On Fri, Mar 26, 2010 at 11:41:44PM +, Paolo Lucente wrote:
I see. It's just not clear whether you are using pmacctd compiled
against vanilla libpcap. If this is the case, i can advice to give
a try to PF_RING. The kernel module can be configured for sampling
by passing the sample_rate
On Mon, Mar 29, 2010 at 11:21:07AM -0400, Ross Vandegrift wrote:
Ah - didn't realize that PF_RING could sample on it's end. I tried
PF_RING previously and actually ran into worse performance than non
PF_RING, but I didn't configure sampling.
Aha - at least I fixed this. Looks like there were
Hi Ross,
On Thu, Mar 25, 2010 at 09:57:05AM -0400, Ross Vandegrift wrote:
Thanks for the examples! I'm having trouble with the iptables piece
of the puzzle though. I suspect this is because I'm mirroring traffic
to this server and the L2 destination doesn't match any address
present on the
On Fri, Mar 26, 2010 at 01:29:13PM +, Paolo Lucente wrote:
I'm curious: if mirroring traffic to the box, why resorting to uacctd
and iptables/etables? You have pmacctd (libpcap-based) readily available
for such scenario. With uacctd covering the case where traffic is being
cleanly routed
Hi Ross,
On Fri, Mar 26, 2010 at 02:46:51PM -0400, Ross Vandegrift wrote:
I'm curious if I can acheive better performance for generating sflow
data. My plan was to use the iptables statistics module to do the
sampling, to ensure that only sampled packets were being sent to
userspace. Since
On Wed, Mar 24, 2010 at 05:30:23PM -0700, Stig Thormodsrud wrote:
Then I add the interfaces I want to iptables.
vya...@r1# iptables -t raw -nvL PREROUTING
Chain PREROUTING (policy ACCEPT 30 packets, 4236 bytes)
pkts bytes target prot opt in out source
destination
1608 85539
Ross Vandegrift wrote:
Hello,
Is there any documentation describing the setup required for uacctd?
I'd like to check this out, but can't quite figure out all the steps I
need to do in order to get things working.
Thanks,
Ross
Below is an example of uacctd that I'm running:
vya...@r1#
