Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-14 Thread Paolo Lucente
Hi, I see. I am sorry to confirm that, yes, the feature is not there right now. It's not a biggie but still it would require a bit of work in order to converge. I can gladly put on my todo list but it may take a few weeks to get it out; or if you could perform a small fun C coding work on you

Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-13 Thread fireballiso
Hi Paolo, Sorry, I should have said I was replacing the netflow *generators*, not collectors. My mistake! Yes, I posted the config that generates the netflow 9 flows, since I hoped to see if it was missing something for including

Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-13 Thread Paolo Lucente
Hi, Let me confirm that collecting the ICMP type is partially supported; the native dst_port primitive is locked to UDP and TCP only - making this not suitable for NetFlow v5 kind of scenarios; but if using NetFlow v9 and/or IPFIX you could define your own custom primitive via the

[pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-12 Thread fireballiso
Hi! I've started using pmacctd to replace old netflow collectors for my main and test networks, which run both IPv6 and IPv4. It works very well, except that I haven't yet found a way to record the ICMP and ICMP6 types and codes. In other collectors, these are often stored in the destination port