Hi. Need switch on sampling and begin get such errors:
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
*** buffer overflow detected ***: nfacctd: Core Process [default]
terminated
======= Backtrace:
=========
/lib/libc.so.6(__fortify_fail+0x40)[0xb7d74af0]
/lib/libc.so.6[0xb7d72d10]
nfacctd: Core Process
[default](NF_counters_renormalize_handler+0xd0)[0x8062290]
nfacctd: Core Process
[default](exec_plugins+0x1a8)[0x805b968]
nfacctd: Core Process
[default](process_v9_packet+0x3a4)[0x80567a4]
nfacctd: Core Process
[default](main+0x1367)[0x8058957]
/lib/libc.so.6(__libc_start_main+0xe6)[0xb7cadb26]
nfacctd: Core Process
[default][0x80551e1]
======= Memory map:
========
08048000-080ac000 r-xp 00000000 fd:00 18497590
/usr/sbin/nfacctd-mysql
080ac000-080ad000 r--p 00063000 fd:00 18497590
/usr/sbin/nfacctd-mysql
080ad000-080ae000 rw-p 00064000 fd:00 18497590
/usr/sbin/nfacctd-mysql
080ae000-080da000 rw-p 080ae000 00:00
0
08ee0000-08f31000 rw-p 08ee0000 00:00 0
[heap]
ab825000-ab842000 r-xp 00000000 fd:00 24199173
/lib/libgcc_s.so.1
ab842000-ab843000 r--p 0001c000 fd:00 24199173
/lib/libgcc_s.so.1
ab843000-ab844000 rw-p 0001d000 fd:00 24199173
/lib/libgcc_s.so.1
ab847000-ab90b000 rw-p ab847000 00:00
0
ab90b000-ab90c000 rw-s 00000000 00:20
168834146
ab90c000-adfa8000 rw-s 00000000 00:20
168834139
adfa8000-adfa9000 rw-s 00000000 00:20
168834136
adfa9000-b0645000 rw-s 00000000 00:20
168834114
b0645000-b0646000 rw-s 00000000 00:20
168834110
b0646000-b2ce2000 rw-s 00000000 00:20
168834108
b2ce2000-b2ce3000 rw-s 00000000 00:20
168834104
b2ce3000-b537f000 rw-s 00000000 00:20
168834101
b537f000-b7a1b000 rw-s 00000000 00:20
168834095
b7a1b000-b7a1d000 rw-p b7a1b000 00:00
0
b7a1d000-b7a2f000 r-xp 00000000 fd:00 10472244
/lib/libresolv-2.10.1.so
b7a2f000-b7a30000 r--p 00011000 fd:00 10472244
/lib/libresolv-2.10.1.so
b7a30000-b7a31000 rw-p 00012000 fd:00 10472244
/lib/libresolv-2.10.1.so
b7a31000-b7a33000 rw-p b7a31000 00:00
0
b7a33000-b7a35000 r-xp 00000000 fd:00 24199253
/lib/libkeyutils-1.2.so
b7a35000-b7a36000 r--p 00001000 fd:00 24199253
/lib/libkeyutils-1.2.so
b7a36000-b7a37000 rw-p 00002000 fd:00 24199253
/lib/libkeyutils-1.2.so
b7a37000-b7a38000 rw-p b7a37000 00:00
0
b7a38000-b7a3f000 r-xp 00000000 fd:00 10471725
/lib/libkrb5support.so.0.1
b7a3f000-b7a40000 r--p 00006000 fd:00 10471725
/lib/libkrb5support.so.0.1
b7a40000-b7a41000 rw-p 00007000 fd:00 10471725
/lib/libkrb5support.so.0.1
b7a41000-b7a43000 r-xp 00000000 fd:00 24199183
/lib/libcom_err.so.2.1
b7a43000-b7a44000 r--p 00001000 fd:00 24199183
/lib/libcom_err.so.2.1
b7a44000-b7a45000 rw-p 00002000 fd:00 24199183
/lib/libcom_err.so.2.1
b7a45000-b7a67000 r-xp 00000000 fd:00 10471720
/lib/libk5crypto.so.3.1
b7a67000-b7a68000 r--p 00021000 fd:00 10471720
/lib/libk5crypto.so.3.1
b7a68000-b7a69000 rw-p 00022000 fd:00 10471720
/lib/libk5crypto.so.3.1
b7a69000-b7af6000 r-xp 00000000 fd:00 10471722
/lib/libkrb5.so.3.3
b7af6000-b7af8000 r--p 0008c000 fd:00 10471722
/lib/libkrb5.so.3.3
b7af8000-b7af9000 rw-p 0008e000 fd:00 10471722
/lib/libkrb5.so.3.3
b7af9000-b7b0d000 r-xp 00000000 fd:00 24199198
/lib/libz.so.1.2.3
b7b0d000-b7b0e000 r--p 00013000 fd:00 24199198
/lib/libz.so.1.2.3
b7b0e000-b7b0f000 rw-p 00014000 fd:00 24199198
/lib/libz.so.1.2.3
b7b0f000-b7b10000 rw-p b7b0f000 00:00
0
b7b10000-b7c34000 r-xp 00000000 fd:00 10471624
/lib/libcrypto.so.0.9.8k
b7c34000-b7c3c000 r--p 00123000 fd:00 10471624
/lib/libcrypto.so.0.9.8k
b7c3c000-b7c4a000 rw-p 0012b000 fd:00 10471624
/lib/libcrypto.so.0.9.8k
b7c4a000-b7c4d000 rw-p b7c4a000 00:00
0
b7c4d000-b7c93000 r-xp 00000000 fd:00 10471727
/lib/libssl.so.0.9.8k
b7c93000-b7c94000 r--p 00046000 fd:00 10471727
/lib/libssl.so.0.9.8k
b7c94000-b7c97000 rw-p 00047000 fd:00 10471727
/lib/libssl.so.0.9.8k
b7c97000-b7de9000 r-xp 00000000 fd:00 10472065
/lib/libc-2.10.1.so
b7de9000-b7dea000 ---p 00152000 fd:00 10472065
/lib/libc-2.10.1.so
b7dea000-b7dec000 r--p 00152000 fd:00 10472065
/lib/libc-2.10.1.so
b7dec000-b7ded000 rw-p 00154000 fd:00 10472065
/lib/libc-2.10.1.so
b7ded000-b7df0000 rw-p b7ded000 00:00
0
b7df0000-b7e05000 r-xp 00000000 fd:00 24199176
/lib/libpthread-2.10.1.so
b7e05000-b7e06000 r--p 00014000 fd:00 24199176
/lib/libpthread-2.10.1.so
b7e06000-b7e07000 rw-p 00015000 fd:00 24199176
/lib/libpthread-2.10.1.so
b7e07000-b7e09000 rw-p b7e07000 00:00
0
b7e09000-b7e0c000 r-xp 00000000 fd:00 10472228
/lib/libdl-2.10.1.so
b7e0c000-b7e0d000 r--p 00002000 fd:00 10472228
/lib/libdl-2.10.1.so
b7e0d000-b7e0e000 rw-p 00003000 fd:00 10472228
/lib/libdl-2.10.1.so
b7e0e000-b7e35000 r-xp 00000000 fd:00 10278116
/usr/lib/libpcap.so.0.9.7
b7e35000-b7e36000 r--p 00026000 fd:00 10278116
/usr/lib/libpcap.so.0.9.7
b7e36000-b7e37000 rw-p 00027000 fd:00 10278116
/usr/lib/libpcap.so.0.9.7
b7e37000-b7f53000 r-xp 00000000 fd:00 10274742
/usr/lib/libmysqlclient.so.15.0.0
b7f53000-b7f55000 r--p 0011b000 fd:00 10274742
/usr/lib/libmysqlclient.so.15.0.0
b7f55000-b7f96000 rw-p 0011d000 fd:00 10274742
/usr/lib/libmysqlclient.so.15.0.0
b7f96000-b7f98000 rw-p b7f96000 00:00
0
b7f99000-b7f9a000 rw-s 00000000 00:20
168834097
b7f9a000-b7f9b000 rw-p b7f9a000 00:00
0
b7f9b000-b7fb6000 r-xp 00000000 fd:00 10472049
/lib/ld-2.10.1.so
b7fb6000-b7fb7000 r--p 0001a000 fd:00 10472049
/lib/ld-2.10.1.so
b7fb7000-b7fb8000 rw-p 0001b000 fd:00 10472049
/lib/ld-2.10.1.so
bffaf000-bffb8000 rw-p bffaf000 00:00 0
[stack]
Aborted
My config:
debug: true
! daemonize: true
! syslog: daemon
pidfile: /var/run/nfacctd.pid
refresh_maps: true
nfacctd_port: 8818
plugin_buffer_size: 404800
plugin_pipe_size: 40480000
networks_file: /etc/pmacct/networks.list
ports_file: /etc/pmacct/ports.list
pre_tag_map: /etc/pmacct/pretag.map
! pre_tag_map_entries: 50000
! storage methods
sql_host: 91.206.xx.xx
sql_passwd: xxxxxxxx
! optimize SQL
nfacctd_time_new: true
sql_multi_values: 1000000
sql_locking_style: row
sql_table_version: 4
! sql_preprocess: minp=1, usrf=100
nfacctd_renormalize: true
! typi of storage
plugins: mysql[t1], mysql[t2], mysql[t3], mysql[t4], memory[t5]
aggregate[t1]: src_host, dst_host, src_port, dst_port, proto
aggregate[t2]: tag2
aggregate[t3]: src_host, dst_host
aggregate[t4]: tag2
aggregate[t5]: src_host, dst_host
sql_table[t1]: acct_t1
sql_history_roundoff[t1]: h
sql_history[t1]: 1h
sql_refresh_time[t1]: 3600
sql_dont_try_update[t1]: true
sql_recovery_logfile[t1]: /var/lib/pmacct/recovery_log_t1
sql_table[t2]: acct_t2
sql_history_roundoff[t2]: h
sql_history[t2]: 1h
sql_refresh_time[t2]: 3600
sql_dont_try_update[t2]: true
sql_recovery_logfile[t2]: /var/lib/pmacct/recovery_log_t2
sql_table[t3]: acct_t3
sql_history_roundoff[t3]: d
sql_history[t3]: 1d
sql_refresh_time[t3]: 3600
sql_dont_try_update[t3]: false
sql_recovery_logfile[t3]: /var/lib/pmacct/recovery_log_t3
sql_table[t4]: acct_t4
sql_history_roundoff[t4]: d
sql_history[t4]: 1d
sql_refresh_time[t4]: 3600
sql_dont_try_update[t4]: false
sql_recovery_logfile[t4]: /var/lib/pmacct/recovery_log_t4
If I set
sql_preprocess: usrf=100
! nfacctd_renormalize: true
seems working, but I see every sec
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
268 [192.168.21.1:0])
DEBUG ( default/core ): Discarded NetFlow V9 packet (R: unknown template
269 [192.168.21.1:0])
Can you help?
--
WBR,
Dubrovskiy Vyacheslav
smime.p7s
Description: S/MIME Cryptographic Signature
_______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
