Hi Paolo, Thanks, that's exactly what I was looking for ;)
I added some small extensions to pmacctd to avoid the use of the skinny BGP daemon thread. I that know using this internal daemon has advantages, but the memory requirements for this are not acceptable for my equipment. I'm using AF_UNIX sockets to fetch BGP ASN information directly from Quagga' bgpd daemon (a better solution would be pushing this information into FIB, like Cisco does, but that would make things harder to implement). If anyone is interested in these patches let me know. Thanks again, Renato 2012/7/13 Paolo Lucente <pa...@pmacct.net>: > Hi Renato, > > What you are looking for should be 'nfprobe_peer_as: true'. > > Cheers, > Paolo > > On Mon, Jul 09, 2012 at 10:40:41AM -0300, Renato Westphal wrote: >> Hi all, >> >> I'm not managing to get pmacctd (v0.14.0) to send BGP peer-AS >> information via Netflow-v9. Here is the config I'm using: >> >> ------------------- >> debug: true >> daemonize: false >> interface: tap0 >> ! >> aggregate[out]: src_mac, dst_mac, src_host, dst_host, src_port, >> dst_port, proto, peer_dst_as >> aggregate_filter[out]: icmp and ether src f6:be:9b:cc:8b:e6 >> aggregate[in]: src_mac, dst_mac, src_host, dst_host, src_port, >> dst_port, proto, peer_src_as >> aggregate_filter[in]: icmp and ether src !(f6:be:9b:cc:8b:e6) >> ! >> plugins: nfprobe[out],nfprobe[in] >> ! >> nfprobe_direction[in]:in >> nfprobe_direction[out]:out >> ! >> nfprobe_receiver: 127.0.0.1:9996 >> nfprobe_version: 9 >> nfprobe_timeouts: maxlife=10:general=10:icmp=10:expint=10 >> ! >> pmacctd_as: bgp >> bgp_daemon: true >> bgp_daemon_ip: 127.0.0.1 >> bgp_peer_src_as_type: bgp >> bgp_agent_map: /home/renato/netflow/conf/agent_to_peer.map >> bgp_daemon_port: 17917 >> ------------------- >> >> It works if I use src_as/dst_as instead of peer_src_as/peer_dst_as, >> but now I'm more interested in BGP peer AS information rather than BGP >> origin AS information. I don't know what I'm doing wrong.. any ideas? >> >> Regards, >> -- >> Renato Westphal >> >> _______________________________________________ >> pmacct-discussion mailing list >> http://www.pmacct.net/#mailinglists > > _______________________________________________ > pmacct-discussion mailing list > http://www.pmacct.net/#mailinglists -- Renato Westphal _______________________________________________ pmacct-discussion mailing list http://www.pmacct.net/#mailinglists
