Re: [pmacct-discussion] Inconsistent Data
That is exactly what I had done! On 8 Nov 2016 10:17 pm, "Paolo Lucente" wrote: > > Hi Cameron, > > Is it possible you restarted pmacct using pmacctd instead of nfacctd? > Your description of what is happening would match 100% with that. > > Cheers, > Paolo > > On Tue, Nov 08, 2016 at 01:53:59PM +1000, Cameron Murray wrote: > > Further to this it does appear that it is only recordings data flows for > > itself and not the rest of the network. > > > > On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray < > cameron.mur...@gmail.com> > > wrote: > > > > > Guys & Gals, > > > > > > I have been running PMACCT since September last year v1.5.2 and today I > > > have upgraded to v1.6.1. > > > > > > I am pushing the data collected to two separate MySQL tables; acct_in & > > > acct_out > > > > > > Based on our traffic flow the data being entered into the database does > > > not appear to be correct. I've been watching the database not for an > hour > > > and there is only a dozen entries. In previous versions there would be > > > thousands of our IP's showing now. > > > > > > Our Config: > > > > > > daemonize: true > > > > > > nfacctd_port: 9996 > > > > > > nfacctd_time_new: true > > > > > > > > > plugins: mysql[inbound], mysql[outbound] > > > > > > > > > sql_db: db_name > > > > > > sql_host: localhost > > > > > > sql_user: db_user > > > > > > sql_passwd: db_password > > > > > > > > > sql_refresh_time: 15 > > > > > > sql_table_version: 8 > > > > > > > > > aggregate[inbound]: dst_host > > > > > > aggregate[outbound]: src_host > > > > > > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or > > > 103.x.x.0/24 or 103.x.x.0/23 > > > > > > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or > > > 103.x.x.0/24 or 103.x.x.0/23 > > > > > > > > > sql_table[inbound]: acct_in > > > > > > sql_table[outbound]: acct_out > > > > > > > > > From what I can see, it looks like only data communicating with the > server > > > from the filtered subnets is being recorded to the DB where infact I > only > > > want data communicated in and out of our ranges to be written to allow > us > > > to monitor and bill customers data. > > > > > > This used to work, all the documents seem to outline that this is the > > > correct way to only store data too and from our Subnets? > > > > > > > > > Your assistance is appreciated! > > > > > > Regards > > > > > > Cameron > > > > > > > > > ___ > > pmacct-discussion mailing list > > http://www.pmacct.net/#mailinglists > > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists > ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] Inconsistent Data
Hi Cameron, Is it possible you restarted pmacct using pmacctd instead of nfacctd? Your description of what is happening would match 100% with that. Cheers, Paolo On Tue, Nov 08, 2016 at 01:53:59PM +1000, Cameron Murray wrote: > Further to this it does appear that it is only recordings data flows for > itself and not the rest of the network. > > On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray > wrote: > > > Guys & Gals, > > > > I have been running PMACCT since September last year v1.5.2 and today I > > have upgraded to v1.6.1. > > > > I am pushing the data collected to two separate MySQL tables; acct_in & > > acct_out > > > > Based on our traffic flow the data being entered into the database does > > not appear to be correct. I've been watching the database not for an hour > > and there is only a dozen entries. In previous versions there would be > > thousands of our IP's showing now. > > > > Our Config: > > > > daemonize: true > > > > nfacctd_port: 9996 > > > > nfacctd_time_new: true > > > > > > plugins: mysql[inbound], mysql[outbound] > > > > > > sql_db: db_name > > > > sql_host: localhost > > > > sql_user: db_user > > > > sql_passwd: db_password > > > > > > sql_refresh_time: 15 > > > > sql_table_version: 8 > > > > > > aggregate[inbound]: dst_host > > > > aggregate[outbound]: src_host > > > > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or > > 103.x.x.0/24 or 103.x.x.0/23 > > > > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or > > 103.x.x.0/24 or 103.x.x.0/23 > > > > > > sql_table[inbound]: acct_in > > > > sql_table[outbound]: acct_out > > > > > > From what I can see, it looks like only data communicating with the server > > from the filtered subnets is being recorded to the DB where infact I only > > want data communicated in and out of our ranges to be written to allow us > > to monitor and bill customers data. > > > > This used to work, all the documents seem to outline that this is the > > correct way to only store data too and from our Subnets? > > > > > > Your assistance is appreciated! > > > > Regards > > > > Cameron > > > > > ___ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
Re: [pmacct-discussion] Inconsistent Data
Further to this it does appear that it is only recordings data flows for itself and not the rest of the network. On Tue, Nov 8, 2016 at 12:06 PM, Cameron Murray wrote: > Guys & Gals, > > I have been running PMACCT since September last year v1.5.2 and today I > have upgraded to v1.6.1. > > I am pushing the data collected to two separate MySQL tables; acct_in & > acct_out > > Based on our traffic flow the data being entered into the database does > not appear to be correct. I've been watching the database not for an hour > and there is only a dozen entries. In previous versions there would be > thousands of our IP's showing now. > > Our Config: > > daemonize: true > > nfacctd_port: 9996 > > nfacctd_time_new: true > > > plugins: mysql[inbound], mysql[outbound] > > > sql_db: db_name > > sql_host: localhost > > sql_user: db_user > > sql_passwd: db_password > > > sql_refresh_time: 15 > > sql_table_version: 8 > > > aggregate[inbound]: dst_host > > aggregate[outbound]: src_host > > aggregate_filter[inbound]: dst net 27.x.x.0/24 or 27.x.x.0/24 or > 103.x.x.0/24 or 103.x.x.0/23 > > aggregate_filter[outbound]: src net 27.x.x.0/24 or 27.x.x.0/24 or > 103.x.x.0/24 or 103.x.x.0/23 > > > sql_table[inbound]: acct_in > > sql_table[outbound]: acct_out > > > From what I can see, it looks like only data communicating with the server > from the filtered subnets is being recorded to the DB where infact I only > want data communicated in and out of our ranges to be written to allow us > to monitor and bill customers data. > > This used to work, all the documents seem to outline that this is the > correct way to only store data too and from our Subnets? > > > Your assistance is appreciated! > > Regards > > Cameron > > ___ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
