Hello,
I'm new to this software so, please, forgive me if i made some stupid
mistakes or took wrong assumptions.
Anyway i'm unable to properly collect aggregate per src_ip and dst_ip
traffic statistics with pmacct runing on a linux box attached to a pair
of gigabit SPAN ports.
If i understand the problem correctly, the software is not accounting
MPLS labeled packets ( SRC_IP is not showing up ).
The configuration file is fairly simple:
!
daemonize: false
interface: eth3
pcap_filter: dst net 192.0.2.0/24 or dst net 198.51.100.0/24 or dst net
203.0.113.0/24
aggregate: dst_host
plugins: memory
imt_path: /tmp/pmacctd.mpls_dst_eth3.pipe
imt_mem_pools_number: 1024
imt_mem_pools_size: 524288
plugin_pipe_size: 52428800
plugin_buffer_size: 65536
!
( I raised imt_mem_pools_number, imt_mem_pools_size, plugin_pipe_size,
plugin_buffer_size to get rid of the many warnings i found during a
debug session. )
If i replace the above pcap_filter with "mpls ( dst net 192.0.2.0/24 or
dst net 198.51.100.0/24 or dst net 203.0.113.0/24 )" i see a lot of
non-sense entries
in the pipe:
DST_IP PACKETS BYTES
0.25.26.49 2 126976
0.0.0.85 1 256
0.32.243.31 1 17582
0.236.127.195 2 123684
0.24.103.82 1 9147
0.64.223.99 1 58360
PMACCT version is 0.12.5-4, Linux version is Ubuntu 12.4LTS and Kernel
version is 3.2.0-37-generic-pae.
Can You, please, help?
Thank You
Regards
--
Marco Marzetti
Responsabile R&D
D 0363 1970353
Qcom <http://www.qcom.it/> Qcom SpA via Roggia Vignola, 9 - Treviglio
(BG)
T 0363 47905 - F 0363 1970297 - www.qcom.it <http://www.qcom.it>
_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists