[pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-12 Thread fireballiso
Hi! I've started using pmacctd to replace old netflow collectors for my main and test networks, which run both IPv6 and IPv4. It works very well, except that I haven't yet found a way to record the ICMP and ICMP6 types and codes. In other collectors, these are often stored in the destination port

Re: [pmacct-discussion] How to record ICMP and ICMP6 types/codes by pmacctd?

2020-04-13 Thread fireballiso
NetFlow but your config example is actually about the 'nfprobe' plugin, that is, generating NetFlow out of raw traffic. Is that what you are after? Paolo On Sun, Apr 12, 2020 at 04:20:08PM -0400, fireballiso wrote: Hi! I've started using pmacctd to replace old net

[pmacct-discussion] icmp6 netflow 9 not including type & code sometimes

2022-09-25 Thread fireballiso
Hi! I use pmacctd to generate netflow 9 for two interfaces on a physical (not virtual) Linux machine. The flows from one interface shows icmp and icmp6 protocols with the type and code as expected in the dst_port, and the other interface only shows icmp type and code correctly; the icmp6 type a

Re: [pmacct-discussion] icmp6 netflow 9 not including type & code sometimes

2022-09-26 Thread fireballiso
rrectly, but are always zeros. On 9/25/2022 10:21 PM, fireballiso wrote: Hi! I use pmacctd to generate netflow 9 for two interfaces on a physical (not virtual) Linux machine. The flows from one interface shows icmp and icmp6 protocols with the type and code as expected in the dst_port