On 08/16/2010 01:38:22 PM, Borys Owczarzak wrote:
> Hi!
> 
> I would like to account data (src_ip, dst_ip, src_port, dst_port, 
> ip_proto, tcp_flags and time ) to mysql database. Every packet in new 
> row (no UPDATE's, only INSERT's).

> PROBLEM:
> 
> Why in some records number of packets are more than one?

pmacct aggregates and summarizes data, in your case once
a second.  You can have more than one packet each second
to the same source/destination pair.
If you really want to record each packet (I have not looked
closely at your config) you may want to consider
something other than pmacct, perhaps piping
tcpdump output to a script that does inserts into your
database.

You may wish to describe the problem your trying to solve
and see if someone has a solution.



Karl <[email protected]>
Free Software:  "You don't pay back, you pay forward."
                 -- Robert A. Heinlein


_______________________________________________
pmacct-discussion mailing list
http://www.pmacct.net/#mailinglists

Reply via email to