Re: [pmacct-discussion] Getting time with pmacct -s

Ok, Thank Paolo. -- Atenciosamente Leonardo Augusto Sápiras [http://www.leonardosapiras.com.br] 2012/10/29 Paolo Lucente pa...@pmacct.net Hi Leonardo, With SQL plugins and MongoDB you have got stamp_inserted and stamp_updated fields - plus more recently (still in the CVS) the feature to

Re: [pmacct-discussion] inbound outbound

Paolo, 2012/8/29 Paolo Lucente pa...@pmacct.net Hi Leonardo, Correct, that was a mistake in my example. If your NetFlow exporter is 192.168.10.1 then you can write it as, say: id=1 ip=192.168.10.1 filter='dst net 192.168.0.0/16' id=2 ip=192.168.10.1 filter='src net 192.168.0.0/16' But

Re: [pmacct-discussion] inbound outbound

Hi Paolo, I tried to use the pre tag map, but pmacct returns some errors. In the first attempt, using the following pretag.map content: id=1 filter='dst net 192.168.0.0/16' id=2 filter='src net 192.168.0.0/16' the pmacct returns: Aug 27 18:30:24 INFO ( default/core ): Trying to (re)load map:

[pmacct-discussion] inbound outbound

Hi, How can I classify inbound and outbound data using NetFlow and the same table? Cheers! -- Atenciosamente Leonardo Augusto Sápiras [http://www.leonardosapiras.com.br] ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists

Re: [pmacct-discussion] Identifying peer_src_ip and interface

2012/8/3 Paolo Lucente pa...@pmacct.net Hi Leonardo, Add in_iface primitive to aggregate. If using an SQL plugin then read sql/README.iface for advices on how to modify the SQL table schema. Thanks Paolo, I added this primitive to aggregate, and the in_iface (I am using

[pmacct-discussion] Identifying peer_src_ip and interface

Hi, I have 3 interfaces in the same IP address sending flows to my nfacctd collector. Using the peer_src_ip in the aggregate, my collector receive ':::192.168.0.1'. Is there a way, with nfacctd, to identify which interface is sending flows? Thanks -- Atenciosamente Leonardo Augusto

[pmacct-discussion] (no subject)

Hi all, I am collecting flows with nfacctd (pmacct 0.14), and I have found this message in the pmacctd.log: Jul 25 09:20:05 ERROR ( default/mysql ): Unknown column 'src_port' in 'where clause' Jul 25 09:20:05 ERROR ( default/mysql ): Unknown column 'src_port' in 'where clause' Jul 25 09:20:05

Re: [pmacct-discussion] (no subject)

Hello Osama and Jérome, 2012/7/25 Osama Abuelsorour osama.sor...@eformations.net Hello, You probably have a problem in the database schema version number. Check that the version number you are using (looks like it is 8) matches the file you used to create the database schema. Check in the

Re: [pmacct-discussion] The accounting of flows requires SQL table v4

2012/7/16 Karl O. Pinc k...@meme.com On 07/16/2012 04:28:25 PM, Leonardo Sápiras wrote: Hi everybody, I am trying to use the aggregate peer_src_ip in my pmacctd.conf. But when I start it the pmacct says: ERROR ( default/mysql ): The accounting of flows requires SQL table v4