22.09.2009 22:11, Paolo Lucente пишет: > Hi Slava, > > On Tue, Sep 22, 2009 at 07:11:24PM +0300, Slava Dubrovskiy wrote: > > >> I use networks_file that ip_src and ip_dst were grouped only in my >> networks. But I also need to count the traffic on networks entering in >> UA-IX (http://noc.ua-ix.net.ua/ua-list.txt) >> >> For this purpose I can use aggregate_filter. But I cannot use it, since >> the list ua-list.txt very big. >> > I'm not sure if i get it correctly: you want to get a traffic matrix > of local IP addresses and IP adresses reached through the UA-IX. > No, not correct.
Here such topology of a network. Local real IP -----router------------------UA-IX networks | ----------Other networks I wish to count only traffic from/to local IP. I.e. that in base were only my local IP. For this purpose I specify my local IP in networks_file and I aggregate by src_host, dst_host. I don't wish to store not local IP since then the base will be very big. Thus there are some networks (ua-list.txt) the traffic with which I need to count separately. So I make: aggregate[hourly]: src_host, dst_host aggregate[hourly_ua]: src_host, dst_host aggregate_filter[hourly_ua]: net 173.194.0.0/24 188.163.0.0/24 193.0.227.0/24 plugins: mysql[hourly], mysql[hourly_ua] sql_table[hourly]: acct_base sql_table[hourly_ua]: acct_base_ua networks_file: /etc/pmacct/networks.list But how can I separate traffic from/to UA-IX? I can use aggregate_filter for this. And it work fine. But networks list is very big :( And I can't add full list to aggregate_filter. I do not know how to explain in more details, sorry... :( > If that's the case, you can append the UA-IX networks to the local > ones in the file pointed by the "networks_file" directive(s). > > Say that X1 .. Xn is the set of your (or your customers) IP address > and Y1 .. Yn is the set of IP address reached through UA-IX and > Z1 .. Zn is the set of IP addresses reached via upstream providers, > you would see: > > Xm, Ym, .., bytes, packets : Outbound traffic to UA-IX > Ym, Xm, .., bytes, packets : Inbound traffic from UA-IX > Xm, 0, .., bytes, packets : Outbound traffic to upstream providers > 0, Xm, .., bytes, packets : Inbound traffic to upstream providers > > Another scenario can be to maintain as-is local IP addresses, while > aggregating at network boundary IP addresses reached via the UA-IX. > Just let me know if this is the case. > > If instead calculating traffic from/to UA-IX is something totally > separated from calculating traffic from/to local IP addresses (so, > you are not trying to build a traffic matrix), then you can freely > instantiate a plugin right for that task. > > Cheers, > Paolo > > > -- WBR, Dubrovskiy Vyacheslav
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists