I've been searching the mail archives for info on this topic and found a thread suggesting to running an instance of pmacctd per interface (using the ifindex as the engine_id) and use the nfprobe plugin to export all instances to nfacctd on localhost. Then in nfacctd I added a pre_tag_map to map the engine_id to an "id" tag. For nfacctd I was using the memory plugin and able to see the different interfaces in the "id" field. This all seem to work ok, but I really don't want all the netflow data on the router, but rather exported to a netflow collector. So then I tried to add a nfprobe plugin to the nfacctd to get it off the router, but the external collector only seems to see flows from one interface and all the engine_id are reset to 0.
The next thing I tried was to have each interface/instance of pmacctd use the nfprobe to export to an external collector (again using engine_id per ifindex). This seemed to work better, but I'm still wondering if there is a way to actually set the input interface in the netflow record going out from nfprobe? Thanks, stig _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
