Re: [pmacct-discussion] pmacct vs tcpdump
Probably writing script or db with triggers is the best variant. Thanks all for answer and your time ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] pmacct vs tcpdump
On Fri, 12 May 2017 00:09:00 + Paolo Lucente wrote: > pmacct gives you absolute counters and time reference. Say, between > 02:00 and 02:05 there have been 1GB transferred. So, while i confirm > pmacct can't give you the counters how you need them, you can easily > derive them. My recommendation would be to handle this post-processing > data output by pmacct, probably what you meant with your #2 option. I.e. Feed pmacct output, which classifies and totals and thereby reduces data volume, to a database or even a file and then run queries against the db. Or feed it to a time-series circular db, like rrdtool etc., through your own filter that analyzes, so you never have to delete old data. In the latter case the pmacct in-memory method can be good choice on the pmacct side. Or use a db that supports triggers to do the analysis on input into the db. Etc. Whatever works. Regards, Karl Free Software: "You don't pay back, you pay forward." -- Robert A. Heinlein ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] pmacct vs tcpdump
Hi, pmacct gives you absolute counters and time reference. Say, between 02:00 and 02:05 there have been 1GB transferred. So, while i confirm pmacct can't give you the counters how you need them, you can easily derive them. My recommendation would be to handle this post-processing data output by pmacct, probably what you meant with your #2 option. Paolo On Thu, May 11, 2017 at 08:33:31PM +0300, Black.S wrote: > Hello all > I'm nube in pmacct and network analyze. > I want to analyze network content in my local network. I want to get > traffic by flow: > - bw/packet count per hour > - arithmetic average, median, quartile of bw/packet count > > Can I get its metrics by pmacct ? > I look to tcpdump but it also cant have some filters. > > I have two ways > 1) edit and add code to pmacct (it take some time for understand pmacct) > 2) write script for pmacct or tcpdump (low performance) > > Which way is right ? > Can pmacct get me my metrics ? > > Thanks for you time > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
[pmacct-discussion] pmacct vs tcpdump
Hello all I'm nube in pmacct and network analyze. I want to analyze network content in my local network. I want to get traffic by flow: - bw/packet count per hour - arithmetic average, median, quartile of bw/packet count Can I get its metrics by pmacct ? I look to tcpdump but it also cant have some filters. I have two ways 1) edit and add code to pmacct (it take some time for understand pmacct) 2) write script for pmacct or tcpdump (low performance) Which way is right ? Can pmacct get me my metrics ? Thanks for you time ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
