I hope this isn't against the forum rules to mention another project, but
like Victor we have a lot of customers that need monthly usage. I've been
using vnstat on my home router. Now it doesn't do application breakdowns
since that needs dpi, but if monthly usages helps then it might be worth a
t
Hi Vincent (might remember me from discussions about lldpd and keepalived)
The EdgeMax family of routers uses uacctd and it's been on my todo
list to replace ulog with nflog and add IPv6 support. So far I've
been too busy to get to it, so it would be great if you did this and
I'd certainly be wil
buf=) at nl.c:80
#5 0x004137e0 in main (argc=3, argv=0x7fff68f4, envp=0x7fff6904) at
uacctd.c:830
Of course using the right database solves that crash.
On Fri, Feb 21, 2014 at 5:04 PM, Stig Thormodsrud wrote:
>
> I noticed when using geoip and json output that the country_ip_src w
I noticed when using geoip and json output that the country_ip_src was
displayed but not the country_ip_dst. This patch seems to fix it:
diff --git a/src/pmacct.c b/src/pmacct.c
index d62ba44..b29c7a3 100644
--- a/src/pmacct.c
+++ b/src/pmacct.c
@@ -2996,7 +2996,7 @@ char *pmc_compose_json(u_int6
rt_src": 8312917622912, "ip_dst": "10.2.0.195",
"port_dst": 239446582657152, "
packets": 962493, "flows": 1, "bytes": 1345089033}
On Fri, Feb 21, 2014 at 12:09 PM, Stig Thormodsrud wrote:
> Sure I can try that. I'm wondering if
other fields packed as 'I', ie. src/dst
> network masks (defined as u_int8_t) and UDP/TCP ports (defined as
> u_int16_t)?
>
> Cheers,
> Paolo
>
> On Thu, Feb 20, 2014 at 03:11:16PM -0800, Stig Thormodsrud wrote:
> > Hi Paolo,
> >
> > I've been ex
Hi Paolo,
I've been experimenting with the new json output - nice addition. One
thing I ran into was that the iface value was wrong. For example here's
the csv output compared with the json output:
root@ubnt-SJ:/etc/pmacct# pmacct -p /tmp/uacctd-e.pipe -s -T bytes -O csv
TAG,IN_IFACE,OUT_IFACE,
Great to hear from you again too Paolo. I knew I should've checked if you
had fixed it already.
Anyway another issue I'm looking into. I don't think this is a new issue
because there was a bug open for it back at Vyatta (
https://bugzilla.vyatta.com/show_bug.cgi?id=7693). Basically if I'm using
wise some
solutions follow:
- increase shared memory size, 'plugin_pipe_size'; now: '10485760'.
- increase buffer size, 'plugin_buffer_size'; now: '32912'.
- increase system maximum socket size.
Guess I'll try increasing the values.
On Wed, Nov 20, 2013 a
Hi Paolo,
The Ubiquiti fork of Vyatta is using an old version of pmacct (0.12.5), so
I'm in the process of updating it to 1.5rc1. In testing the new code I've
noticed some differences in the plugin_pipe_size that I'm using. With the
following config:
vbash-4.1$ cat uacctd-i.conf
!
! autogenerat
Ross Vandegrift wrote:
> Hello,
>
> Is there any documentation describing the setup required for uacctd?
> I'd like to check this out, but can't quite figure out all the steps I
> need to do in order to get things working.
>
> Thanks,
> Ross
Below is an example of uacctd that I'm running:
vya..
> -Original Message-
> From: pmacct-discussion-boun...@pmacct.net [mailto:pmacct-discussion-
> boun...@pmacct.net] On Behalf Of Jeremy Lee
> Sent: Thursday, October 01, 2009 10:37 PM
> To: pmacct-discussion@pmacct.net
> Subject: [pmacct-discussion] MySQL connection issues
>
>
> Hi there,
I'm using pmacctd to export netflow v5 and am experimenting with a netflow
collector that suggests the following cisco flow timeout values:
ip flow-cache timeout active 1
ip flow-cache timeout inactive 15
I'm trying to figure out which nfprobe_timeout vars are the equivalent.
Would it be:
nfprob
was previously turned on (hence you see the
> position of the plugins was relevant) as part of operations of a
> concurrent plugin.
>
> Cheers,
> Paolo
>
>
> On Mon, Aug 17, 2009 at 08:27:51PM -0700, Stig Thormodsrud wrote:
> > I'm getting a segv fault when u
I'm getting a segv fault when using the following conf file:
s...@io:~/git/pmacct-0.11.4/src$ cat pm.conf
daemonize: false
debug: true
promisc: true
pidfile: /var/run/pmacctd-eth0.pid
imt_path: /tmp/pmacctd-eth0.pipe
aggregate: src_host,dst_host,proto,src_port,dst_port,tos,flows
interface: eth
interface information. The big
> cons is that as the implementation can very likely tend to
> be OS specific.
>
> Anybody interested willing to comment? Any third way i might
> have missed?
>
> Cheers,
> Paolo
>
>
> On Mon, Aug 03, 2009 at 04:01:12PM -0700,
I notice with multiple interfaces that I get duplicate flows. If I recall
correctly a cisco router does netflow only on input while it seems pcap
captures both inbound & outbound packets. My work around to filter out
the output flows was to use a pcap_filter such as:
!
daemonize: true
promisc:
I've been searching the mail archives for info on this topic and found a
thread suggesting to running an instance of pmacctd per interface (using
the ifindex as the engine_id) and use the nfprobe plugin to export all
instances to nfacctd on localhost. Then in nfacctd I added a pre_tag_map
to map t
18 matches
Mail list logo
