On 03/24/2014 08:14:25 AM, Chris Wilson wrote:
> I'd like to see the *content* of DNS requests and responses available
> to
> be logged in data records by pmacct. It can be very helpful in
> identifying
> which website someone was trying to access, when all we have is an IP
> address. I accept
Hi Karl,
On Mon, 24 Mar 2014, Karl O. Pinc wrote:
On 03/24/2014 06:31:30 AM, Stathis Gkotsis wrote:
Concerning HTTP: I guess the thing to output would be hostname, since
you can have multiple HTTP requests to different URLs inside one TCP
Session.About DNS, what should be outputted? I guess th
On 03/24/2014 06:31:30 AM, Stathis Gkotsis wrote:
> Hi all,
> Concerning HTTP: I guess the thing to output would be hostname, since
> you can have multiple HTTP requests to different URLs inside one TCP
> Session.About DNS, what should be outputted? I guess the hostname for
> A queries is good enou
13:56:32 +
> From: pa...@pmacct.net
> To: pmacct-discussion@pmacct.net
> Subject: Re: [pmacct-discussion] HTTP traffic classification
>
> Dears,
>
> First off, interesting discussion. Under the assumption we speak
> libpcap and not NetFlow/IPFIX, I confirm, as it was
Dears,
First off, interesting discussion. Under the assumption we speak
libpcap and not NetFlow/IPFIX, I confirm, as it was already clear
from Slava and Chris emails, that there is nothing built-in to do
this in pmacct.
I see two possible avenues for this: a) go the classification way,
ie. most
Hi all,
On Sat, 22 Mar 2014, Viacheslav Dubrovskyi wrote:
22.03.2014 21:20, Stathis Gkotsis пишет:
First, I would like to thank you for the great product, pmacct has
proven very useful to me, which brings me to my question :) I see that
it is possible to enable traffic classification, which is
22.03.2014 21:20, Stathis Gkotsis пишет:
Hi all,
First, I would like to thank you for the great product, pmacct has
proven very useful to me, which brings me to my question :)
I see that it is possible to enable traffic classification, which is
about detecting L7 protocol. I am particularly in
Hi all,
First, I would like to thank you for the great product, pmacct has proven very
useful to me, which brings me to my question :)I see that it is possible to
enable traffic classification, which is about detecting L7 protocol. I am
particularly interested in HTTP and also outputting the hos
