54, Steve Clark wrote: Hi Paolo, I have compiled master with nDPI on both 32bit and

[pmacct-discussion] master - ndpi on 32bit CentOS 6

2020-07-09 Thread Steve Clark
Hi Paolo, I have compiled master with nDPI on both 32bit and 64bit CentOS 6 systems. The 64 bit pmacctd seems to work fine. But I get bogus byte counts when I run the 32bit version against the same pcap file. Just wondered if you have done any testing on 32bit intel system with the above comb

Re: [pmacct-discussion] fabric path header patch not in master

2020-06-25 Thread Steve Clark
Sorry for the noise - my git foo it not that good. Recloned everything and my patches are in master. Oh it turns out I was on the wrong system - DUH. On 06/25/2020 02:03 PM, Steve Clark wrote: Hi Paolo, Is there a reason my CFP patch is in 1.7.5 but not in master? Thanks, Steve

[pmacct-discussion] fabric path header patch not in master

2020-06-25 Thread Steve Clark
Hi Paolo, Is there a reason my CFP patch is in 1.7.5 but not in master? Thanks, Steve Email Confidentiality Notice: The information contained in this transmission may contain privileged and confidential and/or protected health information (PHI) and may be subject to protection under the law, i

Re: [pmacct-discussion] 1.7.5 with static ndpi

2020-06-25 Thread Steve Clark
Thanks for the info Marc. On 06/25/2020 08:50 AM, Marc Sune wrote: Steve, Missatge de Stephen Clark mailto:sclar...@earthlink.net>> del dia dj., 25 de juny 2020 a les 13:56: Hi Paolo, We have pmacct installed on a number of remote systems and it just more moving parts to keep updated with hav

[pmacct-discussion] Fwd: minb - version 1.5.3

2016-08-02 Thread Steve Clark
Hi Paolo, I am trying to limit netflow aggregates to greater than 100 bytes before insertion into my PG database, but I can't seem to get it to work. All aggregates are being inserted. my config: daemonize: true debug: false pidfile: /var/run/nfacctd.pid syslog: daemon pre_tag_map: ./my.preta

[pmacct-discussion] Out of Office. (was: Out of Office. (was: Out of Office. (was: Out of Office. (was: Nfacct - Missing src_port, and dst_port))))

2016-04-13 Thread Steve Clark
Sorry, I will out of the office til 4/21/16. -- Stephen=C2=A0Clark NetWolves Managed Services, LLC. Director=C2=A0of=C2=A0Technology Phone:=C2=A0813-579-3200 Fax:=C2=A0813-882-0209 Email:=C2=A0steve.clark@netwolves.c= om http://www.netw

[pmacct-discussion] Out of Office. (was: Out of Office. (was: Out of Office. (was: Nfacct - Missing src_port, and dst_port)))

2016-04-13 Thread Steve Clark
Sorry, I will out of the office til 4/21/16. -- Stephen=C2=A0Clark NetWolves Managed Services, LLC. Director=C2=A0of=C2=A0Technology Phone:=C2=A0813-579-3200 Fax:=C2=A0813-882-0209 Email:=C2=A0steve.clark@netwolves.c= om http://www.netw

[pmacct-discussion] Out of Office. (was: Out of Office. (was: Nfacct - Missing src_port, and dst_port))

2016-04-13 Thread Steve Clark
Sorry, I will out of the office til 4/21/16. -- Stephen=C2=A0Clark NetWolves Managed Services, LLC. Director=C2=A0of=C2=A0Technology Phone:=C2=A0813-579-3200 Fax:=C2=A0813-882-0209 Email:=C2=A0steve.clark@netwolves.c= om http://www.netw

[pmacct-discussion] Out of Office. (was: Nfacct - Missing src_port, and dst_port)

2016-04-13 Thread Steve Clark
Sorry, I will out of the office til 4/21/16. -- Stephen=C2=A0Clark NetWolves Managed Services, LLC. Director=C2=A0of=C2=A0Technology Phone:=C2=A0813-579-3200 Fax:=C2=A0813-882-0209 Email:=C2=A0steve.clark@netwolves.c= om http://www.netw

Re: [pmacct-discussion] netflow v9 ifindex always 0 - pmacct version 1.5.1

2015-07-20 Thread Steve Clark
Hi Paolo, Adding nfprobe_direction worked. Thanks again, Steve On 07/19/2015 04:23 AM, Paolo Lucente wrote: Hi Steve, Inline: On Fri, Jul 17, 2015 at 07:36:31AM -0400, Steve Clark wrote: Am I not able to simply put something like: interface: p4p1 aggregate: src_host, dst_host, src_port

Re: [pmacct-discussion] netflow v9 ifindex always 0 - pmacct version 1.5.1

2015-07-17 Thread Steve Clark
nt: fields. Thanks for taking the time to respond and making pmacct available. Cheers, Paolo On Thu, Jul 16, 2015 at 12:27:01PM -0400, Steve Clark wrote: Hello, I have read the discussing in this email thread: https://www.mail-archive.com/pmacct-discussion@pmacct.net/msg02187.html But still ca

[pmacct-discussion] netflow v9 ifindex always 0 - pmacct version 1.5.1

2015-07-16 Thread Steve Clark
Hello, I have read the discussing in this email thread: https://www.mail-archive.com/pmacct-discussion@pmacct.net/msg02187.html But still can't see anything but zero in the InputInt: and OutputInt: when looking at the exported packets with wireshark: Here is my simple config - could someone ex

Re: [pmacct-discussion] sFlow related questions

2014-01-23 Thread Steve Clark
On 01/23/2014 02:28 AM, Ruben Laban wrote: Hi, I'm currently in the process of migrating from a monitoring and accounting setup based on pmacctd/libpcap to sfacctd/sflow. However, while doing so I ran into a few things: * Can sfacctd somehow also "process" the polled (interface globals) data?

[pmacct-discussion] pmacct-1.5.0rc1

2013-12-18 Thread Steve Clark
Hi, Reading section X. of the QUICKSTART GUIDE I am confused by the following example where tag2 is referenced but the filter is using set_tag, shouldn't it be set_tag2? nfprobe_direction[plugin_name]: tag2 pre_tag_map: /path/to/pretag.map then edit the tag map as follows. A return value o