Re: [pmacct-discussion] fswstatus
Le 2017-09-25 14:33, Paolo Lucente a écrit : > Hi Fabien, > > I support Emil's comment, just tried myself (same build, same compile > options as yours) and i don't get the 'unknown key' message back. On > your other question, when 1.7.0 will be out: later today the code in > GitHub master will be switched to 1.7.1 and 1.7.0 will be branched out > (freeed). I then expect 1.7.0 bo the released in a couple of weeks from > today, if no major issue is hit meanwhile. > > Paolo > > On Mon, Sep 25, 2017 at 10:45:38AM +0100, Emil wrote: Hello Fabien. > > I wrote the patch for fwdstatus; > my config looks like this: > > ! Only tag denys with 10 > set_tag2=10 fwdstatus=129 > set_tag2=20 fwdstatus=64 > > And it works. Can you check your source code and look for > "PT_map_fwdstatus_handler" > in src/pretag_handlers.c If that is present it _should_ work. > > Best Regards. > > 2017-09-25 8:22 GMT+01:00 Fabien VINCENT: > > Le 2017-09-25 03:41, Paolo Lucente a écrit : > > Hi Fabien, > > What version are you running? You can confirm this with a 'nfacctd -V'; > the feature was added in 1.7.0 (that is, master code on GitHub). I can > also confirm you, on your original question, that an atoi() is performed > on the input value - so you should express values in decimal. > > Paolo > > On Sun, Sep 24, 2017 at 10:28:22PM +0200, Fabien VINCENT wrote: > > Le 2017-09-22 15:23, Fabien VINCENT a écrit : > > Hi, > > I'm looking for some examples around fwdstatus on pretag > > _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see > https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific > semantics of the field and some examples._ > > How to use it ? I was looking to do king of pretag like > > set_tag=0 fwdstatus=00b > > set_tag=1 fwdstatus=01b > > set_tag=2 fwdstatus=10b > > Is it the way of dealing with this parameter ? > > -- > > FABIEN VINCENT > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > > Is the option available ? > Sep 24 22:30:13 INFO ( default/core ): Trying to (re)load map: > /etc/pmacct/nfacctd.pretag.map > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 2 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > > [22:30 root@netflows pmacct-master] > cat /etc/pmacct/nfacctd.pretag.map > set_tag=1 fwdstatus=65 > set_tag=2 fwdstatus=138 > > -- > > FABIEN VINCENT > --- > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > > I'm running the git master version (I tried) > > [15:36 root@netflows opt] > /usr/local/sbin/nfacctd -V > NetFlow Accounting Daemon, nfacctd 1.7.0-git (20170924-00) > > Arguments: > '--build=x86_64-linux-gnu' '--prefix=/usr/local' > '--includedir=${prefix}/include' > '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' > '--sysconfdir=/etc' '--localstatedir=/var' > '--libdir=/usr/lib/x86_64-linux-gnu' > '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' > '--disable-dependency-tracking' '--enable-mmap' '--enable-pgsql' > '--with-pgsql-includes=/usr/include/postgresql' '--enable-mysql' > '--enable-sqlite3' '--enable-ipv6' '--enable-v4-mapped' '--enable-64bit' > '--enable-threads' '--enable-jansson' '--enable-geoip' '--enable-ulog' > 'build_alias=x86_64-linux-gnu' '--enable-l2' '--enable-traffic-bins' > '--enable-bgp-bins' '--enable-bmp-bins' '--enable-st-bins' > > Libs: > libpcap version 1.6.2 > MySQL 5.5.57 > PostgreSQL 90413 > sqlite3 3.8.7.1 > jansson 2.7 > > System: > Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64 > > For suggestions, critics, bugs, contact me: Paolo Lucente < > pa...@pmacct.net>. > > But seems option not catched, I've always the log > > unknown key 'fwdstatus' at line > 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > > [09:23 root@netflows opt] > cat /etc/pmacct/nfacctd.pretag.map > set_tag=1 fwdstatus=65 > set_tag=2 fwdstatus=138 > > Any ETA for v1.7.0 out ? > > Thanks for your help. > > -- > *Fabien VINCENT* > --- > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists Hey, In fact, it works, I found a bug in my systemd/sysinit scripts so daemon was not launched with the right package. I fixed the daemon to start, on bash directly and it works ! Thanks for the patch, now looking why I have strange 60/62 decimal values on some exports. Thanks Emil for the patch and Paolo for the
Re: [pmacct-discussion] fswstatus
Hello Fabien. I wrote the patch for fwdstatus; my config looks like this: ! Only tag denys with 10 set_tag2=10 fwdstatus=129 set_tag2=20 fwdstatus=64 And it works. Can you check your source code and look for "PT_map_fwdstatus_handler" in src/pretag_handlers.c If that is present it _should_ work. Best Regards. 2017-09-25 8:22 GMT+01:00 Fabien VINCENT: > Le 2017-09-25 03:41, Paolo Lucente a écrit : > > > Hi Fabien, > > What version are you running? You can confirm this with a 'nfacctd -V'; > the feature was added in 1.7.0 (that is, master code on GitHub). I can > also confirm you, on your original question, that an atoi() is performed > on the input value - so you should express values in decimal. > > Paolo > > On Sun, Sep 24, 2017 at 10:28:22PM +0200, Fabien VINCENT wrote: > > Le 2017-09-22 15:23, Fabien VINCENT a écrit : > > Hi, > > I'm looking for some examples around fwdstatus on pretag > > _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see > https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific > semantics of the field and some examples._ > > How to use it ? I was looking to do king of pretag like > > set_tag=0 fwdstatus=00b > > set_tag=1 fwdstatus=01b > > set_tag=2 fwdstatus=10b > > Is it the way of dealing with this parameter ? > > -- > > FABIEN VINCENT > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > > > Is the option available ? > Sep 24 22:30:13 INFO ( default/core ): Trying to (re)load map: > /etc/pmacct/nfacctd.pretag.map > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 2 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > > [22:30 root@netflows pmacct-master] > cat /etc/pmacct/nfacctd.pretag.map > set_tag=1 fwdstatus=65 > set_tag=2 fwdstatus=138 > > -- > > FABIEN VINCENT > --- > > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > > I'm running the git master version (I tried) > > [15:36 root@netflows opt] > /usr/local/sbin/nfacctd -V > NetFlow Accounting Daemon, nfacctd 1.7.0-git (20170924-00) > > Arguments: > '--build=x86_64-linux-gnu' '--prefix=/usr/local' > '--includedir=${prefix}/include' > '--mandir=${prefix}/share/man' '--infodir=${prefix}/share/info' > '--sysconfdir=/etc' '--localstatedir=/var' > '--libdir=/usr/lib/x86_64-linux-gnu' > '--libexecdir=${prefix}/lib/x86_64-linux-gnu' '--disable-maintainer-mode' > '--disable-dependency-tracking' '--enable-mmap' '--enable-pgsql' > '--with-pgsql-includes=/usr/include/postgresql' '--enable-mysql' > '--enable-sqlite3' '--enable-ipv6' '--enable-v4-mapped' '--enable-64bit' > '--enable-threads' '--enable-jansson' '--enable-geoip' '--enable-ulog' > 'build_alias=x86_64-linux-gnu' '--enable-l2' '--enable-traffic-bins' > '--enable-bgp-bins' '--enable-bmp-bins' '--enable-st-bins' > > Libs: > libpcap version 1.6.2 > MySQL 5.5.57 > PostgreSQL 90413 > sqlite3 3.8.7.1 > jansson 2.7 > > System: > Linux 3.16.0-4-amd64 #1 SMP Debian 3.16.39-1+deb8u2 (2017-03-07) x86_64 > > For suggestions, critics, bugs, contact me: Paolo Lucente < > pa...@pmacct.net>. > > > But seems option not catched, I've always the log > > unknown key 'fwdstatus' at line > 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > > [09:23 root@netflows opt] > cat /etc/pmacct/nfacctd.pretag.map > set_tag=1 fwdstatus=65 > set_tag=2 fwdstatus=138 > > Any ETA for v1.7.0 out ? > > > Thanks for your help. > > > > -- > *Fabien VINCENT* > --- > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] fswstatus
Hi Fabien, What version are you running? You can confirm this with a 'nfacctd -V'; the feature was added in 1.7.0 (that is, master code on GitHub). I can also confirm you, on your original question, that an atoi() is performed on the input value - so you should express values in decimal. Paolo On Sun, Sep 24, 2017 at 10:28:22PM +0200, Fabien VINCENT wrote: > Le 2017-09-22 15:23, Fabien VINCENT a écrit : > > > Hi, > > > > I'm looking for some examples around fwdstatus on pretag > > > > _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see > > https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific > > semantics of the field and some examples._ > > > > How to use it ? I was looking to do king of pretag like > > > > set_tag=0 fwdstatus=00b > > > > set_tag=1 fwdstatus=01b > > > > set_tag=2 fwdstatus=10b > > > > Is it the way of dealing with this parameter ? > > > > -- > > > > FABIEN VINCENT > > ___ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > Is the option available ? > Sep 24 22:30:13 INFO ( default/core ): Trying to (re)load map: > /etc/pmacct/nfacctd.pretag.map > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line > 2 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. > > [22:30 root@netflows pmacct-master] > cat /etc/pmacct/nfacctd.pretag.map > set_tag=1 fwdstatus=65 > set_tag=2 fwdstatus=138 > > -- > > FABIEN VINCENT > --- > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] fswstatus
Le 2017-09-22 15:23, Fabien VINCENT a écrit : > Hi, > > I'm looking for some examples around fwdstatus on pretag > > _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see > https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific semantics > of the field and some examples._ > > How to use it ? I was looking to do king of pretag like > > set_tag=0 fwdstatus=00b > > set_tag=1 fwdstatus=01b > > set_tag=2 fwdstatus=10b > > Is it the way of dealing with this parameter ? > > -- > > FABIEN VINCENT > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists Is the option available ? Sep 24 22:30:13 INFO ( default/core ): Trying to (re)load map: /etc/pmacct/nfacctd.pretag.map Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line 1 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. Sep 24 22:30:13 ERROR ( default/core ): unknown key 'fwdstatus' at line 2 in map '/etc/pmacct/nfacctd.pretag.map'. Ignored. [22:30 root@netflows pmacct-master] > cat /etc/pmacct/nfacctd.pretag.map set_tag=1 fwdstatus=65 set_tag=2 fwdstatus=138 -- FABIEN VINCENT ---___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
[pmacct-discussion] fswstatus
Hi, I'm looking for some examples around fwdstatus on pretag _'fwdstatus' MATCH: In NFv9/IPFIX this is compared against IE #89; see https://www.iana.org/assignments/ipfix/ipfix.xhtml for the specific semantics of the field and some examples._ How to use it ? I was looking to do king of pretag like set_tag=0 fwdstatus=00b set_tag=1 fwdstatus=01b set_tag=2 fwdstatus=10b Is it the way of dealing with this parameter ? -- FABIEN VINCENT___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists